CVE-2014-7857

CVE-2014-7857 affects multiple D-Link NAS/DVR devices (DNS-320L, DNS-327L, DNR-326, DNS-320B, DNS-345, DNS-325, DNS-322L). The root issue is a weakness in the authentication flow: an attacker can bypass login by sending the cgi_set_wto command in the cmd parameter and forcing the spawned session ...

CVE-2014-7858

The checklogin function in D-Link DNR-326 before 2.10 build 03 allows remote attackers to bypass authentication and log in by setting the username cookie parameter to an arbitrary string...

dnr.alaska.gov XSS vulnerability

Vulnerable URL: http://dnr.alaska.gov/shared/mediareleases/dspmediarelease.cfm?id=2166= h a h h a h a h a h xany Details: Description| Value ---|--- Patched:| Yes, at 27.11.2017 Latest check for patch:| 27.11.2017 16:35 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

apps.ohiodnr.gov XSS vulnerability

Vulnerable URL: https://apps.ohiodnr.gov/water/maptechs/wellogs/app/road.asp?Road=LOCKWOOD=SUMMIT=1"...

dnr.louisiana.gov Open Redirect vulnerability

Open Bug Bounty ID: OBB-84945 Description| Value ---|--- Affected Website:| dnr.louisiana.gov Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

D-Link DNR-326 Authentication Bypass Vulnerability

The D-Link DNR-326 is a NAS network storage product from AUO D-Link. An authentication bypass vulnerability exists in the D-Link DNR-326. An attacker can exploit this vulnerability to bypass the authentication mechanism and gain unauthorized access...

PT-2014-1985 · D Link · Dnr-326 +4

Name of the Vulnerable Software and Affected Versions: D-Link DNR-320L versions prior to 1.04b08 D-Link DNS-320LW versions prior to 1.04b08 D-Link DNR-322L versions prior to 2.10 build 03 D-Link DNR-326 versions prior to 2.10 build 03 D-Link DNS-327L versions prior to 1.04b01 Description: The iss...

PT-2014-1975 · D Link · Dnr-326

Name of the Vulnerable Software and Affected Versions: D-Link DNR-326 versions prior to 2.10 build 03 Description: The issue is related to the check login function and is caused by weaknesses in the authentication procedure. It allows a remote attacker to bypass authentication and log in by...

Former Employee Charged With Accessing Thousands of Driver's Licenses

A former Minnesota state employee was charged Thursday with misdemeanors for allegedly accessing thousands of driver’s licenses during a four-year period and storing 172 of them in an encrypted file. Ninety percent of victims in the data breach were women. John A. Hunt, 48, of Woodbury, Minn.,...

Current Versions Release History

Current Versions Release History 5.1c2 30-Jun-06 Valid Core License Keys: issued between 01-Jun-2004 and 31-Oct-2004, or on or after 01-Jun-2005. Admin: Lawful Intercept for Signals is implemented. WSSP: now all string prefixes HTML, JAVASCRIPT, etc. support numeric data. XIMSS: the Signal...