1141 matches found
CVE-2025-29522
D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 was discovered to contain a command injection vulnerability via the ping function...
CVE-2025-29515
Incorrect access control in the DELTfile.xgi endpoint of D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 allows attackers to modify arbitrary settings within the device's XML database, including the administrator’s password...
D-Link DSL-7740C 安全漏洞
The D-Link DSL-7740C is a modem from China-based AUO D-Link. A command injection vulnerability exists in the D-Link DSL-7740C EXE parameter, which can be exploited by an attacker to execute arbitrary commands by serving a crafted GET request...
D-Link DSL-7740C 安全漏洞
The D-Link DSL-7740C is a modem from China-based AUO D-Link. An access control error vulnerability exists in the D-Link DSL-7740C Maintenance module, which can be exploited by an attacker to arbitrarily change the password of an elevated privilege account and escalate privileges...
CVE-2025-29516
D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 was discovered to contain a command injection vulnerability via the backup function...
CVE-2025-29522
D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 was discovered to contain a command injection vulnerability via the ping function...
CVE-2025-29523
D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 was discovered to contain a command injection vulnerability via the ping6 function...
CVE-2025-29522
The CVE-2025-29522 vulnerability affects D-Link DSL-7740C devices, specifically firmware DSL7740C.V6.TR069.20211230. The issue is a command injection in the ping function caused by improper filtering of constructed command characters, allowing arbitrary command execution. Affected component: ping...
CVE-2025-29523
CVE-2025-29523 affects the D-Link DSL-7740C modem with firmware DSL7740C.V6.TR069.20211230. Root cause: the ping6 function fails to properly filter constructed command characters, enabling arbitrary command execution via command injection. Impact per sources: high severity (CVSS 3.1: 7.2), networ...
D-Link DSL-2750B Devices < 1.05 Command Injection (CVE-2016-20017)
D-Link DSL-2750B devices before 1.05 allow remote unauthenticated command injection via the login.cgi cli parameter, as exploited in the wild in 2016 through 2022. Note that Nessus has not tested for this issue but has instead relied only on the router's self-reported model. %NASLMINLEVEL 80900 C...
CVE-2025-34048
CVE-2025-34048 affects D-Link DSL-2730U/DSL-2750U/DSL-2750E ADSL routers. A path traversal flaw stems from insufficient input validation of the getpage parameter in the /cgi-bin/webproc CGI script, allowing an unauthenticated remote attacker to read arbitrary files on the device. Affected firmwar...
D-Link DSL-2730U和D-Link DSL-2750E 安全漏洞
The D-Link DSL-2730U and D-Link DSL-2750E are both routers from China-based AUO D-Link. A security vulnerability exists in the D-Link DSL-2730U and D-Link DSL-2750E, which stems from the incorrect operation of the parameter getpage in the file /cgi-bin/webproc, leading to a path traversal attack...
D-Link DSL Device Detection Consolidation
Consolidation of D-Link DSL devices detections. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only include"pluginfeedinfo.inc"; ifdescription...
CVE-2025-46548
If you enable Basic Authentication in Pekko Management using the Java DSL, the authenticator may not be properly applied. Users that rely on authentication instead of making sure the Management API ports are only available to trusted users are recommended to upgrade to version 1.1.1, which fixes...
CVE-2025-46548
CVE-2025-46548 affects Pekko Management (Java DSL) where enabling Basic Authentication may cause the authenticator to not be properly applied. The issue can lead to insufficient access control if management ports are not restricted to trusted users. The advisory recommends upgrading Pekko Managem...
USN-7516-9 linux-aws vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - Block layer subsystem; - Drivers core; - Network block device driver;...
USN-7516-6 linux-ibm vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - Block layer subsystem; - Drivers core; - Network block device driver;...
CVE-2024-9792
A vulnerability classified as problematic has been found in D-Link DSL-2750U R5B017. This affects an unknown part of the component Port Forwarding Page. The manipulation of the argument PortMappingDescription leads to cross site scripting. It is possible to initiate the attack remotely...