CVE-2018-6530

The CVE-2018-6530 entry describes an OS command injection in the D‑Link DIR series through soap.cgi (soapcgi_main in cgibin), allowing remote execution of arbitrary OS commands via the service parameter. Affected devices include DIR-880L (REVA firmware patches 1.08B04 and earlier), DIR-868L (DIR8...

CVE-2018-6530

OS command injection vulnerability in soap.cgi soapcgimain in cgibin in D-Link DIR-880L DIR-880LREVAFIRMWAREPATCH1.08B04 and previous versions, DIR-868L DIR868LA1FW112b04 and previous versions, DIR-65L DIR-865LREVAFIRMWAREPATCH1.08.B01 and previous versions, and DIR-860L DIR860LA1FW110b04 and...

D-Link DIR-600M Wireless - Cross-Site Scripting Vulnerability

Exploit for hardware platform in category web applications Exploit Title: D-Link DIR-600M Wireless - Persistent Cross Site Scripting Vendor Homepage: http://www.dlink.co.in Hardware Link: http://www.dlink.co.in/products/?pid=DIR-600M Category: Hardware Exploit Author: Prasenjit Kanti Paul Web:...

D-Link DIR-600M Wireless - Cross-Site Scripting

D-Link DIR-600M Wireless - Cross-Site Scripting Exploit Title: D-Link DIR-600M Wireless - Persistent Cross Site Scripting Date: 11.02.2018 Vendor Homepage: http://www.dlink.co.in Hardware Link: http://www.dlink.co.in/products/?pid=DIR-600M Category: Hardware Exploit Author: Prasenjit Kanti Paul...

D-Link DIR-600M Wireless Cross Site Scripting

Exploit Title: D-Link DIR-600M Wireless - Persistent Cross Site Scripting Date: 11.02.2018 Vendor Homepage: http://www.dlink.co.in Hardware Link: http://www.dlink.co.in/products/?pid=DIR-600M Category: Hardware Exploit Author: Prasenjit Kanti Paul Web: http://hack2rule.wordpress.com/ Hardware...

D-Link DIR-600M C1 Cross Site Scripting Vulnerability

D-Link DIR-600M C1 is a wireless router product from AUO D-Link. A cross-site scripting vulnerability exists in the D-Link DIR-600M C1 version 3.01, which stems from the program failing to properly filter user-submitted input. A remote attacker can exploit this vulnerability to inject malicious...

CVE-2018-6936

Cross Site Scripting XSS exists on the D-Link DIR-600M C1 3.01 via the SSID or the name of a user account...

CVE-2018-6936

Cross Site Scripting XSS exists on the D-Link DIR-600M C1 3.01 via the SSID or the name of a user account...

Cross site scripting

Cross Site Scripting XSS exists on the D-Link DIR-600M C1 3.01 via the SSID or the name of a user account...

CVE-2018-6936

Cross Site Scripting XSS exists on the D-Link DIR-600M C1 3.01 via the SSID or the name of a user account...

CVE-2018-6936

CVE-2018-6936 affects D-Link DIR-600M C1 firmware 3.01. A cross-site scripting vulnerability exists in the router’s admin panel, allowing injection via the SSID or the name of a user account due to inadequate input filtering. Exploitation is demonstrated in public writeups (e.g., stored XSS via U...

PT-2018-4010 · D Link · D-Link Dir-600M C1

Name of the Vulnerable Software and Affected Versions: D-Link DIR-600M C1 version 3.01 Description: The issue exists due to inadequate protection of the web page structure in the administrative panel of the D-Link DIR-600M C1 Wi-Fi router's firmware. This allows a remote attacker to conduct a...

UBUNTU-CVE-2017-15093

When api-config-dir is set to a non-empty value, which is not the case by default, the API in PowerDNS Recursor 4.x up to and including 4.0.6 and 3.x up to and including 3.7.4 allows an authorized user to update the Recursor's ACL by adding and removing netmasks, and to configure forward zones. I...

CVE-2017-15093

When api-config-dir is set to a non-empty value, which is not the case by default, the API in PowerDNS Recursor 4.x up to and including 4.0.6 and 3.x up to and including 3.7.4 allows an authorized user to update the Recursor's ACL by adding and removing netmasks, and to configure forward zones. I...

VulnCheck KEV: CVE-2015-2052

Stack-based buffer overflow in the DIR-645 Wired/Wireless Router Rev. Ax with firmware 1.04b12 and earlier allows remote attackers to execute arbitrary code via a long string in a GetDeviceSettings action to the HNAP interface...

D-Link DIR 615/645/815 service.cgi Remote Command Execution Vulnerability

D-Link DIR 615/645/815 is a wireless router product from AUO D-Link. A remote command execution vulnerability exists in D-Link DIR 615/645/815 routers with firmware version 1.03 and earlier. The vulnerability is caused by splicing data from HTTP POST requests in service.cgi, resulting in splicing...

D-Link DIR-629 and DIR-823 Remote Stack Overflow Vulnerability

The D-Link DIR-629 and DIR-823 are both wireless router products from AUO D-Link. A remote stack overflow vulnerability exists in the D-Link DIR-629 and DIR-823. The vulnerability is caused by a buffer overflow in soap.cgi due to the use of the sprintf function to splice the HTTPSOAPACTION field ...

PT-2018-4008 · D Link · Dir-860L +2

Name of the Vulnerable Software and Affected Versions: D-Link DIR-868L versions DIR868LA1 FW112b04 and earlier D-Link DIR-865L versions DIR-865L REVA FIRMWARE PATCH 1.08.B01 and earlier D-Link DIR-860L versions DIR860LA1 FW110b04 and earlier Description: The issue allows remote attackers to read ...

D-Link soap.cgi Stack Buffer Overflow(CVE-2018-5318)

作者：Chu 1. 前言 老板前一段给买了几款路由把玩，研究了下 D-Link DIR 629、DIR 823 这两款板子。 发现在 soap.cgi 中存在几处栈溢出，均可以远程利用，并且其他型号的路由也有对 soap 这一部分代码的复用。 2. 逆向分析与漏洞挖掘 因为是想挖几个能远程利用的洞，首先去看了 HTTP 服务，也就是 /htdocs/cgibin。 D-Link HTTP 服务由cgibin提供，并通过软链接的文件名进入到不同的处理分支： 在各个 cgi 处理函数中，会通过 cgibinparserequest 来解析用户输入，其函数原型大致如下： 参数...

Ruby: The possibility that unintended file operation may be performed because some methods of `Dir` do not check NULL characters.

It seems that entries,new, and empty? do not check NULL characters in methods of Dir. log vagrant@localhost $ ls test vagrant@localhost $ irb irbmain:001:0 Dir.open"/home/vagrant\0xxx" do |d| irbmain:002:1 p d.read = "." irbmain:003:1 p d.read = ".." irbmain:004:1 p d.read irbmain:005:1 p d.read...