Buffer overflow

Processing malformed SOAP messages when performing the HNAP Login action causes a buffer overflow in the stack in some D-Link DIR routers. The vulnerable XML fields within the SOAP body are: Action, Username, LoginPassword, and Captcha. The following products are affected: DIR-823, DIR-822,...

CVE-2016-6563 D-Link DIR routers contain a stack-based buffer overflow in the HNAP Login action

Processing malformed SOAP messages when performing the HNAP Login action causes a buffer overflow in the stack in some D-Link DIR routers. The vulnerable XML fields within the SOAP body are: Action, Username, LoginPassword, and Captcha. The following products are affected: DIR-823, DIR-822,...

CVE-2016-6563

CVE-2016-6563 describes a stack-based buffer overflow in the HNAP login path of certain D-Link DIR routers when processing malformed SOAP messages. Affected models include DIR-823, DIR-822, DIR-818L(W), DIR-895L, DIR-890L, DIR-885L, DIR-880L, DIR-868L, and DIR-850L. The overflow occurs in the HNA...

VulnCheck KEV: CVE-2011-4723

The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information...

D-Link DIR601 2.02 - Credential Disclosure

D-Link DIR601 2.02 - Credential Disclosure Exploit title: D-Link DIR601 2.02NA - Credential disclosure Date: 2018-07-10 Exploit Author: Richard Rogerson Vendor Homepage: http://ca.dlink.com/ Software Link: http://support.dlink.ca/ProductInfo.aspx?m=DIR-601 Version: = 2.02NA Tested on: D-Link DIR6...

D-Link DIR601 2.02 - Credential Disclosure

Exploit title: D-Link DIR601 2.02NA - Credential disclosure Date: 2018-07-10 Exploit Author: Richard Rogerson Vendor Homepage: http://ca.dlink.com/ Software Link: http://support.dlink.ca/ProductInfo.aspx?m=DIR-601 Version: = 2.02NA Tested on: D-Link DIR601 Firmware 2.02NA Contact:...

File Containment Vulnerability in D-Link DIR-300 Router

D-Link DIR-300 is a wireless router product from AUO D-Link. A file inclusion vulnerability exists in the D-Link DIR-300 router, which can be exploited by attackers to obtain sensitive information...

CVE-2018-12103

The CVE-2018-12103 issue affects D-Link DIR-890L (firmware ≤ 1.21B02beta01), DIR-885L/R (≤ 1.21B03beta01), and DIR-895L/R (≤ 1.21B04beta04). The root cause is the predictable, locally accessible /docs/captcha_(number).jpeg URI in the administrator panel, which an attacker can leverage to disclose...

D-Link DIR-620 Command Injection (CVE-2018-6211)

A command injection vulnerability exists in D-Link DIR-620 routers. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands...

D-Link DIR-890L A2 Improper Access Control Vulnerability

D-Link DIR-890L is a wireless router product from AUO D-Link. The D-Link DIR-890L A2 suffers from an Improper Access Control vulnerability that, due to the predictability of the /docs/captchanumber.jpeg URI, allows an attacker to disclose the CAPTCHA used by the access point and optionally load t...

EulerOS 2.0 SP2 : ruby (EulerOS-SA-2018-1206)

According to the versions of the ruby packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was found that the tmpdir and tempfile modules did not sanitize their file name argument. An attacker with control over the name could create...

Phusion Passenger nginx module elevation of privilege vulnerability

Phusion Passenger is an Apache module from the Dutch company Phusion for deploying Ruby on Rails projects on Apache and Nginx web servers. nginx module is one of the Nginx server modules. A security vulnerability in the nginx module in Phusion Passenger versions 5.3.2 through 3.x excluding versio...

Sandoba CP:Shop '. /cpshop/' module cross-site scripting vulnerability

Sandoba CP:Shop is a set of online store system of German Sandoba company. The system sales management, financial management and site search and other functions. The Sandoba CP:Shop 2016.1 version of the '. /cpshop/' module has a cross-site scripting vulnerability in the 'admin.php' file. The...

The vulnerability of the weblogin_log function in the D-Link DIR-629-B1 router’s microprogramming software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the webloginlog function /htdocs/cgibin of the D-Link DIR-629-B1 router microprogramming system is caused by buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a denial-of-service attack by sending a specially crafted...

DEBIAN-CVE-2018-12713

GIMP through 2.10.2 makes ggettmpdir calls to establish temporary filenames, which may result in a filename that already exists, as demonstrated by the gimpwriteandreadfile function in app/tests/test-xcf.c. This might be leveraged by attackers to overwrite files or read file content that was...

CVE-2018-6212

On D-Link DIR-620 devices with a certain customized by ISP variant of firmware 1.0.3, 1.0.37, 1.3.1, 1.3.3, 1.3.7, 1.4.0, and 2.0.22, a reflected Cross-Site Scripting XSS attack is possible as a result of missed filtration for special characters in the "Search" field and incorrect processing of t...

CVE-2018-6211

On D-Link DIR-620 devices with a certain customized by ISP variant of firmware 1.0.3, 1.0.37, 1.3.1, 1.3.3, 1.3.7, 1.4.0, and 2.0.22, OS command injection is possible as a result of incorrect processing of the resbuf parameter to index.cgi...

CVE-2018-6211

On D-Link DIR-620 devices with a certain customized by ISP variant of firmware 1.0.3, 1.0.37, 1.3.1, 1.3.3, 1.3.7, 1.4.0, and 2.0.22, OS command injection is possible as a result of incorrect processing of the resbuf parameter to index.cgi...

CVE-2018-6213

In the web server on D-Link DIR-620 devices with a certain customized by ISP variant of firmware 1.0.3, 1.0.37, 1.3.1, 1.3.3, 1.3.7, 1.4.0, and 2.0.22, there is a hardcoded password of anonymous for the admin account...

Cross site scripting

On D-Link DIR-620 devices with a certain customized by ISP variant of firmware 1.0.3, 1.0.37, 1.3.1, 1.3.3, 1.3.7, 1.4.0, and 2.0.22, a reflected Cross-Site Scripting XSS attack is possible as a result of missed filtration for special characters in the "Search" field and incorrect processing of t...