CVE-2025-29042: Improper Neutralization of Special Elements used in an OS Command

An issue in dlink DIR 832x 240802 allows a remote attacker to execute arbitrary code via the macaddr key value to the function 0x42232c...

CVE-2025-29041: Improper Neutralization of Special Elements used in an OS Command

An issue in dlink DIR 823x 240802 allows a remote attacker to execute arbitrary code via the targetaddr key value and the function 0x41710c...

CVE-2025-29040: Improper Neutralization of Special Elements used in an OS Command

An issue in dlink DIR 823x 240802 allows a remote attacker to execute arbitrary code via the targetaddr key value and the function 0x41737c...

dlink.ru Cross Site Scripting vulnerability OBB-4040211

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2025-2620

A vulnerability has been found in D-Link DAP-1620 1.03 and classified as critical. This vulnerability affects the function modgraphauthurihandler of the file /storage of the component Authentication Handler. The manipulation leads to stack-based buffer overflow. The attack can be initiated...

CVE-2025-1800

A vulnerability has been found in D-Link DAR-7000 3.2 and classified as critical. This vulnerability affects the function getipaddrdetails of the file /view/vpn/sxhvpn/sxhvpnlic.php of the component HTTP POST Request Handler. The manipulation of the argument ethname leads to command injection. Th...

The vulnerability of the set_ws_action() function in the microprogramming software of the D-Link DAP-1320 wireless signal booster allows a intruder to trigger a service failure.

The vulnerability of the setwsaction function in the microprogramming software of the D-Link DAP-1320 wireless signal amplifier is related to the output of operations that go beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

The vulnerability of the CGI script VirtualServer.asp in the microprogramming software for D-Link DSL-3782 allows a hacker to execute arbitrary commands.

The vulnerability of the CGI script VirtualServer.asp in the D-Link DSL-3782 router microprogramming system is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

CVE-2022-36786

DLINK - DSL-224 Post-auth RCE. DLINK router version 3.0.8 has an interface where you can configure NTP servers Network Time Protocol via jsonrpc API. It is possible to inject a command through this interface that will run with ROOT permissions on the router...

CVE-2024-57595

The DLINK DIR-825 REVB 2.03 router is susceptible to an OS command injection vulnerability in the apc_client_pin.cgi CGI interface. The root cause is a failure to properly filter special characters and commands within the wps_pin parameter during request processing. A remote attacker can exploit ...

CVE-2024-57595

DLINK DIR-825 REVB 2.03 devices have an OS command injection vulnerability in the CGl interface apcclientpin.cgi, which allows remote attackers to execute arbitrary commands via the parameter "wpspin" passed to the apcclientpin.cgi binary through a POST request...

CVE-2024-57595

DLINK DIR-825 REVB 2.03 devices have an OS command injection vulnerability in the CGl interface apcclientpin.cgi, which allows remote attackers to execute arbitrary commands via the parameter "wpspin" passed to the apcclientpin.cgi binary through a POST request...

CVE-2024-57595: Improper Neutralization of Special Elements used in an OS Command

DLINK DIR-825 REVB 2.03 devices have an OS command injection vulnerability in the CGl interface apcclientpin.cgi, which allows remote attackers to execute arbitrary commands via the parameter "wpspin" passed to the apcclientpin.cgi binary through a POST request...

The vulnerability of the /sbin/httpd file in D-Link DIR-860L router microprogramming software allows a hacker to cause a service failure.

The vulnerability of the /sbin/httpd microprogramming system of D-Link DIR-860L routers is related to errors in pointer assignment due to incorrect checking of HTTP request formats. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially crafted HTTP...

The vulnerability of the formResetStatistic() function in D-Link DIR-605L router software allows a hacker to induce a service failure.

The vulnerability of the formResetStatistic function in D-Link DIR-605L router microprogramming software is related to the issue where the operation’s output escapes the buffer in memory when processing the curTime parameter. Exploiting this vulnerability allows a malicious actor to cause a servi...

The vulnerability of the file loading function of the configuration module for D-Link DWR 2000M VPN microprogramming router allows a hacker to perform cross-site scripting attacks.

The vulnerability of the file loading function for the configuration module of D-Link DWR 2000M routers exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows attackers to perform cross-site scripting attacks by loading a specially created...

D-Link DIR-605L 安全漏洞

The D-Link DIR-605L is a wireless router from D-Link that supports a variety of network connections and security settings. The D-Link DIR-605L suffers from a buffer overflow vulnerability that originates in the file /goform/formResetStatistic parameter curTime, no details of the vulnerability are...

Exploit for Improper Neutralization in Dlink Dns-320_Firmware

CVE-2024-10914 - D-Link Remote Code Execution RCE This repo...

CVE-2024-52757

D-LINK DI-8003 v16.07.16A1 was discovered to contain a buffer overflow via the notify parameter in the arpsysasp function...

The vulnerability of the upgrade_filter_asp function in the /upgrade_filter.asp file of the D-Link DI-8003 router’s microprogramming system, allowing a hacker to execute arbitrary commands.

The vulnerability of the upgradefilterasp function in the /upgradefilter.asp file of the D-Link DI-8003 router microprogramming system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...