8454 matches found
CVE-2022-37133
D-link DIR-816 A2v1.10CNB04.img reboots the router without authentication via /goform/doReboot. No authentication is required, and reboot is executed when the function returns at the end...
CVE-2022-37134
D-link DIR-816 A2v1.10CNB04.img is vulnerable to Buffer Overflow via /goform/form2Wan.cgi. When wantype is 3, l2tpusrname will be decrypted by base64, and the result will be stored in v94, which does not check the size of l2tpusrname, resulting in stack overflow...
CVE-2022-37134
CVE-2022-37134 affects D-Link DIR-816 A2 v1.10CNB04.img. The vulnerability is a buffer/stack overflow in /goform/form2Wan.cgi when wantype is 3: l2tp_usrname is base64-decoded into v94 without verifying size, leading to a stack overflow and potential code execution. Documented impacts include cod...
D-Link DIR-816 安全漏洞
The D-Link DIR-816 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the mirrored version of the D-Link DIR-816 firmware A2v1.10CNB04.img, which stems from a reboot that will be executed when the function finally returns and does not require authentication by th...
PT-2022-23829 · D Link · Dir-816
Name of the Vulnerable Software and Affected Versions: D-link DIR-816 version 1.10CNB04 Description: The issue allows the router to reboot without authentication via the "/goform/doReboot" API endpoint. No authentication is required, and the reboot is executed when the function returns at the end...
PT-2022-23830 · D Link · D-Link Dir-816
Name of the Vulnerable Software and Affected Versions: D-link DIR-816 version A2 v1.10CNB04.img Description: The issue arises from a Buffer Overflow vulnerability via the /goform/form2Wan.cgi endpoint. When wantype is 3, the l2tp usrname will be decrypted by base64, and the result will be stored ...
D-Link DIR-816 安全漏洞
The D-Link DIR-816 is a wireless router from AUO D-Link of Taiwan, China. A buffer overflow vulnerability exists in the mirrored version of the D-link DIR-816 firmware A2v1.10CNB04.img. The vulnerability stems from the fact that when the wantype of its /goform/form2Wan.cgi component is 3, the...
FileRun 安全漏洞
FileRun is a PHP web hosting program similar to Nextcloud by FileRun. A security vulnerability exists in FileRun version 20220519, which originates from SQL injection via the "dir" parameter in the /?module=users§ion=cpanel&page=list request...
dir-shop.cz Cross Site Scripting vulnerability OBB-2827014
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2022-35620
D-LINK DIR-818LW A1:DIR818LFW105b01 was discovered to contain a remote code execution RCE vulnerability via the function binary.soapcgimain...
CVE-2022-35619
D-LINK DIR-818LW A1:DIR818LFW105b01 was discovered to contain a remote code execution RCE vulnerability via the function ssdpcgimain...
CVE-2022-35620
D-LINK DIR-818LW A1:DIR818LFW105b01 was discovered to contain a remote code execution RCE vulnerability via the function binary.soapcgimain...
CVE-2022-35620
D-LINK DIR-818LW A1:DIR818LFW105b01 was discovered to contain a remote code execution RCE vulnerability via the function binary.soapcgimain...
CVE-2022-35619
D-LINK DIR-818LW A1:DIR818LFW105b01 was discovered to contain a remote code execution RCE vulnerability via the function ssdpcgimain...
Remote code execution
D-LINK DIR-818LW A1:DIR818LFW105b01 was discovered to contain a remote code execution RCE vulnerability via the function binary.soapcgimain...
Remote code execution
D-LINK DIR-818LW A1:DIR818LFW105b01 was discovered to contain a remote code execution RCE vulnerability via the function ssdpcgimain...
CVE-2022-35620
D-LINK DIR-818LW A1:DIR818LFW105b01 was discovered to contain a remote code execution RCE vulnerability via the function binary.soapcgimain...
CVE-2022-35620
CVE-2022-35620 affects D-LINK DIR-818LW A1 (DIR818L_FW105b01). The vulnerability is a remote code execution in the binary.soapcgi_main function, enabling an unauthenticated attacker over the network to run arbitrary code on the device. The CVSS base score is 9.8 (CRITICAL) with impact to confiden...
CVE-2022-35619
CVE-2022-35619 affects D-LINK DIR-818LW A1 (DIR818L_FW105b01) with a remote code execution vulnerability in the ssdpcgi_main function. The NVD entry specifies a critical CVSS v3.1 score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), indicating network-exposed, no user interaction required, with hi...