8482 matches found
D-Link Multiple DIR Devices Multiple Vulnerabilities (Sep 2022)
Multiple D-Link DIR devices are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
D-Link DIR-300 安全漏洞
The D-Link DIR-300 is a wireless router from China's AUO D-Link. A security vulnerability exists in the D-Link DIR-300 REVA1.06 and earlier firmware versions, REVB2.06 and earlier firmware versions, which originates from an easy file inclusion attack via /model/langmsg.php...
CVE-2023-31814
D-Link DIR-300 firmware =REVA1.06 and =REVB2.06 is vulnerable to File inclusion via /model/langmsg.php...
CVE-2023-31814
D-Link DIR-300 firmware =REVA1.06 and =REVB2.06 is vulnerable to File inclusion via /model/langmsg.php...
CVE-2023-31814
The CVE-2023-31814 entry concerns D-Link DIR-300 firmware and is tied to a file inclusion vulnerability in the script /model/__lang_msg.php. Affected devices are DIR-300 firmware versions <=REVA1.06 and
PT-2023-2983 · D Link · D-Link Dir-846
Name of the Vulnerable Software and Affected Versions: D-Link DIR-846 version 1.00A52 Description: The issue is related to the implementation of the HNAP1 protocol in the D-Link DIR-846 router's firmware, specifically concerning the handling of the tomography ping address parameter. This can be...
The vulnerability of the SetClientInfoDemo.php script in D-Link DIR-868L router software allows a hacker to execute any command they desire.
The vulnerability of the SetClientInfoDemo.php script in the D-Link DIR-868L router microprogramming software exists due to the failure to take measures to neutralize the special elements used in the operating system command. Exploiting this vulnerability allows a malicious actor to execute...
D-Link DIR-605L Stack Buffer Overflow Vulnerability
The D-Link DIR-605L is a wireless router from China's AUO D-Link. The D-Link DIR-605L version 1.17B01 BETA suffers from a stack buffer overflow vulnerability due to incorrect boundary checking in /goform/formTcpipSetup. An attacker could exploit this vulnerability to cause a buffer overflow and...
The vulnerability in the web interface for managing D-Link DIR-2640-US microprogramming software allows a hacker to bypass security restrictions.
The vulnerability of the web interface for managing D-Link DIR-2640-US microprogramming devices is related to deficiencies in the authentication process when processing requests containing XML elements. Exploiting this vulnerability can allow a malicious actor to circumvent security restrictions...
The vulnerability of the SetQoSSettings.php script in D-Link DIR-822 router software allows a hacker to execute arbitrary commands.
The vulnerability of the SetQoSSettings.php script in D-Link DIR-822 router microprogramming software is related to insufficient checking of regular expressions during the processing of the uplink parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
The vulnerability of the HNAP protocol implementation in D-Link Wi-Fi router microprogramming products such as DIR-867-US, DIR-878, and DIR-882-US allows attackers to circumvent security restrictions, gain increased privileges, or execute arbitrary code.
The vulnerability of the HNAP protocol implementation in D-Link Wi-Fi router software models such as DIR-867-US, DIR-878, and DIR-882-US lies in the ability to bypass authentication by using an alternative path or channel when processing HTTP requests that include the string “?GetCAPTCHAsetting”...
The vulnerability in the prog.cgi web interface script of D-Link DIR-2640-US’s router software allows a hacker to execute arbitrary code.
The vulnerability in the prog.cgi web interface for managing D-Link DIR-2640-US router microprogramming software relates to the escape of operations beyond the buffer in memory when checking the length of data entered by the user. Exploiting this vulnerability allows a remote attacker to execute...
PT-2023-2929 · Piwigo · Piwigo
Name of the Vulnerable Software and Affected Versions: Piwigo versions prior to 13.6.0 Description: The issue is related to a lack of validation of XML object sequences in the user list backend.php script of the Piwigo content management system. This can be exploited by a remote attacker to condu...
The vulnerability of D-Link DIR-819 router’s microprogramming software, related to improper cleaning or freeing of resources, allows a intruder to trigger a service failure.
The vulnerability of D-Link DIR-819 router’s microprogramming software is related to improper cleaning or freeing of resources. Exploiting this vulnerability can allow a malicious actor to trigger a service failure by sending a specially crafted request from the...
The vulnerability in the web interface for managing D-Link DIR-2640-US microprogramming software allows a hacker to bypass security restrictions.
The vulnerability of the web interface for managing D-Link DIR-2640-US microprogramming software is related to deficiencies in the authentication process when processing the LoginPassword parameter. Exploiting this vulnerability allows a malicious actor to bypass security restrictions by sending ...
The vulnerability of the HNAP1 protocol implementation in D-Link DIR-2640-US router microsoftware allows a attacker to execute arbitrary code.
The vulnerability of the HNAP1 protocol implementation in D-Link DIR-2640-US router microprogramming software is related to the lack of measures to sanitize input data during the processing of the PrefixLen parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary cod...
The vulnerability of the SetWiFiVerifyAlpha.php script in D-Link DIR-822 router software allows a hacker to influence the integrity, availability, and confidentiality of the protected information.
The vulnerability of the SetWiFiVerifyAlpha.php script of the D-Link DIR-822 router’s software lies in insufficient validation of arguments passed in the command when processing the WPSPIN parameter. Exploiting this vulnerability allows a remote attacker to compromise the integrity, availability,...
CVE-2023-29961
D-Link DIR-605L firmware version 1.17B01 BETA is vulnerable to stack overflow via /goform/formTcpipSetup,...
