Default credentials

D-Link DIR-601 A1 1.02NA devices do not require the old password for a password change, which occurs in cleartext...

CVE-2018-10641

D-Link DIR-601 A1 1.02NA devices do not require the old password for a password change, which occurs in cleartext...

CVE-2018-10641

CVE-2018-10641 affects the D-Link DIR-601 A1 (firmware version 1.02NA). The vulnerability allows password changes without presenting the current password, and the new credentials are transmitted in cleartext. This constitutes an authentication bypass enabling potential information exposure (param...

CVE-2018-10641: Improper Authentication

D-Link DIR-601 A1 1.02NA devices do not require the old password for a password change, which occurs in cleartext...

D-Link DIR-615 Remote Code Execution Vulnerability

D-Link DIR-615 is a small wireless router product from AUO D-Link. A security vulnerability exists in the D-Link DIR-615 version 2.5.17. The vulnerability can be exploited by remote attackers to execute code via shell metacharacters in the Host field of the System/Traceroute interface...

CVE-2018-10431

D-Link DIR-615 2.5.17 devices allow Remote Code Execution via shell metacharacters in the Host field of the System / Traceroute screen...

Remote code execution

D-Link DIR-615 2.5.17 devices allow Remote Code Execution via shell metacharacters in the Host field of the System / Traceroute screen...

CVE-2018-10431

D-Link DIR-615 2.5.17 devices allow Remote Code Execution via shell metacharacters in the Host field of the System / Traceroute screen...

CVE-2018-10431

D-Link DIR-615, version 2.5.17, is affected by CVE-2018-10431 due to insufficient sanitization of shell metacharacters in the Host field of the System/Traceroute interface, enabling Remote Code Execution. The vulnerability is described across multiple sources (NVD/CNVD/etc.) with a confirmed impa...

CVE-2018-10431

D-Link DIR-615 2.5.17 devices allow Remote Code Execution via shell metacharacters in the Host field of the System / Traceroute screen...

PT-2018-3779

Name of the Vulnerable Software and Affected Versions Smarty versions prior to 3.1.33-dev-4 Description The issue is related to a flaw in the processing of the $trusted dir array, which is part of the trusted directory protection mechanism. This flaw can be exploited by attackers to bypass the...

PT-2018-3917 · D Link · D-Link Dir-615

Name of the Vulnerable Software and Affected Versions: D-Link DIR-615 version 2.5.17 Description: The issue is related to the lack of proper sanitization of special elements used in an operating system command, allowing remote code execution. This can be exploited by an attacker to execute...

CVE-2018-10431: Improper Neutralization of Special Elements used in an OS Command

D-Link DIR-615 2.5.17 devices allow Remote Code Execution via shell metacharacters in the Host field of the System / Traceroute screen...

Router vulnerability reproduce the analysis of the second bomb: CNVD-2018-01084-vulnerability warning-the black bar safety net

Vulnerability information: D-Link DIR 615/645/815 router 1. 03 and previous firmware version is the presence of a remote command execution vulnerability. The vulnerability is due to service. the cgi in the splicing of the HTTP POST request data, causing background commands splicing, leading to...

The vulnerability of the soapcgi_main function in the soap.cgi script of the D-Link routers DIR-868L, DIR-865L, DIR-880L, and DIR-860L allows a hacker to execute arbitrary operating system commands.

The vulnerability of the soapcgimain function in the soap.cgi script /htdocs/cgibin/soap.cgi of the D-Link DIR-868L, DIR-865L, DIR-880L, and DIR-860L routers is related to the lack of measures to neutralize special elements used in the operating system’s command syntax. Exploiting this...

CVE-2018-10110

D-Link DIR-615 T1 devices allow XSS via the Add User feature...

Design/Logic Flaw

D-Link DIR-615 T1 devices allow XSS via the Add User feature...

CVE-2018-10110

D-Link DIR-615 T1 devices allow XSS via the Add User feature...

CVE-2018-10110

D-Link DIR-615 T1 devices allow XSS via the Add User feature...

PT-2018-19160

Name of the Vulnerable Software and Affected Versions Zulip Server versions prior to 1.7.2 Description The issue is related to an XSS problem with user uploads when using the default LOCAL UPLOADS DIR storage backend. Recommendations For versions prior to 1.7.2, update to version 1.7.2 or later t...