CVE-2024-29385

DIR-845L router = v1.01KRb03 has an Unauthenticated remote code execution vulnerability in the cgibin binary via soapcgimain function...

Tenda AC15 安全漏洞

Tenda AC15 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in October 2015, which supports 802.11ac protocol with a theoretical transmission rate of 1900Mbps 600Mbps in 2.4GHz band and 1300Mbps in 5GHz band. Tenda AC15 suffers from a stack buffer overflow...

CVE-2024-29385

DIR-845L router = v1.01KRb03 has an Unauthenticated remote code execution vulnerability in the cgibin binary via soapcgimain function...

CVE-2024-29366

A command injection vulnerability exists in the cgibin binary in DIR-845L router firmware = v1.01KRb03...

D-Link DIR-845L 安全漏洞

The D-Link DIR-845 is a wireless router from China-based AUO D-Link. A code execution vulnerability exists in D-Link DIR-845L v1.01KRb03 and earlier versions, which stems from the soapcgimain function failing to correctly filter the special elements of the constructor snippet in the cgibin binary...

CVE-2024-29366

DIR-845L routers with firmware <= 1.01KRb03 are vulnerable to a command injection in the cgibin binary, allowing arbitrary command execution. Affected product: D-Link DIR-845L (firmware

CVE-2024-29385

The CVE concerns a D-Link DIR-845L router vulnerability (

PT-2024-22874 · D Link · D-Link Dir-845L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-845L router version 1.01KRb03 and earlier Description: The issue is related to an Unauthenticated remote code execution vulnerability in the cgibin binary via the soapcgi main function. This allows for remote code execution without...

PT-2024-22867 · D Link · Dir-845L

Name of the Vulnerable Software and Affected Versions: DIR-845L router firmware version = 1.01KRb03 Description: A command injection issue exists in the cgibin binary. Recommendations: For DIR-845L router firmware version = 1.01KRb03, update to a version greater than 1.01KRb03 to resolve the issu...

CVE-2024-29366

A command injection vulnerability exists in the cgibin binary in DIR-845L router firmware = v1.01KRb03...

dir-shop.cz Cross Site Scripting vulnerability OBB-3880036

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2024-2564

CVE-2024-2564 affects PandaXGO PandaX up to 20240310 . The vulnerability is in the function ExportUser (file /apps/system/api/user.go ); manipulating the filename parameter enables a path traversal (e.g., '../filedir'), potentially allowing access to files outside the intended directory. Exploita...

The vulnerability of the HNAP microprogramming software for D-Link DIR-822 routers allows a hacker to execute arbitrary code.

The vulnerability of the HNAP microprogramming software for D-Link DIR-822 routers lies in the possibility of buffer overflow attacks based on a stack mechanism. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

Tenda AC18 安全漏洞

Tenda AC18 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in July 2016, mainly for villas and large home users, supporting 2.4GHz and 5GHz dual-band, with a maximum transmission rate of 1900Mbps. Tenda AC18 suffers from a stack buffer overflow vulnerability that...

dir-shop.cz Cross Site Scripting vulnerability OBB-3873258

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2024-25331

Summary of CVE-2024-25331 : D-Link DIR-822 family devices are affected by a LAN-side unauthenticated remote code execution (RCE) vulnerability that arises from a stack-based overflow in the HNAP handling. Affected products and versions include DIR-822 Rev. B firmware 2.02KRB09 and DIR-822-CA Rev....

CVE-2024-25331

DIR-822 Rev. B Firmware v2.02KRB09 and DIR-822-CA Rev. B Firmware v2.03WWb01 suffer from a LAN-Side Unauthenticated Remote Code Execution RCE vulnerability elevated from HNAP Stack-Based Buffer Overflow...

CVE-2024-25331

DIR-822 Rev. B Firmware v2.02KRB09 and DIR-822-CA Rev. B Firmware v2.03WWb01 suffer from a LAN-Side Unauthenticated Remote Code Execution RCE vulnerability elevated from HNAP Stack-Based Buffer Overflow...

PT-2024-2145 · D Link · D-Link Dir-822 +1

Name of the Vulnerable Software and Affected Versions: D-Link DIR-822 versions 2.02KRB09 through 2.03WWb01 D-Link DIR-822-CA versions 2.02KRB09 through 2.03WWb01 Description: The issue is related to a LAN-Side Unauthenticated Remote Code Execution RCE vulnerability elevated from HNAP Stack-Based...

SUSE CVE-2023-52569

In the Linux kernel, the following vulnerability has been resolved: btrfs: remove BUG after failure to insert delayed dir index item Instead of calling BUG when we fail to insert a delayed dir index item into the delayed node's tree, we can just release all the resources we have allocated/acquire...