Cross site request forgery (csrf)

D-Link DIR-601 B1 2.00NA devices have CSRF because no anti-CSRF token is implemented. A remote attacker could exploit this in conjunction with CVE-2019-16327 to enable remote router management and device compromise. NOTE: this is an end-of-life product...

CVE-2019-16327

D-Link DIR-601 B1 2.00NA devices are vulnerable to authentication bypass. They do not check for authentication at the server side and rely on client-side validation, which is bypassable. NOTE: this is an end-of-life product...

CVE-2019-16327

CVE-2019-16327 affects the D-Link DIR-601 B1 router (version 2.00NA). The vulnerability is an authentication bypass where the device does not enforce authentication on the server side, relying on client-side validation, which is bypassable. It is documented alongside a related CSRF issue (CVE-201...

CVE-2019-16326

D-Link DIR-601 B1 2.00NA devices have CSRF because no anti-CSRF token is implemented. A remote attacker could exploit this in conjunction with CVE-2019-16327 to enable remote router management and device compromise. NOTE: this is an end-of-life product...

CVE-2019-16326

CVE-2019-16326 affects the D-Link DIR-601 B1 (firmware 2.00NA). It describes a CSRF vulnerability due to absence of an anti‑CSRF token, enabling potential remote router management when combined with CVE-2019-16327. The end‑of‑life DIR‑601 B1 is noted in the entry. The connected documents also ref...

The vulnerability of the ext4_empty_dir function (fs/ext4/namei.c) in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ext4emptydir function fs/ext4/namei.c in the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability allows an attacker to cause a service failure...

PT-2019-14628

Name of the Vulnerable Software and Affected Versions D-Link DIR-601 B1 version 2.00NA Description The issue is related to the lack of an anti-CSRF token, making the device susceptible to CSRF attacks. A remote attacker could potentially exploit this, in conjunction with other vulnerabilities, to...

PT-2019-4534

Name of the Vulnerable Software and Affected Versions D-Link DIR-601 B1 version 2.00NA Description The issue is related to authentication bypass in the D-Link DIR-601 router. It does not perform authentication checks on the server side, instead relying on client-side validation, which can be...

CVE-2019-16327: Improper Authentication

D-Link DIR-601 B1 2.00NA devices are vulnerable to authentication bypass. They do not check for authentication at the server side and rely on client-side validation, which is bypassable. NOTE: this is an end-of-life product...

CVE-2019-16326: Cross-Site Request Forgery (CSRF)

D-Link DIR-601 B1 2.00NA devices have CSRF because no anti-CSRF token is implemented. A remote attacker could exploit this in conjunction with CVE-2019-16327 to enable remote router management and device compromise. NOTE: this is an end-of-life product...

D-Link DIR-601 B1 CVE-2019-16326 Cross Site Request Forgery Vulnerability

Description D-Link DIR-601 B1 is prone to a cross-site request-forgery vulnerability. An attacker can exploit this issue to perform certain unauthorized actions and gain access to the affected application. Other attacks are also possible. D-Link DIR-601 B1 2.00NA is vulnerable; other versions may...

D-Link DIR-601 CVE-2019-16327 Authentication Bypass Vulnerability

Description D-Link DIR-601 is prone to an authentication-bypass vulnerability. An attacker can exploit this issue to bypass authentication mechanism and perform unauthorized actions. This may lead to further attacks. D-Link DIR-601 Router 2.00NA is vulnerable; other versions may also be affected...

D-Link DIR-859 Unauthenticated Remote Command Execution

D-Link DIR-859 Routers are vulnerable to OS command injection via the UPnP interface. The vulnerability exists in /gena.cgi function genacgimain in /htdocs/cgibin, which is accessible without credentials. Module Options msf use exploit/linux/upnp/dlink/dir859subscribeexec msf...

D-Link DIR-859 Routers CVE-2019-20213 Information Disclosure Vulnerability

Description D-Link DIR-859 routers are prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information and perform unauthorized actions. Versions prior to D-Link DIR-859 1.07b03beta are vulnerable. Technologies Affected D-Link DIR-859 1.05 D-Link...

CVE-2019-19742

On D-Link DIR-615 devices, the User Account Configuration page is vulnerable to blind XSS via the name field...

CVE-2019-19742

On D-Link DIR-615 devices, the User Account Configuration page is vulnerable to blind XSS via the name field...

Cross site scripting

On D-Link DIR-615 devices, the User Account Configuration page is vulnerable to blind XSS via the name field...

CVE-2019-19742

CVE-2019-19742 affects D-Link DIR-615 routers, where the User Account Configuration page is vulnerable to blind XSS via the name field. Connected sources substantiate a lack of proper input validation on the web UI leading to client-side script execution; exploitation steps reported include inser...

D-Link DIR-615 Authorization Issues Vulnerability

D-Link DIR-615 is a small wireless router product from AUO D-Link. The D-Link DIR-615 is vulnerable to an authorization issue. An attacker can exploit this vulnerability by sniffing network traffic to obtain the IP address of the user and the router, or even obtain a public IP address and take ov...

PT-2019-15941

Name of the Vulnerable Software and Affected Versions D-Link DIR-615 affected versions not specified Description The issue concerns a blind XSS vulnerability in the User Account Configuration page, specifically via the name field. Recommendations At the moment, there is no information about a new...