D-Link DSL-2730U/2750U/2750E Path Traversal

Module exploits D-Link DSL-2730U/2750U/2750E Path Traversal vulnerability which allows to read any file on the system. !/usr/bin/env python3 -- coding: utf-8 -- """D-Link DSL-2730U/2750U/2750E Path Traversal""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient...

EUVD-2017-15468

Malware in sbrugna...

CVE-2025-34048: Improper Limitation of a Pathname to a Restricted Directory

A path traversal vulnerability exists in the web management interface of D-Link DSL-2730U, DSL-2750U, and DSL-2750E ADSL routers with firmware versions IN1.02, SEA1.04, and SEA1.07. The vulnerability is due to insufficient input validation on the getpage parameter within the /cgi-bin/webproc CGI...

D-Link DSL-2730U and D-Link DSL-2750E have security vulnerabilities

The D-Link DSL-2730U and D-Link DSL-2750E are both routers from China-based AUO D-Link. A security vulnerability exists in the D-Link DSL-2730U and D-Link DSL-2750E, which stems from the incorrect operation of the parameter getpage in the file /cgi-bin/webproc, leading to a path traversal attack...

CVE-2023-46033

D-Link Non-US DSL-2750U N300 ADSL2+ and Non-US DSL-2730U N150 ADSL2+ are vulnerable to Incorrect Access Control. The UART/Serial interface on the PCB, provides log output and a root terminal without proper access control...

CVE-2023-46033

D-Link Non-US DSL-2750U N300 ADSL2+ and Non-US DSL-2730U N150 ADSL2+ are vulnerable to Incorrect Access Control. The UART/Serial interface on the PCB, provides log output and a root terminal without proper access control...

Improper access control

UNSUPPORTED WHEN ASSIGNED D-Link Non-US DSL-2750U N300 ADSL2+ and Non-US DSL-2730U N150 ADSL2+ are vulnerable to Incorrect Access Control. The UART/Serial interface on the PCB, provides log output and a root terminal without proper access control...

CVE-2023-46033

The CVE-2023-46033 issue affects D-Link (Non-US) DSL-2750U N300 ADSL2+ and DSL-2730U N150 ADSL2+ routers. The underlying flaw is Incorrect Access Control in the UART/Serial interface on the PCB, which exposes log output and a root terminal without proper access restrictions. This could allow an a...

CVE-2023-46033

D-Link Non-US DSL-2750U N300 ADSL2+ and Non-US DSL-2730U N150 ADSL2+ are vulnerable to Incorrect Access Control. The UART/Serial interface on the PCB, provides log output and a root terminal without proper access control...

CVE-2023-46033: Improper Access Control

D-Link Non-US DSL-2750U N300 ADSL2+ and Non-US DSL-2730U N150 ADSL2+ are vulnerable to Incorrect Access Control. The UART/Serial interface on the PCB, provides log output and a root terminal without proper access control...

PT-2023-6407 · D Link · Dsl-2750U +1

Name of the Vulnerable Software and Affected Versions: D-Link Non-US DSL-2750U N300 ADSL2+ and Non-US DSL-2730U N150 ADSL2+ affected versions not specified Description: The issue is related to Incorrect Access Control in the D-Link routers. The UART/Serial interface on the PCB provides log output...

Security Vulnerabilities in Some D-Link Products

The D-Link DSL-2730U is a router from China-based AUO D-Link. A security vulnerability exists in the D-Link DSL-2730U and DSL-2750U that stems from the UART/serial interface on the PCB providing logging output and root privilege termination without proper access control...

Cross site request forgery (csrf)

Cross Site Request Forgery CSRF on D-Link DSL-2730U C1 IN1.00 devices allows remote attackers to change the DNS or firewall configuration or any password...

CVE-2017-6411

Cross Site Request Forgery CSRF on D-Link DSL-2730U C1 IN1.00 devices allows remote attackers to change the DNS or firewall configuration or any password...

CVE-2017-6411

Cross Site Request Forgery CSRF on D-Link DSL-2730U C1 IN1.00 devices allows remote attackers to change the DNS or firewall configuration or any password...

CVE-2017-6411

Cross Site Request Forgery CSRF on D-Link DSL-2730U C1 IN1.00 devices allows remote attackers to change the DNS or firewall configuration or any password...

CVE-2017-6411

CVE-2017-6411 describes a Cross-Site Request Forgery (CSRF) vulnerability in the D-Link DSL-2730U C1 IN_1.00 router. The flaw enables remote attackers to alter settings such as DNS or firewall configurations, or even modify passwords, via the device’s management interface. Public references in th...

CVE-2017-6411: Cross-Site Request Forgery (CSRF)

Cross Site Request Forgery CSRF on D-Link DSL-2730U C1 IN1.00 devices allows remote attackers to change the DNS or firewall configuration or any password...

PT-2017-17049 · D Link · D-Link Dsl-2730B

Name of the Vulnerable Software and Affected Versions: D-Link DSL-2730U C1 IN 1.00 Description: The issue allows remote attackers to perform unauthorized actions, including changing the DNS or firewall configuration, or modifying any password, due to a Cross Site Request Forgery CSRF weakness...

D-Link DSL-2730U Wireless N 150 - Cross-Site Request Forgery

D-Link DSL-2730U Wireless N 150 - Cross-Site Request Forgery Author : B GOVIND Exploit Title : DLink DSL-2730U Wireless N 150, Change DNS Configuration bypassing ‘admin’ privilege Date : 01-03-2017 Vendor Homepage : http://www.dlink.co.in Firmware Link : ftp://support.dlink.co.in/firmware/DSL-273...