D-Link DIR-615 - Cross-Site Request Forgery

D-Link DIR-615 - Cross-Site Request Forgery Title: ==== D-Link DIR 615 HW: T1 FW:20.09 is vulnerable to Cross-Site Request Forgery CSRF vulnerability Credit: ====== Name: Pratik S. Shah Reference: ========= CVE Details: CVE-2017-7398. Date: ==== 1-04-2017 Vendor: ====== D-Link wireless router...

D-Link DIR-615 Cross Site Request Forgery

Title: ==== D-Link DIR 615 HW: T1 FW:20.09 is vulnerable to Cross-Site Request Forgery CSRF vulnerability Credit: ====== Name: Pratik S. Shah Reference: ========= CVE Details: CVE-2017-7398. Date: ==== 1-04-2017 Vendor: ====== D-Link wireless router Product: ======= DIR-615...

D-Link DIR-615 - Cross-Site Request Forgery

Title: ==== D-Link DIR 615 HW: T1 FW:20.09 is vulnerable to Cross-Site Request Forgery CSRF vulnerability Credit: ====== Name: Pratik S. Shah Reference: ========= CVE Details: CVE-2017-7398. Date: ==== 1-04-2017 Vendor: ====== D-Link wireless router Product: ======= DIR-615...

CVE-2017-7398

D-Link DIR-615 HW: T1 FW:20.09 is vulnerable to Cross-Site Request Forgery CSRF vulnerability. This enables an attacker to perform an unwanted action on a wireless router for which the user/admin is currently authenticated, as demonstrated by changing the Security option from WPA2 to None, or...

CVE-2017-7398

D-Link DIR-615 HW: T1 FW:20.09 is vulnerable to Cross-Site Request Forgery CSRF vulnerability. This enables an attacker to perform an unwanted action on a wireless router for which the user/admin is currently authenticated, as demonstrated by changing the Security option from WPA2 to None, or...

CVE-2017-7398

CVE-2017-7398 affects D-Link DIR-615 HW: T1 with FW:20.09. The issue is a CSRF vulnerability that allows an attacker to perform actions on a router when the admin is authenticated, e.g., changing the Security option, hiddenSSID/SSID, or a security-password. Impact is limited to unauthorized confi...

CVE-2017-7398

D-Link DIR-615 HW: T1 FW:20.09 is vulnerable to Cross-Site Request Forgery CSRF vulnerability. This enables an attacker to perform an unwanted action on a wireless router for which the user/admin is currently authenticated, as demonstrated by changing the Security option from WPA2 to None, or...

PT-2017-17708 · D Link · D-Link Dir-615

Name of the Vulnerable Software and Affected Versions: D-Link DIR-615 version 20.09 Description: The issue allows an attacker to perform unwanted actions on a wireless router for which the user or admin is currently authenticated. This can be demonstrated by changing the Security option from WPA2...

D-Link DIR-615 HW T1 FW 20.09 Cross-Site Request Forgery Vulnerability

Exploit for hardware platform in category web applications Title: ==== D-Link DIR 615 HW: T1 FW:20.09 is vulnerable to Cross-Site Request Forgery CSRF vulnerability Credit: ====== Name: Pratik S. Shah Reference: ========= CVE Details: CVE-2017-7398. Date: ==== 1-04-2017 Vendor: ====== D-Link...

D-LINK DIR-850L web admin interface vulnerable to stack-based buffer overflow (CVE-2017-3193 )

The affected service is the management web, in the cgibin file located within the htdocs folder on the router filesystem. The vulnerability is a Stack-Based Buffer Overflow, caused by a non-controlled use of the strcat function that allows an overwrite of the PC, and thus the execution flow of th...

D-Link DIR-600M Rev. Cx Cross-Site Request Forgery Vulnerability

The D-Link DIR-600M Rev. Cx is a wireless router product from AUO. A cross-site request forgery vulnerability exists in the D-Link DIR-600M Rev. Cx. It allows remote attackers to construct malicious URIs, trick users into parsing them, and can perform malicious operations in the context of the...

DLink / TRENDnet - NCC Service Command Injection Exploit

Exploit for hardware platform in category web applications This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'D-Link/TRENDnet NCC Service Command Injection', 'Description' = %q...

Authentication flaw

CSRF exists on D-Link DIR-600M Rev. Cx devices before v3.05ENB01beta20170306. This can be used to bypass authentication and insert XSS sequences or possibly have unspecified other impact...

CVE-2017-5874

CSRF exists on D-Link DIR-600M Rev. Cx devices before v3.05ENB01beta20170306. This can be used to bypass authentication and insert XSS sequences or possibly have unspecified other impact...

CVE-2017-5874

CVE-2017-5874 affects D-Link DIR-600M Rev. Cx before v3.05ENB01_beta_20170306. A CSRF flaw exists that can bypass authentication and lead to potentially malicious actions, including insertion of XSS payloads and changing critical settings. Public sources (NVD/CNVD/PRION/PT Security/Exploit-DB) co...

D-Link DIR-130 and DIR-330 are vulnerable to authentication bypass and do not protect credentials

Overview The D-Link DIR-130 and DIR-330 are vulnerable to authentication bypass of the remote login page, and do not sufficiently protect administrator credentials. Description The D-Link DIR-130, firmware version 1.23, and DIR-330, firmware version 1.12, are vulnerable to the following:CWE-294:...

D-Link DIR-816L (Wireless Router) - Cross-Site Request Forgery (CVE-2015-5999)

1 User login to DIR-816L wireless router 2 User visits the attacker's malicious web page attacker.html 3 attacker.html exploits CSRF vulnerability and changes the admin account password PoC video link: http://youtu.be/UBdR2sUc8Wg Exploit code attacker.html:...

Stack Buffer Overflow Vulnerability in Multiple D-Link Products

The D-Link DIR-850L is a wireless router from AUO D-Link. A stack buffer overflow vulnerability exists in the D-Link DIR-850L using firmware versions 1.14B07 and 2.07.B05. An attacker can exploit this vulnerability to execute arbitrary code in the context of the affected device, resulting in a...

D-Link DIR-850L web admin interface contains a stack-based buffer overflow vulnerability

Overview D-Link DIR-850L, firmware versions 1.14B07, 2.07.B05, and possibly others, contains a stack-based buffer overflow vulnerability in the web administration interface HNAP service. Other models may also be affected. Description CWE-121: Stack-based Buffer Overflow - CVE-2017-3193D-Link...

CVE-2017-5228

All editions of Rapid7 Metasploit prior to version 4.13.0-2017020701 contain a directory traversal vulnerability in the Meterpreter stdapi Dir.download function. By using a specially-crafted build of Meterpreter, it is possible to write to an arbitrary directory on the Metasploit console with the...