Lucene search
+L

230 matches found

CNNVD
CNNVD
added 2026/01/27 12:0 a.m.9 views

D-Link DIR-615 Operating System Command Injection

The D-Link DIR-615 is a wireless router produced by D-Link Corporation. Versions of D-Link DIR-615 prior to 4.10 contained a vulnerability related to operating system command injection. This vulnerability stemmed from incorrect operations on the parameter ipaddr in the component Web Management...

8.6CVSS7AI score0.05258EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2026/01/27 12:0 a.m.22 views

PT-2026-5055

Name of the Vulnerable Software and Affected Versions D-Link DIR-615 version 4.10 Description A flaw exists in the MAC Filter Configuration component of the D-Link DIR-615. Specifically, manipulation of the mac argument in the /adv mac filter.php file can lead to os command injection. This allows...

9CVSS7.1AI score0.05071EPSS
SaveExploits1References11
ATTACKERKB
ATTACKERKB
added 2026/01/26 11:32 p.m.4 views

CVE-2026-1448

A vulnerability was detected in D-Link DIR-615 up to 4.10. This impacts an unknown function of the file /wizpolicy3machine.php of the component Web Management Interface. Performing a manipulation of the argument ipaddr results in os command injection. It is possible to initiate the attack remotel...

8.6CVSS5.6AI score0.05258EPSS
SaveExploits1References5Affected Software1
CVE
CVE
added 2026/01/26 11:32 p.m.43 views

CVE-2026-1448

The CVE-2026-1448 entry concerns D-Link DIR-615 Web Management Interface up to version 4.10. The vulnerability lies in the /wiz_policy_3_machine.php file where manipulating the ipaddr argument enables operating system command injection. This allows remote initiation of an exploit, and multiple so...

8.6CVSS5.6AI score0.05258EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2026/01/26 11:32 p.m.58 views

CVE-2026-1448 D-Link DIR-615 Web Management wiz_policy_3_machine.php os command injection

A vulnerability was detected in D-Link DIR-615 up to 4.10. This impacts an unknown function of the file /wizpolicy3machine.php of the component Web Management Interface. Performing a manipulation of the argument ipaddr results in os command injection. It is possible to initiate the attack remotel...

8.6CVSS0.05258EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2026/01/26 11:32 p.m.8 views

CVE-2026-1448 D-Link DIR-615 Web Management wiz_policy_3_machine.php os command injection

A vulnerability was detected in D-Link DIR-615 up to 4.10. This impacts an unknown function of the file /wizpolicy3machine.php of the component Web Management Interface. Performing a manipulation of the argument ipaddr results in os command injection. It is possible to initiate the attack remotel...

8.6CVSS5.6AI score0.05258EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2026/01/26 12:0 a.m.15 views

PT-2026-4835

Name of the Vulnerable Software and Affected Versions D-Link DIR-615 versions up to 4.10 Description A flaw exists in the Web Management Interface component of D-Link DIR-615. Specifically, a manipulation of the ipaddr argument in the /wiz policy 3 machine.php file can lead to os command injectio...

8.6CVSS7AI score0.05258EPSS
SaveExploits1References11
RedhatCVE
RedhatCVE
added 2026/01/09 11:49 a.m.10 views

CVE-2009-4821

The D-Link DIR-615 with firmware 3.10NA does not require administrative authentication for apply.cgi, which allows remote attackers to 1 change the admin password via the adminpassword parameter, 2 disable the security requirement for the Wi-Fi network via unspecified vectors, or 3 modify DNS...

5CVSS7.8AI score0.01328EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 10:17 a.m.11 views

CVE-2019-18852

Certain D-Link devices have a hardcoded Alphanetworks user account with TELNET access because of /etc/config/imagesign or /etc/alphaconfig/imagesign. This affects DIR-600 B1 V2.01 for WW, DIR-890L A1 v1.03, DIR-615 J1 v100 for DCN, DIR-645 A1 v1.03, DIR-815 A1 v1.01, DIR-823 A1 v1.01, and DIR-842...

10CVSS7.1AI score0.01541EPSS
SaveExploits1References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2019-7763

Malware in sbrugna...

8.2CVSS8.1AI score0.02958EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2018-2189

Malware in sbrugna...

4.8CVSS5AI score0.03503EPSS
SaveExploits5References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2009-4784

Malware in sbrugna...

5CVSS6.4AI score0.01328EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2017-16423

Malware in sbrugna...

8.8CVSS8.7AI score0.03006EPSS
SaveExploits4References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.14 views

EUVD-2021-23957

Malware in sbrugna...

9.8CVSS9.4AI score0.0374EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2017-3057

Malware in sbrugna...

9.8CVSS9.2AI score0.02026EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2021-27828

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.01859EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2025/08/27 12:0 a.m.5 views

D-Link多款产品 安全漏洞

D-Link DIR-600 and others are products of China-based AUO D-Link.D-Link DIR-600 is a wireless router.D-Link DIR-412 is a wireless router.D-Link DIR-110 is a wired router. A security vulnerability exists in various D-Link products that stems from improper handling of the EVENT=CHECKFW parameter...

10CVSS7AI score0.08674EPSS
SaveExploits1References6
BDU FSTEC
BDU FSTEC
added 2025/08/08 12:0 a.m.15 views

The vulnerability of the web interface of the microprogrammed software routers DIR-615 allows a hacker to execute arbitrary commands.

The vulnerability of the web interface of the microprogrammed software router DIR-615 arises from the lack of checks on input data in the pingipaddr parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

9CVSS5.9AI score0.1911EPSS
SaveExploits1References6Affected Software1
CNNVD
CNNVD
added 2025/08/01 12:0 a.m.7 views

D-Link DIR-615和D-Link DIR-300 安全漏洞

The D-Link DIR-615 and D-Link DIR-300 are both wireless routers from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-300 rev A version 1.05 and the D-Link DIR-615 rev D version 4.13, which stems from insufficient cleanup of toolsvct.xgi endpoint inputs, and could lead to...

8.8CVSS6.4AI score0.09637EPSS
SaveExploits1References7
RedhatCVE
RedhatCVE
added 2025/05/22 10:9 a.m.10 views

CVE-2019-19742

On D-Link DIR-615 devices, the User Account Configuration page is vulnerable to blind XSS via the name field...

4.8CVSS5.8AI score0.19834EPSS
SaveExploits3References1
Rows per page
Query Builder