9840 matches found
Buffer overflow vulnerability in HTTP_HNAP_AUTH field in D-Link http header
The D-Link DIR-890L is a wireless cloud router. A buffer overflow vulnerability exists in the HTTPHNAPAUTH field in the D-Link http header. Since the variable src in hnap's handler function is taken from strstr's split of the HTTPHNAPAUTH field, there is no restriction on the length of the source...
CVE-2016-5681
Stack-based buffer overflow in dws/api/Login on D-Link DIR-850L B1 2.07 before 2.07WWB05, DIR-817 Ax, DIR-818LW Bx before 2.05b03beta03, DIR-822 C1 3.01 before 3.01WWb02, DIR-823 A1 1.00 before 1.00WWb05, DIR-895L A1 1.11 before 1.11WWb04, DIR-890L A1 1.09 before 1.09b14, DIR-885L A1 1.11 before...
Stack overflow
Stack-based buffer overflow in dws/api/Login on D-Link DIR-850L B1 2.07 before 2.07WWB05, DIR-817 Ax, DIR-818LW Bx before 2.05b03beta03, DIR-822 C1 3.01 before 3.01WWb02, DIR-823 A1 1.00 before 1.00WWb05, DIR-895L A1 1.11 before 1.11WWb04, DIR-890L A1 1.09 before 1.09b14, DIR-885L A1 1.11 before...
CVE-2016-5681: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in dws/api/Login on D-Link DIR-850L B1 2.07 before 2.07WWB05, DIR-817 Ax, DIR-818LW Bx before 2.05b03beta03, DIR-822 C1 3.01 before 3.01WWb02, DIR-823 A1 1.00 before 1.00WWb05, DIR-895L A1 1.11 before 1.11WWb04, DIR-890L A1 1.09 before 1.09b14, DIR-885L A1 1.11 before...
Multiple D-Link Routers Stack Buffer Overflow Vulnerability
The D-Link DIR-895L is a wireless router from AUO. A stack buffer overflow vulnerability exists in multiple D-Link Routers, which allows remote attackers to submit a special request to execute arbitrary code or conduct a denial of service attack...
D-Link DIR-632 Router Has Design Flaw Vulnerability
The D-Link DIR-632 is a wireless router manufactured by AUO. The product has a design flaw vulnerability where an attacker can send specific POST packets to obtain sensitive information, including model number, mac, essid, and other sensitive information...
D-Link DIR-645密码提取
No description provided by source...
Notes v4.5 iOS - Arbitrary File Upload Vulnerability
Document Title: =============== Notes v4.5 iOS - Arbitrary File Upload Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1832 Release Date: ============= 2016-04-25 Vulnerability Laboratory ID VL-ID: ==================================== 1832...
RouterSploit - Router Exploitation Framework
The RouteSploit Framework is an open-source exploitation framework dedicated to embedded devices. It consists of various modules that aids penetration testing operations: exploits - modules that take advantage of identified vulnerabilities creds - modules designed to test credentials against...
Koch dir 'was! - Rezepte - Certificates or keys found, Customized SSL, External URLs vulnerabilities
HackApp vulnerability scanner discovered that application Koch dir 'was! - Rezepte published at the 'play' market has multiple vulnerabilities...
File Sharing Manager 1.0 Local File Inclusion / File Upload
Document Title: =============== File Sharing Manager v1.0 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1715 Release Date: ============= 2016-02-09 Vulnerability Laboratory ID VL-ID: ==================================...
php54 security and bug fix update
php54 2.0-1 - fix incorrect selinux contexts 1194332 php54-php 5.4.40-1 - rebase to PHP 5.4.40 for various security fix 1209887 5.4.37-1 - rebase to PHP 5.4.37 5.4.36-1 - rebase to PHP 5.4.36 1168193 - fix package name in description - php-fpm own session dir php54-php-pecl-zendopcache 7.0.4-3 -...
Secure Item Hub 1.0 iOS - Multiple Vulnerabilities
Document Title: =============== Secure Item Hub v1.0 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1682 Release Date: ============= 2016-01-27 Vulnerability Laboratory ID VL-ID: ==================================== 16...
D-Link revA v1.13 路由器后门
下载了D-link无线路由器型号：DIR-100 revA的固件程序 v1.13。使用工具Binwalk，很快的就从中发现并提取出一个只读SquashFS文件系统，没用多大功夫我就将这个固件程序的web server/bin/webs加载到了IDA中： 基于上面的字符信息可以看出，这个/bin/webs二进制程序是一个修改版的thttpd，提供路由器管理员界面操作功能。看起来是经过了台湾明泰科技D-Link的一个子公司的修改。他们甚至很有心计的将他们很多自定义的函数名都辅以“alpha”前缀： 这个 alphaauthcheck 函数看起来很有意思！...
D-Link DIR-615 'apply.cgi'绕过安全限制漏洞
No description provided by source. 构造url 访问路由器 http://192.168.0.1/apply.cgi?adminpassword=pwdpwd&adminpassword1=pwdpwd& admPass2=pwdpwd&remoteenable=1&remotehttpmanagementenable=1&remotehttp managementport=8080&remoteinboundfilter=AllowAll&remotehttpmanagement inboundfilter=AllowAll...
D-Link DIR-880L HNAP和Authentication功能缓冲区溢出漏洞
0 0 0 0...
D-Link DIR-866L 'HNAP' and 'Send Email' Function Buffer Overflow Vulnerability
D-Link DIR-866L is a wireless router product from AUO D-Link. A buffer overflow vulnerability exists in the D-Link DIR-866L. An attacker can exploit this vulnerability to execute arbitrary code in an affected application, which may also result in a denial of service...
D-Link DIR-890L and DIR-890R Buffer Overflow Vulnerability
The D-Link DIR-890L and DIR-890R are both wireless router products from AUO D-Link. A buffer overflow vulnerability exists in the D-Link DIR-890L and DIR-890R. An attacker could exploit this vulnerability to execute arbitrary code in an affected application, which could also result in a denial of...
D-Link DIR-880L 'HNAP' and 'Authentication' Function Buffer Overflow Vulnerability
D-Link DIR-880L is a wireless router product from AUO D-Link. A buffer overflow vulnerability exists in the D-Link DIR-880L. An attacker can exploit this vulnerability to execute arbitrary code in the affected application, which may also result in a denial of service...
D-Link DIR-825 has multiple vulnerabilities
D-Link DIR-825 is a wireless router product from AUO D-Link. A buffer overflow vulnerability and a directory traversal vulnerability exist in the D-Link DIR-825. An attacker can exploit these vulnerabilities to execute arbitrary code in the affected device, obtain sensitive information, and...