CVE-2018-17065: Out-of-bounds Write

An issue was discovered on D-Link DIR-816 A2 1.10 B05 devices. Within the handler function of the /goform/DDNS route, a very long password could lead to a stack-based buffer overflow and overwrite the return address...

CVE-2018-16605

D-Link DIR-600M devices allow XSS via the Hostname and Username fields in the Dynamic DNS Configuration page...

Design/Logic Flaw

D-Link DIR-600M devices allow XSS via the Hostname and Username fields in the Dynamic DNS Configuration page...

CVE-2018-16605

The CVE-2018-16605 entry pertains to D-Link DIR-600M devices where an XSS vulnerability exists in the Dynamic DNS Configuration page, specifically via the Hostname and Username fields. The vulnerability allows remote attackers to inject arbitrary web script or HTML when interacting with these fie...

PT-2018-13644

Name of the Vulnerable Software and Affected Versions D-Link DIR-600M affected versions not specified Description The issue allows for cross-site scripting XSS attacks through the Hostname and Username fields in the Dynamic DNS Configuration page. This can potentially lead to malicious script...

CVE-2018-16605: Improper Neutralization of Input During Web Page Generation

D-Link DIR-600M devices allow XSS via the Hostname and Username fields in the Dynamic DNS Configuration page...

DEBIAN-CVE-2018-16831

Smarty before 3.1.33-dev-4 allows attackers to bypass the trusteddir protection mechanism via a file:./../ substring in an include statement...

D-Link Dir-600M N150 - Cross-Site Scripting Vulnerability

Exploit for hardware platform in category web applications Exploit Title: D-Link Dir-600M N150 - Cross-Site Scripting Exploit Author: PUNIT DARJI Vendor Homepage: www.dlink.co.in Hardware Link: https://amzn.to/2NUIniO Version: DIR-600M Firmware 3.01 Tested on: Windows 7 ultimate CVE: N/A POC Goto...

D-Link Dir-600M N150 - Cross-Site Scripting

D-Link Dir-600M N150 - Cross-Site Scripting Exploit Title: D-Link Dir-600M N150 - Cross-Site Scripting Date: 2018-09-06 Exploit Author: PUNIT DARJI Vendor Homepage: www.dlink.co.in Hardware Link: https://amzn.to/2NUIniO Version: DIR-600M Firmware 3.01 Tested on: Windows 7 ultimate CVE: N/A POC Go...

D-Link Dir-600M N150 - Cross-Site Scripting

Exploit Title: D-Link Dir-600M N150 - Cross-Site Scripting Date: 2018-09-06 Exploit Author: PUNIT DARJI Vendor Homepage: www.dlink.co.in Hardware Link: https://amzn.to/2NUIniO Version: DIR-600M Firmware 3.01 Tested on: Windows 7 ultimate CVE: N/A POC Goto your Wifi Router Gateway i.e: 192.168.X.X...

D-Link DIR-846 Remote Code Execution Vulnerability

D-Link DIR-846 is a wireless router product from AUO D-Link. A remote code execution vulnerability exists in the D-Link DIR-846 with firmware version 100.26, which can be exploited by remote attackers with administrator access to execute arbitrary code as root by sending a...

phpkaiyuancms PhpOpenSourceCMS SQL Injection Vulnerability

phpkaiyuancms PhpOpenSourceCMS POSCMS is a PHP and MySQL based, cross-platform, open source web content management system CMS. A SQL injection vulnerability exists in POSCMS version 3.2.0, which can be exploited by remote attackers to execute arbitrary SQL commands with the help of the 'dir'...

CVE-2018-16408

D-Link DIR-846 devices with firmware 100.26 allow remote attackers to execute arbitrary code as root via a SetNetworkTomographySettings request by leveraging admin access...

CVE-2018-16408

D-Link DIR-846 devices with firmware 100.26 allow remote attackers to execute arbitrary code as root via a SetNetworkTomographySettings request by leveraging admin access...

Code injection

D-Link DIR-846 devices with firmware 100.26 allow remote attackers to execute arbitrary code as root via a SetNetworkTomographySettings request by leveraging admin access...

CVE-2018-16408

D-Link DIR-846 devices with firmware 100.26 allow remote attackers to execute arbitrary code as root via a SetNetworkTomographySettings request by leveraging admin access...

CVE-2018-16408

D-Link DIR-846 devices with firmware 100.26 are affected by a remote code execution vulnerability. The issue allows an attacker with admin access to trigger SetNetworkTomographySettings to execute arbitrary code as root. Reports across sources confirm the vulnerability exists in DIR-846 and firmw...

D-Link DIR-615 - Denial of Service Vulnerability

Exploit for hardware platform in category dos / poc Exploit Title: D-Link DIR-615 - Denial of Service PoC Vendor Homepage: http://www.dlink.co.in Hardware Link: https://www.amazon.in/D-Link-DIR-615-Wireless-N300-Router-Black/dp/B0085IATT6 Version: D-Link DIR-615 Category: Hardware Exploit Author:...

D-Link DIR-615 Denial Of Service

Exploit Title: D-Link DIR-615 - Denial of Service PoC Date: 2018-08-09 Vendor Homepage: http://www.dlink.co.in Hardware Link: https://www.amazon.in/D-Link-DIR-615-Wireless-N300-Router-Black/dp/B0085IATT6 Version: D-Link DIR-615 Category: Hardware Exploit Author: Aniket Dinda Tested on: Linux kali...

D-Link DIR-615 - Denial of Service (PoC)

D-Link DIR-615 - Denial of Service PoC Exploit Title: D-Link DIR-615 - Denial of Service PoC Date: 2018-08-09 Vendor Homepage: http://www.dlink.co.in Hardware Link: https://www.amazon.in/D-Link-DIR-615-Wireless-N300-Router-Black/dp/B0085IATT6 Version: D-Link DIR-615 Category: Hardware Exploit...