CVE-2023-36092

Authentication Bypass vulnerability in D-Link DIR-859 FW105b03 allows remote attackers to gain escalated privileges via via phpcgimain. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

CVE-2023-36091

Authentication Bypass vulnerability in D-Link DIR-895 FW102b07 allows remote attackers to gain escalated privileges via via function phpcgimain in cgibin. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

PT-2023-4061 · D Link · D-Link Dir-895

Name of the Vulnerable Software and Affected Versions: D-Link DIR-895 version FW102b07 Description: The issue is related to a function called phpcgi main in the D-Link DIR-895 router's firmware, which has weaknesses in its authentication procedure. This can be exploited by a remote attacker to ga...

CVE-2023-36089

Authentication Bypass vulnerability in D-Link DIR-645 firmware version 1.03 allows remote attackers to gain escalated privileges via function phpcgimain in cgibin. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

CVE-2023-36089

Authentication Bypass vulnerability in D-Link DIR-645 firmware version 1.03 allows remote attackers to gain escalated privileges via function phpcgimain in cgibin. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

CVE-2023-36090

CVE-2023-36090 describes an Authentication Bypass in the D-Link DIR-885L (FW102b01) where lack of valid authentication in phpcgi allows remote attackers to escalate privileges. Affected product: D-Link DIR-885L; vulnerability type: authentication bypass via phpcgi; impact: remote, unauthenticated...

CVE-2023-36090

Authentication Bypass vulnerability in D-Link DIR-885L FW102b01 allows remote attackers to gain escalated privileges via phpcgi. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

PT-2023-4086 · D Link · D-Link Dir-885L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-885L version FW102b01 Description: The issue is related to an Authentication Bypass vulnerability that allows remote attackers to gain escalated privileges via phpcgi. This vulnerability only affects products that are no longer...

The vulnerability of the lxmldbc_system() function in D-Link DIR-600 B5 router software allows for the execution of arbitrary commands.

The vulnerability of the lxmldbcsystem function in D-Link DIR-600 B5 router microprogramming software is related to insufficient checking of arguments passed in commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

dir-shop.cz Cross Site Scripting vulnerability OBB-3540212

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

D-Link DIR-619 Buffer Overflow Vulnerability (CNVD-2023-65129)

The D-Link DIR-619 is a series of routers from the Chinese company AUO D-Link. A buffer overflow vulnerability exists in D-Link DIR-619L v2.04TW, which stems from the curTime parameter of /goform/formLogin failing to correctly validate the length size of the input data, and can be exploited by a...

Medium: zstd

Issue Overview: In zstd, supplying an empty string as an argument to either --output-dir-flat or --output-dir-mirror may cause a buffer overrun. CVE-2022-4899 Affected Packages: zstd Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference...

CVE-2023-37758

D-LINK DIR-815 v1.01 was discovered to contain a buffer overflow via the component /web/captcha.cgi...

CVE-2023-37758

D-LINK DIR-815 v1.01 was discovered to contain a buffer overflow via the component /web/captcha.cgi...

CVE-2023-37758

D-LINK DIR-815 v1.01 was discovered to contain a buffer overflow via the component /web/captcha.cgi...

Buffer overflow

D-LINK DIR-815 v1.01 was discovered to contain a buffer overflow via the component /web/captcha.cgi...

dir-shop.cz Cross Site Scripting vulnerability OBB-3527321

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

D-LINK DIR-815 安全漏洞

The D-Link DIR-815 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-LINK DIR-815 v1.01, which stems from the discovery of a contained buffer overflow vulnerability via component /web/captcha.cgi...

CVE-2023-37758

The CVE-2023-37758 entry affects D-LINK DIR-815 v1.01 with a buffer overflow in the /web/captcha.cgi component. The issue is described consistently across multiple sources (NVD/Red Hat/CVE List and related databases). The root cause is a buffer overflow in the captcha.cgi handler, enabling potent...

CVE-2023-37758

D-LINK DIR-815 v1.01 was discovered to contain a buffer overflow via the component /web/captcha.cgi...