976 matches found
CVE-2024-33344
D-Link DIR-822+ V1.0.5 was found to contain a command injection in ftext function of uploadfirmware.cgi, which allows remote attackers to execute arbitrary commands via shell...
PT-2024-3330 · D Link · D-Link Dir-845L
Name of the Vulnerable Software and Affected Versions: D-Link DIR-845L router version 1.01KRb03 and earlier Description: The issue is related to a Cross Site Scripting XSS vulnerability via the /htdocs/webinc/js/bsc sms inbox.php endpoint. This vulnerability is associated with the failure to...
Exploit for Command Injection in Dlink Dns-320L_Firmware
🛠️ CVE-2024-3273 Exploit Tool 🌟 Introduction This script...
CVE-2024-27619
Dlink Dir-3040us A1 1.20b03a hotfix is vulnerable to Buffer Overflow. Any user having read/write access to ftp server can write directly to ram causing buffer overflow if file or files uploaded are greater than available ram. Ftp server allows change of directory to root which is one level up tha...
CVE-2024-27619
Dlink Dir-3040us A1 1.20b03a hotfix is vulnerable to Buffer Overflow. Any user having read/write access to ftp server can write directly to ram causing buffer overflow if file or files uploaded are greater than available ram. Ftp server allows change of directory to root which is one level up tha...
CVE-2024-27619: Buffer Copy without Checking Size of Input
Dlink Dir-3040us A1 1.20b03a hotfix is vulnerable to Buffer Overflow. Any user having read/write access to ftp server can write directly to ram causing buffer overflow if file or files uploaded are greater than available ram. Ftp server allows change of directory to root which is one level up tha...
CVE-2024-27619
Dlink Dir-3040us A1 1.20b03a hotfix is vulnerable to Buffer Overflow. Any user having read/write access to ftp server can write directly to ram causing buffer overflow if file or files uploaded are greater than available ram. Ftp server allows change of directory to root which is one level up tha...
CVE-2024-27619
The D-Link Dir-3040us A1 (version 1.20b03a hotfix ) is vulnerable to a Buffer Overflow within its ftp server . An attacker with read/write access to the ftp server can navigate to the root directory and upload files larger than the available RAM. This causes the RAM to fill, leading to system res...
CVE-2024-27619
Dlink Dir-3040us A1 1.20b03a hotfix is vulnerable to Buffer Overflow. Any user having read/write access to ftp server can write directly to ram causing buffer overflow if file or files uploaded are greater than available ram. Ftp server allows change of directory to root which is one level up tha...
The vulnerability of the sub_41D354() function in D-Link DIR-823G router’s software allows a hacker to execute arbitrary code or cause malfunctions during maintenance.
The vulnerability of the sub41D354 function in D-Link DIR-823G router’s microprogramming system is related to the issue where the operation’s output escapes the buffer in memory when processing the soapaction parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary...
The vulnerability of D-Link DIR-816 A2 wireless routers’ microprogramming software lies in the fact that the operation is performed outside the buffer in memory. This allows attackers to enhance their privileges and execute arbitrary commands.
The vulnerability of the microprogrammed software of D-Link DIR-816 A2 wireless routers is related to the escape from the buffer boundaries in memory, resulting from the failure to take measures to neutralize special elements used in the operating system’s command for processing the urladd...
The vulnerability of the HNAP1 protocol implementation in D-Link DIR-882 A1 wireless router software allows a attacker to escalate their privileges and execute arbitrary commands.
The vulnerability of the HNAP1 protocol implementation in D-Link DIR-882 A1 wireless routers’ microprogramming software is related to the failure to take measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to enhanc...
CVE-2023-24330
Command Injection vulnerability in D-Link Dir 882 with firmware version DIR882A1FW130B06 allows attackers to run arbitrary commands via crafted POST request to /HNAP1/...
DLink DIR-610 Multiple Vulnerabilities
The version of DLink installed on the remote host is unsupported and affected by multiple vulnerabilities as referenced in the vendor advisory. - D-Link DIR-610 devices allow Remote Command Execution via the cmd parameter to command.php - D-Link DIR-610 devices allow Information Disclosure via...
CVE-2024-24321
An issue in Dlink DIR-816A2 v.1.10CNB05 allows a remote attacker to execute arbitrary code via the wizardstep4ssid2 parameter in the sub42DA54 function...
Design/Logic Flaw
An issue in Dlink DIR-816A2 v.1.10CNB05 allows a remote attacker to execute arbitrary code via the wizardstep4ssid2 parameter in the sub42DA54 function...
PT-2024-20357
Name of the Vulnerable Software and Affected Versions Dlink DIR-816A2 version 1.10CNB05 Description An issue allows a remote attacker to execute arbitrary code via the wizardstep4 ssid 2 parameter in the sub 42DA54 function. Recommendations For Dlink DIR-816A2 version 1.10CNB05, as a temporary...
CVE-2024-24321: Improper Neutralization of Special Elements used in a Command
An issue in Dlink DIR-816A2 v.1.10CNB05 allows a remote attacker to execute arbitrary code via the wizardstep4ssid2 parameter in the sub42DA54 function...