9853 matches found
CVE-2018-10996
The CVE-2018-10996 issue affects D-Link DIR-629-B1 routers, specifically the weblogin_log function in /htdocs/cgibin. A long REMOTE_ADDR in a session.cgi?ACTION=logout request can trigger a buffer overflow, allowing arbitrary code execution or a denial of service. No remediation details are provi...
CVE-2018-10996: Improper Restriction of Operations within the Bounds of a Memory Buffer
The webloginlog function in /htdocs/cgibin on D-Link DIR-629-B1 devices allows attackers to execute arbitrary code or cause a denial of service buffer overflow via a session.cgi?ACTION=logout request involving a long REMOTEADDR environment variable...
Cross site request forgery (csrf)
CSRF exists on D-Link DIR-868L devices, leading to for example a change to the Admin password. hedwig.cgi and pigwidgeon.cgi are two of the affected components...
CVE-2018-10957
CSRF exists on D-Link DIR-868L devices, leading to for example a change to the Admin password. hedwig.cgi and pigwidgeon.cgi are two of the affected components...
CVE-2018-10957
CSRF exists on D-Link DIR-868L devices, leading to for example a change to the Admin password. hedwig.cgi and pigwidgeon.cgi are two of the affected components...
CVE-2018-10957
CSRF exists on D-Link DIR-868L devices, leading to for example a change to the Admin password. hedwig.cgi and pigwidgeon.cgi are two of the affected components...
CVE-2018-10957
CVE-2018-10957 affects the D-Link DIR-868L router. The vulnerability is a CSRF in the affected components hedwig.cgi and pigwidgeon.cgi that can allow a remote attacker to perform actions such as changing the Admin password. Impact is described across multiple sources; no official patch/version i...
CVE-2018-10957: Cross-Site Request Forgery (CSRF)
CSRF exists on D-Link DIR-868L devices, leading to for example a change to the Admin password. hedwig.cgi and pigwidgeon.cgi are two of the affected components...
D-Link DIR-868L 1.12 Cross Site Request Forgery Vulnerability
Exploit for hardware platform in category web applications ======================================================================= title: Cross Site Request Forgery product: DIR-868L vulnerable version: 1.12 fixed version: 1.20B01 impact: Medium homepage: http://www.dlink.com/ found: 2018-02-18 b...
D-Link DIR-868L 1.12 Cross Site Request Forgery
Confidentiality class: Internal & Partner ======================================================================= title: Cross Site Request Forgery product: DIR-868L vulnerable version: 1.12 fixed version: 1.20B01 impact: Medium homepage: http://www.dlink.com/ found: 2018-02-18 by: S. Tripathy...
PT-2018-3918 · D Link · D-Link Di-604 +1
Name of the Vulnerable Software and Affected Versions: D-Link DIR-550A versions through v2.10KR D-Link DIR-604M versions through v2.10KR Description: The issue allows a malicious user to forge an HTTP request and inject operating system commands that can be executed on the device with higher...
Information Disclosure Vulnerability in D-Link DIR-601
D-Link DIR-601 is a wireless router product from AUO D-Link. A security vulnerability exists in the D-Link DIR-601 A1 version 1.02NA, which can be exploited to obtain information by intercepting the parameters passed to the user to change the password without the need for the current password and...
PT-2018-3909 · D Link · D-Link Dir-868L
Name of the Vulnerable Software and Affected Versions: D-Link DIR-868L affected versions not specified Description: The issue is related to a CSRF Cross-Site Request Forgery attack, which can be exploited by a remote attacker. This could allow the attacker to perform actions such as changing the...
CVE-2018-10641
D-Link DIR-601 A1 1.02NA devices do not require the old password for a password change, which occurs in cleartext...
CVE-2018-10641
D-Link DIR-601 A1 1.02NA devices do not require the old password for a password change, which occurs in cleartext...
Default credentials
D-Link DIR-601 A1 1.02NA devices do not require the old password for a password change, which occurs in cleartext...
CVE-2018-10641
CVE-2018-10641 affects the D-Link DIR-601 A1 (firmware version 1.02NA). The vulnerability allows password changes without presenting the current password, and the new credentials are transmitted in cleartext. This constitutes an authentication bypass enabling potential information exposure (param...
CVE-2018-10641: Improper Authentication
D-Link DIR-601 A1 1.02NA devices do not require the old password for a password change, which occurs in cleartext...
D-Link DIR-615 Remote Code Execution Vulnerability
D-Link DIR-615 is a small wireless router product from AUO D-Link. A security vulnerability exists in the D-Link DIR-615 version 2.5.17. The vulnerability can be exploited by remote attackers to execute code via shell metacharacters in the Host field of the System/Traceroute interface...