CVE-2023-39669

CVE-2023-39669 involves a NULL pointer dereference in D-Link DIR-880 A1_FW107WWb08, specifically the function FUN_00010824. The flaw can potentially enable a remote attacker to cause a denial of service. Affected software is D-Link DIR-880 A1 with FW107WWb08 (A1 revision). The PT-security entry n...

D-Link DIR-842 安全漏洞

The D-Link DIR-842 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-842 fwrevA1-02eumulti20151008 version, which stems from the fgets function in the acStack120 and acStack220 parameters containing multiple buffer overflows...

CVE-2023-39666

D-Link DIR-842 fwrevA1-02eumulti20151008 was discovered to contain multiple buffer overflows in the fgets function via the acStack120 and acStack220 parameters...

CVE-2023-39671

Affected product: D-Link DIR-880 (A1_FW107WWb08) firmware. Issue: a buffer overflow in function FUN_0001be68. Reported as potentially exploitable remotely to execute arbitrary code. Impacts include high risk as per CVE-2023-39671. Remediation: PT-2023-4469 recommends temporarily disabling the FUN...

CVE-2023-39667

Summary: CVE-2023-39667 affects the D-Link DIR-868L router (firmware revA 1-12 EU multi 20170316). The vulnerability is a stack/param_2 buffer overflow in the function identified as FUN_0000acb4, enabling a remote attacker to potentially compromise the device via the network. CVSS 3.1 metrics ind...

CVE-2023-39666

CVE-2023-39666 affects the D-Link DIR-842 firmware fw_revA_1-02_eu_multi_20151008. The vulnerability consists of multiple buffer overflows in the fgets function exposed via the acStack_120 and acStack_220 parameters. CVSS 3.1/3.1 base score 9.8 (CRITICAL) with network attack vector, no user inter...

PT-2023-4453 · D Link · D-Link Dir-880L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-880 A1 FW107WWb08 Description: The issue is related to a buffer overflow in the fgets function of the D-Link DIR-880 router's firmware. This could allow a remote attacker to execute arbitrary code. Recommendations: For D-Link DIR-8...

PT-2023-4958 · D Link · D-Link Dir-868L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-868L version fw revA 1-12 eu multi 20170316 Description: The issue is caused by a buffer overflow on the stack. This can be exploited by a remote attacker to cause a buffer overflow via the acStack 50 parameter. Recommendations: Fo...

PT-2023-4468 · D Link · D-Link Dir-880L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-880 A1 FW107WWb08 Description: The issue is related to a NULL pointer dereference in the FUN 00010824 function. This can potentially allow a remote attacker to cause a denial of service. Recommendations: For D-Link DIR-880 A1...

PT-2023-4960 · D Link · D-Link Dir-868L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-868L version fw revA 1-12 eu multi 20170316 Description: The issue is caused by a buffer overflow on the stack in the inet ntoa function. This can be exploited by a remote attacker to cause a buffer overflow. The buffer overflow...

PT-2023-4959 · D Link · D-Link Dir-868L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-868L version fw revA 1-12 eu multi 20170316 Description: The issue is caused by a buffer overflow on the stack in the FUN 0000acb4 function of the D-Link DIR-868L router's firmware. This can be exploited by a remote attacker to cau...

dir-shop.cz Cross Site Scripting vulnerability OBB-3583761

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2023-5237 · D Link · D-Link Dir-859

Name of the Vulnerable Software and Affected Versions: D-LINK DIR-859 versions A1 1.05 through A1 1.06B01 Beta01 Description: The issue is related to a command injection vulnerability via the lxmldbc system function at the "/htdocs/cgibin" endpoint. This vulnerability is associated with the failu...

D-Link DIR-885L Authentication Bypass Vulnerability

The D-Link DIR-885L is a wireless router from China-based AUO D-Link. The D-Link DIR-885L suffers from an authentication bypass vulnerability that stems from the lack of valid authentication in phpcgi, which can be exploited by an attacker to bypass authentication...

D-Link DIR-859 Authentication Bypass Vulnerability

The D-Link DIR-859 is a wireless router from China's AUO D-Link. The D-Link DIR-859 suffers from an authentication bypass vulnerability that stems from a lack of valid authentication in phpcgimain, which can be exploited by an attacker to bypass authentication...

D-Link DIR-895 Authentication Bypass Vulnerability

The D-Link DIR-895 is a wireless router from China's AUO D-Link. The D-Link DIR-895 suffers from an authentication bypass vulnerability that stems from the lack of valid authentication in the phpcgimain function in cgibin, which can be exploited by an attacker to bypass authentication...

The vulnerability of the phpcgi_main function in the D-Link DIR-895 router’s microprogramming system allows a hacker to increase their privileges.

The vulnerability of the phpcgimain function in the D-Link DIR-895 router’s microprogramming system is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...

The vulnerability of the phpcgi_main function in the D-Link DIR-859 router’s microprogramming system allows a hacker to increase their privileges.

The vulnerability of the phpcgimain function in the D-Link DIR-859 router’s microprogramming system is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow a malicious actor to gain increased privileges...

CVE-2023-36091

Authentication Bypass vulnerability in D-Link DIR-895 FW102b07 allows remote attackers to gain escalated privileges via via function phpcgimain in cgibin. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

CVE-2023-36091

Authentication Bypass vulnerability in D-Link DIR-895 FW102b07 allows remote attackers to gain escalated privileges via via function phpcgimain in cgibin. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...