Lucene search
K

99 matches found

OSV
OSV
added 2026/03/03 9:16 p.m.1 views

CVE-2026-3485

A flaw has been found in D-Link DIR-868L 110b03. This affects the function sub1BF84 of the component SSDP Service. This manipulation of the argument ST causes os command injection. It is possible to initiate the attack remotely. The exploit has been published and may be used. This vulnerability...

9.8CVSS5.6AI score0.00481EPSS
Exploits1References5
NVD
NVD
added 2026/03/03 9:16 p.m.2 views

CVE-2026-3485

A flaw has been found in D-Link DIR-868L 110b03. This affects the function sub1BF84 of the component SSDP Service. This manipulation of the argument ST causes os command injection. It is possible to initiate the attack remotely. The exploit has been published and may be used. This vulnerability...

10CVSS0.00481EPSS
Exploits1References5
EUVD
EUVD
added 2026/03/03 9:2 p.m.1 views

EUVD-2026-9322

A flaw has been found in D-Link DIR-868L 110b03. This affects the function sub1BF84 of the component SSDP Service. This manipulation of the argument ST causes os command injection. It is possible to initiate the attack remotely. The exploit has been published and may be used. This vulnerability...

10CVSS5.7AI score0.00481EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2026/03/03 9:2 p.m.1 views

CVE-2026-3485 D-Link DIR-868L SSDP Service sub_1BF84 os command injection

A flaw has been found in D-Link DIR-868L 110b03. This affects the function sub1BF84 of the component SSDP Service. This manipulation of the argument ST causes os command injection. It is possible to initiate the attack remotely. The exploit has been published and may be used. This vulnerability...

10CVSS5.7AI score0.00481EPSS
Exploits1References5
Cvelist
Cvelist
added 2026/03/03 9:2 p.m.20 views

CVE-2026-3485 D-Link DIR-868L SSDP Service sub_1BF84 os command injection

A flaw has been found in D-Link DIR-868L 110b03. This affects the function sub1BF84 of the component SSDP Service. This manipulation of the argument ST causes os command injection. It is possible to initiate the attack remotely. The exploit has been published and may be used. This vulnerability...

10CVSS0.00481EPSS
Exploits1References5
ATTACKERKB
ATTACKERKB
added 2026/03/03 9:2 p.m.2 views

CVE-2026-3485

A flaw has been found in D-Link DIR-868L 110b03. This affects the function sub1BF84 of the component SSDP Service. This manipulation of the argument ST causes os command injection. It is possible to initiate the attack remotely. The exploit has been published and may be used. This vulnerability...

10CVSS5.7AI score0.00481EPSS
Exploits1References5Affected Software1
CNNVD
CNNVD
added 2026/03/03 12:0 a.m.2 views

D-Link DIR-868L 操作系统命令注入漏洞

The D-Link DIR-868L is a wireless router produced by D-Link Corporation. The D-Link DIR-868L 110b03 version has a vulnerability related to operating system command injection. This vulnerability stems from incorrect handling of the parameter ST by the SSDP Service component, which may lead to...

10CVSS7.3AI score0.00481EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2026/03/03 12:0 a.m.3 views

PT-2026-22824

Name of the Vulnerable Software and Affected Versions D-Link DIR-868L version 110b03 Description A flaw exists in the SSDP Service component, specifically within the sub 1BF84 function, of the D-Link DIR-868L. Manipulation of the ST argument can lead to operating system command injection. This...

10CVSS7.2AI score0.00481EPSS
Exploits1References15
RedhatCVE
RedhatCVE
added 2026/01/09 12:39 p.m.5 views

CVE-2023-29856

D-Link DIR-868L Hardware version A1, firmware version 1.12 is vulnerable to Buffer Overflow. The vulnerability is in scandir.sgi binary...

9.8CVSS7AI score0.00507EPSS
Exploits0References1
NVD
NVD
added 2025/11/19 8:15 p.m.2 views

CVE-2025-63932

D-Link Router DIR-868L A1 FW106KRb01.bin has an unauthenticated remote code execution vulnerability in the cgibin binary. The HNAP service provided by cgibin does not filter the HTTP SOAPAction header field. The unauthenticated remote attacker can execute the shell command...

7.3CVSS0.00579EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2025/11/19 12:0 a.m.2 views

CVE-2025-63932

D-Link Router DIR-868L A1 FW106KRb01.bin has an unauthenticated remote code execution vulnerability in the cgibin binary. The HNAP service provided by cgibin does not filter the HTTP SOAPAction header field. The unauthenticated remote attacker can execute the shell command...

8.1AI score0.00579EPSS
Exploits1References3
Cvelist
Cvelist
added 2025/11/19 12:0 a.m.6 views

CVE-2025-63932

D-Link Router DIR-868L A1 FW106KRb01.bin has an unauthenticated remote code execution vulnerability in the cgibin binary. The HNAP service provided by cgibin does not filter the HTTP SOAPAction header field. The unauthenticated remote attacker can execute the shell command...

0.00579EPSS
Exploits1References3
VulnCheck KEV
VulnCheck KEV
added 2025/10/09 12:0 a.m.0 views

VulnCheck KEV: CVE-2018-10957

CSRF exists on D-Link DIR-868L devices, leading to for example a change to the Admin password. hedwig.cgi and pigwidgeon.cgi are two of the affected components...

8.8CVSS5.8AI score0.00169EPSS
In wildExploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2018-3009

Malware in sbrugna...

8.8CVSS8.8AI score0.00169EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2018-20878

Malware in sbrugna...

10CVSS9.2AI score0.05358EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-26076

Malicious code in bioql PyPI...

9.8CVSS6.6AI score0.01461EPSS
Exploits1References3
RedhatCVE
RedhatCVE
added 2025/08/30 6:20 p.m.1 views

CVE-2025-55583

D-Link DIR-868L B1 router firmware version FW2.05WWB02 contains an unauthenticated OS command injection vulnerability in the fileaccess.cgi component. The endpoint /dws/api/UploadFile accepts a preapiarg parameter that is passed directly to system-level shell execution functions without...

9.8CVSS8.6AI score0.01461EPSS
Exploits1References1
NVD
NVD
added 2025/08/28 3:16 p.m.1 views

CVE-2025-55583

D-Link DIR-868L B1 router firmware version FW2.05WWB02 contains an unauthenticated OS command injection vulnerability in the fileaccess.cgi component. The endpoint /dws/api/UploadFile accepts a preapiarg parameter that is passed directly to system-level shell execution functions without...

9.8CVSS0.01461EPSS
Exploits1References3
CVE
CVE
added 2025/08/28 12:0 a.m.11 views

CVE-2025-55583

Affected product: D-Link DIR-868L B1 router with firmware FW2.05WWB02. Vulnerability: unauthenticated OS command injection in fileaccess.cgi; endpoint /dws/api/UploadFile passes pre_api_arg directly to system-level shell without sanitization/authentication. Impact: remote command execution as roo...

9.8CVSS8.3AI score0.01461EPSS
Exploits1References3Affected Software1
CNNVD
CNNVD
added 2025/08/28 12:0 a.m.1 views

D-Link DIR-868L 安全漏洞

The D-Link DIR-868L is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-868L B1 FW2.05WWB02 version, which originates from an unauthenticated OS command injection in the fileaccess.cgi component, which could lead to the execution of arbitrary comman...

9.8CVSS7.9AI score0.01461EPSS
Exploits1References4
Rows per page
Query Builder