CVE-2015-0150: Improper Access Control

The remote administration UI in D-Link DIR-815 devices with firmware before 2.07.B01 allows remote attackers to bypass intended access restrictions via unspecified vectors...

PT-2018-4332 · D Link · Dir-815

Name of the Vulnerable Software and Affected Versions: D-Link DIR-815 versions prior to 2.07.B01 Description: The issue allows remote attackers to obtain sensitive information. This is achieved by leveraging cleartext storage of the wireless key. Recommendations: For versions prior to 2.07.B01,...

CVE-2014-8888: Improper Neutralization of Special Elements used in a Command

The remote administration interface in D-Link DIR-815 devices with firmware before 2.03.B02 allows remote attackers to execute arbitrary commands via vectors related to an "HTTP command injection issue."...

PT-2018-4331 · D Link · Dir-815

Name of the Vulnerable Software and Affected Versions: D-Link DIR-815 versions prior to 2.07.B01 Description: The issue allows remote attackers to obtain sensitive information by leveraging cleartext storage of the administrative password. Recommendations: For versions prior to 2.07.B01, update t...

PT-2018-4330 · D Link · D-Link Dir-815

Name of the Vulnerable Software and Affected Versions: D-Link DIR-815 devices with firmware prior to 2.07.B01 Description: A cross-site request forgery issue allows remote attackers to hijack user authentication for requests that insert XSS sequences. Recommendations: For D-Link DIR-815 devices...

PT-2018-4329 · D Link · D-Link Dir-815

Name of the Vulnerable Software and Affected Versions: D-Link DIR-815 versions prior to 2.07.B01 Description: The issue concerns the remote administration UI, allowing remote attackers to bypass intended access restrictions. Recommendations: For versions prior to 2.07.B01, update the firmware to...

CVE-2015-0152: Exposure of Sensitive Information to an Unauthorized Actor

D-Link DIR-815 devices with firmware before 2.07.B01 allow remote attackers to obtain sensitive information by leveraging cleartext storage of the administrative password...

D-Link DIR-868L StarHub Firmware RCE Vulnerability

D-Link DIR-868L devices are prone to a pre-authenticated remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

Code injection

authentication.cgi on D-Link DIR-868L devices with Singapore StarHub firmware before v1.21SHCb03 allows remote attackers to execute arbitrary code...

CVE-2018-9284

The CVE-2018-9284 entry concerns D-Link DIR-868L devices running Singapore StarHub firmware prior to version v1.21SHCb03. The vulnerability is tied to the authentication.cgi component and enables remote attackers to execute arbitrary code. The Red Hat and NVD records mirror this description; Open...

PT-2018-18960 · D Link · D-Link Dir-868L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-868L devices with Singapore StarHub firmware versions prior to v1.21SHCb03 Description: The issue allows remote attackers to execute arbitrary code on the affected devices. This is related to the authentication.cgi component...

Ruby Directory Traversal Vulnerability

Ruby is a simple and fast object-oriented object-oriented programming scripting language. Ruby suffers from a directory traversal vulnerability. The vulnerability occurs because the Dir.open, Dir.new, Dir.entries, and Dir.empty? methods do not check for null characters. An attacker can exploit th...

CVE-2018-9284: Improper Restriction of Operations within the Bounds of a Memory Buffer

authentication.cgi on D-Link DIR-868L devices with Singapore StarHub firmware before v1.21SHCb03 allows remote attackers to execute arbitrary code...

ALPINE-CVE-2018-8780

In Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0-preview1, the Dir.open, Dir.new, Dir.entries and Dir.empty? methods do not check NULL characters. When using the corresponding method, unintentional directory traversal may be performed...

CVE-2018-8780

In Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0-preview1, the Dir.open, Dir.new, Dir.entries and Dir.empty? methods do not check NULL characters. When using the corresponding method, unintentional directory traversal may be performed...

ALPINE-CVE-2018-6914

Directory traversal vulnerability in the Dir.mktmpdir method in the tmpdir library in Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0-preview1 might allow attackers to create arbitrary directories or files via a .. dot dot in the prefix argument...

DLink DIR-601 - Admin Password Disclosure(CVE-2018-5708)

Description Having local access to the network but being unauthenticated to the administrator panel, a user can disclose the built in Admin username/password to access the admin panel 2. Proof of Concept For proof of concept, the real Admin password is "thisisatest" Step 1: Access default...

D-Link DIR-601 Information Disclosure Vulnerability

D-Link DIR-601 is a wireless router product from AUO. The D-Link DIR-601 information disclosure vulnerability can be exploited by an attacker to obtain the administrator username/password to access the administrator panel...

DLink DIR-601 - Admin Password Disclosure

Exploit Title: DLink DIR-601 Unauthenticated Admin password disclosure Google Dork: N/A Date: 12/24/2017 Exploit Author: Kevin Randall Vendor Homepage: https://www.dlink.com Software Link: N/A Version: Firmware: 2.02NA Hardware Version B1 Tested on: Windows 10 + Mozilla Firefox CVE : CVE-2018-570...

D-Link DIR-601 - Admin Password Disclosure Vulnerability

Exploit for hardware platform in category web applications Exploit Title: DLink DIR-601 Unauthenticated Admin password disclosure Exploit Author: Kevin Randall Vendor Homepage: https://www.dlink.com Software Link: N/A Version: Firmware: 2.02NA Hardware Version B1 Tested on: Windows 10 + Mozilla...