8487 matches found
PT-2024-3332 · D Link · Dir-845L
Name of the Vulnerable Software and Affected Versions: D-Link DIR-845L router versions v1.01KRb03 and before Description: The issue is related to a Permission Bypass vulnerability via the getcfg.php component. It is associated with inadequate access control when handling the AUTHORIZED GROUP...
PT-2024-3333 · D Link · D-Link Dir-845L
Name of the Vulnerable Software and Affected Versions: D-Link DIR-845L router version 1.01KRb03 and before Description: The issue is related to a command injection vulnerability via the hnap main function. This vulnerability is associated with the failure to neutralize special elements used in th...
nginxWebUI 路径遍历漏洞
nginxWebUI is an nginx web configuration tool. A path traversal vulnerability exists in nginxWebUI, which stems from the failure of the dir parameter of the findCountByQuery method of the /adminPage/www/addOver file to correctly filter for special elements in the path of a resource or file. An...
dir-shop.cz Cross Site Scripting vulnerability OBB-3902761
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
D-Link Dir-3040us Denial of Service Vulnerability
The D-Link Dir-3040us is a router. A denial of service vulnerability exists in the D-Link Dir-3040us, which can be exploited by an attacker to cause a system crash and reboot...
The vulnerability of the sub_477AA0 function in D-Link DIR-882 router microprogramming software allows a intruder to trigger a service failure or execute arbitrary code.
The vulnerability of sub477AA0 in D-Link DIR-882 router microprogramming software is caused by buffer overflow on the stack. Exploiting this vulnerability can allow an attacker to cause service failure or execute arbitrary code...
dir-shop.cz Cross Site Scripting vulnerability OBB-3896209
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2024-27619
Dlink Dir-3040us A1 1.20b03a hotfix is vulnerable to Buffer Overflow. Any user having read/write access to ftp server can write directly to ram causing buffer overflow if file or files uploaded are greater than available ram. Ftp server allows change of directory to root which is one level up tha...
CVE-2024-27619
Dlink Dir-3040us A1 1.20b03a hotfix is vulnerable to Buffer Overflow. Any user having read/write access to ftp server can write directly to ram causing buffer overflow if file or files uploaded are greater than available ram. Ftp server allows change of directory to root which is one level up tha...
CVE-2024-27619
Dlink Dir-3040us A1 1.20b03a hotfix is vulnerable to Buffer Overflow. Any user having read/write access to ftp server can write directly to ram causing buffer overflow if file or files uploaded are greater than available ram. Ftp server allows change of directory to root which is one level up tha...
CVE-2024-27619
The CVE-2024-27619 entry concerns D-Link Dir-3040us A1 (firmware 1.20b03a hotfix). The issue is a buffer overflow caused by a read/write FTP server path that allows uploading files larger than available RAM, leading to RAM exhaustion and a system crash/reboot. The FTP service permits changing the...
D-Link DIR-3040 安全漏洞
The D-Link Dir-3040us is a router. A denial of service vulnerability exists in the D-Link Dir-3040us, which can be exploited by an attacker to cause a system crash and reboot...
PT-2024-21969
Name of the Vulnerable Software and Affected Versions Dlink Dir-3040us A1 version 1.20b03a hotfix Description The issue allows any user with read/write access to the ftp server to write directly to ram, causing a buffer overflow if the uploaded file or files exceed the available ram. The ftp serv...
dir-shop.cz Cross Site Scripting vulnerability OBB-3889716
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
D-Link DIR-845L Code Execution Vulnerability
The D-Link DIR-845 is a wireless router from China-based AUO D-Link. A code execution vulnerability exists in D-Link DIR-845L v1.01KRb03 and earlier versions, which stems from the soapcgimain function failing to correctly filter the special elements of the constructor snippet in the cgibin binary...
D-Link DIR-845L Command Injection Vulnerability
The D-Link DIR-845 is a wireless router from China-based AUO D-Link. A command injection vulnerability exists in D-Link DIR-845L v1.01KRb03 and earlier versions, which stems from a failure to properly filter construct command special characters, commands, etc. in cgibin binaries. An attacker can...
DEBIAN-CVE-2021-47145
In the Linux kernel, the following vulnerability has been resolved: btrfs: do not BUGON in linktofixupdir While doing error injection testing I got the following panic kernel BUG at fs/btrfs/tree-log.c:1862! invalid opcode: 0000 1 SMP NOPTI CPU: 1 PID: 7836 Comm: mount Not tainted 5.13.0-rc1+ 305...
UBUNTU-CVE-2021-47145
In the Linux kernel, the following vulnerability has been resolved: btrfs: do not BUGON in linktofixupdir While doing error injection testing I got the following panic kernel BUG at fs/btrfs/tree-log.c:1862! invalid opcode: 0000 1 SMP NOPTI CPU: 1 PID: 7836 Comm: mount Not tainted 5.13.0-rc1+ 305...