D-Link DIR-850L Credential Disclosure

!/bin/bash Derped together by Raphael de la Vienne A.K.A. Hackdwerg Original exploit https://www.rapid7.com/db/modules/exploit/linux/http/dlinkdir850lunauthexec Just in case if you dont have metasploit, or are to lazy to install it. here is a bash variant. Exploit Title:...

D-Link DIR-605L < 2.08UIBetaB01 DoS Vulnerability

D-Link DIR-605L is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

DLink DIR-605L < 2.08 - Denial of Service Exploit

Exploit for hardware platform in category dos / poc Exploit Title: D-Link DIR605L ROUTER=$1 if "$" -ne 1 ; then echo "usage: $0 " exit fi curl http://$ROUTER/Tools/ 0day.today 2018-04-14...

D-Link DIR-605L 2.08 - Denial of Service

D-Link DIR-605L 2.08 - Denial of Service Exploit Title: D-Link DIR605L ROUTER=$1 if "$" -ne 1 ; then echo "usage: $0 " exit fi curl http://$ROUTER/Tools/...

D-Link DIR-850L Unauthenticated Command Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'openssl' class MetasploitModule 'DIR-850L Unauthenticated OS Command Exec', 'Description' = %q This module leverages an unauthenticated credential disclosure...

D-Link DIR-850L - OS Command Execution (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'openssl' class MetasploitModule 'DIR-850L Unauthenticated OS Command Exec', 'Description' = %q This module leverages an unauthenticated credential disclosure...

D-Link DIR-605L < 2.08 - Denial of Service

Exploit Title: D-Link DIR605L ROUTER=$1 if "$" -ne 1 ; then echo "usage: $0 " exit fi curl http://$ROUTER/Tools/...

D-Link DIR-300L/600L Remote Command Execution

The remote D-Link DIR router is affected by a remote command execution vulnerability. An unauthenticated remote attacker can use this vulnerability to execute operating system commands as root. This vulnerability has been used by the IoT Reaper botnet. C Tenable Network Security, Inc...

D-Link DIR-600/300 Router Unauthenticated Remote Command Execution

A remote code execution vulnerability exists in D-Link DIR-600, DIR-300 routers. A remote attacker can exploit this weakness to execute arbitrary code in the affected router via a crafted request...

D-Link DIR Router Authenication Bypass

The remote D-Link DIR router does not properly enforce authentication when a remote user makes a crafted POST request to getcfg.php or version.php. An attacker can use this weakness to recover the administrator username and password. C Tenable Network Security, Inc. include"compat.inc"; if...

The vulnerability of the embedded microprogramming software of the D-Link DIR-615L router allows a hacker to cause a service failure and reboot the device.

The vulnerability of the embedded microprogramming software of the D-Link DIR-615L router exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to trigger service failure and reboot the device by using an unauthorized GET request...

Ubiquiti Inc.: Remote Code Execution at http://tw.corp.ubnt.com

The researcher found a Command Injection in tw.corp.ubnt.com. While hunting i came across a host of Ubiquiti Networks tw.corp.ubnt.com , when i browsed to http://tw.corp.ubnt.com there was Dir listing enabled which contained various sensitive information. This was reported to Ubiquiti Team. Howev...

DEBIAN-CVE-2017-2299

Versions of the puppetlabs-apache module prior to 1.11.1 and 2.1.0 make it very easy to accidentally misconfigure TLS trust. If you specify the sslca parameter but do not specify the sslcertsdir parameter, a default will be provided for the sslcertsdir that will trust certificates from any of the...

D-Link DIR Router Missing Authentication Check

The remote D-Link DIR router does not enforce authentication when a remote user requests registersend.php. An attacker can use this weakness to recover the administrator password. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid103219; scriptversion"1.5";...

D-Link DIR-850L REV.A Cross-Site Scripting Vulnerability (CNVD-2017-31794)

The D-Link DIR-850L REV.A is a wireless router from AUO D-Link. A cross-site scripting vulnerability exists in the D-Link DIR-850L REV.A using firmware version FW114WWb07h2abbeta1 and earlier. A remote attacker can exploit the vulnerability to steal authentication cookies by sending the 'action'...

D-Link DIR-850L REV.A and REV.B DHCP Client Remote Code Execution Vulnerability

D-Link DIR-850L REV.A and REV.B are both wireless router products from AUO D-Link.DHCP client is one of the DHCP clients. A security vulnerability exists in the DHCP client on D-Link DIR-850L REV.A and REV.B devices using firmware FW114WWb07h2abbeta1 and earlier and firmware FW208WWb02 and earlie...

D-Link DIR-850L REV.A and REV.B Man-in-the-Middle Attack Vulnerability

The D-Link DIR-850L REV.A and REV.B are both wireless router products from AUO D-Link. The security vulnerability in the D-Link NPAPI extension used in D-Link DIR-850L REV.A devices with firmware FW114WWb07h2abbeta1 and earlier and REV.B devices with firmware FW208WWb02 and earlier stems from the...

D-Link DIR-850L REV.B Password Disclosure Vulnerability

The D-Link DIR-850L REV.B is a wireless router from AUO D-Link. A security vulnerability exists in the D-Link NPAPI extension used in D-Link DIR-850L REV.B devices with firmware FW208WWb02 and prior versions. An attacker could exploit the vulnerability to retrieve the administrator password...

D-Link DIR-850L REV.A and REV.B Password Retrieval Vulnerability

The D-Link DIR-850L REV.A and REV.B are both wireless router products from AUO D-Link. A security vulnerability exists in D-Link DIR-850L REV.A and REV.B devices using firmware FW114WWb07h2abbeta1 and prior versions and REV.B with firmware FW208WWb02 and prior versions. An attacker could exploit...

D-Link DIR-850L REV.B Privilege Acquisition Vulnerability (CNVD-2017-31792)

The D-Link DIR-850L REV.B is a wireless router from AUO D-Link. A security vulnerability exists in the registersend.php file in D-Link DIR-850L REV.B devices using firmware FW208WWb02 and prior versions, which stems from the program failing to require authentication. An attacker could exploit the...