CVE-2018-8941

Diagnostics functionality on D-Link DSL-3782 devices with firmware EU v. 1.01 has a buffer overflow, allowing authenticated remote attackers to execute arbitrary code via a long Addr value to the 'set DiagnosticsEntry' function in an HTTP request, related to /userfs/bin/tcapi...

Buffer overflow

Diagnostics functionality on D-Link DSL-3782 devices with firmware EU v. 1.01 has a buffer overflow, allowing authenticated remote attackers to execute arbitrary code via a long Addr value to the 'set DiagnosticsEntry' function in an HTTP request, related to /userfs/bin/tcapi...

CVE-2018-8941

Diagnostics functionality on D-Link DSL-3782 devices with firmware EU v. 1.01 has a buffer overflow, allowing authenticated remote attackers to execute arbitrary code via a long Addr value to the 'set DiagnosticsEntry' function in an HTTP request, related to /userfs/bin/tcapi...

CVE-2018-8941

Diagnostics functionality on D-Link DSL-3782 devices with firmware EU v. 1.01 has a buffer overflow, allowing authenticated remote attackers to execute arbitrary code via a long Addr value to the 'set DiagnosticsEntry' function in an HTTP request, related to /userfs/bin/tcapi...

CVE-2018-8941

CVE-2018-8941 affects the D-Link DSL-3782 router (EU firmware v1.01). A buffer overflow in the Diagnostics feature allows an authenticated remote attacker to trigger arbitrary code execution by sending a long Addr value to the set Diagnostics_Entry function via HTTP to /userfs/bin/tcapi. Sources ...

CVE-2018-8941

Diagnostics functionality on D-Link DSL-3782 devices with firmware EU v. 1.01 has a buffer overflow, allowing authenticated remote attackers to execute arbitrary code via a long Addr value to the 'set DiagnosticsEntry' function in an HTTP request, related to /userfs/bin/tcapi...

Next Generation Graphical Network Analyzer: Deplug

Deplug is a graphical network analyzer powered by web technologies. Features Cross-Platform macOS, Linux, Windows Web-based UI Built-in Package Manager SDK for JavaScript and Rust Concurrency Support Import / Export Deplug supports following formats by default. Pcap File .pcap Preferences...

CVE-2018-1164

This vulnerability allows remote attackers to cause a denial-of-service condition on vulnerable installations of ZyXEL P-870H-51 DSL Router 1.00AWG.3D5. Authentication is not required to exploit this vulnerability. The specific flaw exists within numerous exposed CGI endpoints. The vulnerability ...

CVE-2018-1164

ZyXEL P-870H-51 DSL Router (firmware 1.00(AWG.3)D5) is affected by a CGI-based denial-of-service vulnerability due to improper access controls that allow access to critical functions without authentication. An unauthenticated remote attacker can reboot devices and perform other actions via expose...

The vulnerability of the microprogrammed software of the GPT-2541GNAC and DSL-100HN-T1 routers, related to access control deficiencies, allows attackers to gain access to devices with root privileges.

The vulnerability of the microprogrammed software of the GPT-2541GNAC and DSL-100HN-T1 routers is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to devices with root privileges using the command “/bin/sh”...

CVE-2017-14698

CVE-2017-14698 affects multiple ASUS routers (DSL-AC51/AC52U/AC55U/DSL-N55U C1/D1/AC56U/N10_C1/N12U C1/N12E C1/N14U/N14U-B1/N16/N16U/N17U/N66U/AC750). Root cause: improper handling in mod_login.asp allows a remote, unauthenticated attacker to change passwords of arbitrary users via the http_passw...

Asus Router Cross Site Script / Authentication Bypass

In the name of god ------------------------- Exploit Title : -------------------- Asus Routers DSL-RT-N13 , DSL-N14U B1 Vulnerability Exploit Author : --------------------- 4TT4CK3R Category : --------------------- Remote and Local Home Page : --------------------- https://asus.com Google Dork :...

ASUS DSL-N14U B1 Router 1.1.2.3_345 - Change Administrator Password

import requests import sys import urllib3 ip = sys.argv1 user = sys.argv2 newPassword = sys.argv3 requests.packages.urilib3.disablewarnings urllib3.disablewarningsurllib3.exceptions.InsecureRequestWarning data = "groupid": '', "actionmode": "apply", "currentpage": "MainPassword.asp", "nextpage":...

CVE-2018-5371

diagping.cmd on D-Link DSL-2640U devices with firmware IM1.00 and ME1.00, and DSL-2540U devices with firmware ME1.00, allows authenticated remote attackers to execute arbitrary OS commands via shell metacharacters in the ipaddr field of an HTTP GET request...

Server side request forgery (ssrf)

diagping.cmd on D-Link DSL-2640U devices with firmware IM1.00 and ME1.00, and DSL-2540U devices with firmware ME1.00, allows authenticated remote attackers to execute arbitrary OS commands via shell metacharacters in the ipaddr field of an HTTP GET request...

CVE-2018-5371

The CVE affects D-Link DSL-2640U (firmware IM_1.00, ME_1.00) and DSL-2540U (firmware ME_1.00). The diag_ping.cmd vulnerability allows authenticated remote attackers to execute arbitrary OS commands via shell metacharacters in the ipaddr field of an HTTP GET request. This is a remote command execu...

CVE-2018-5371

diagping.cmd on D-Link DSL-2640U devices with firmware IM1.00 and ME1.00, and DSL-2540U devices with firmware ME1.00, allows authenticated remote attackers to execute arbitrary OS commands via shell metacharacters in the ipaddr field of an HTTP GET request...

D-Link DSL Devices Detection (HTTP)

HTTP based detection of D-Link DSL Devices. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

D-Link DSL-6850U Multiple Vulnerabilities

Exploit for hardware platform in category web applications Vulnerabilities Summary The following advisory describes two 2 vulnerabilities found in D-Link DSL-6850U versions BZ1.00.01 – BZ1.00.09. D-Link DSL-6850U is a router “manufactured by D-Link for Bezeq in Israel” The vulnerabilities found...

D-Link DSL-6850U Multiple Vulnerabilities

D-Link DSL-6850U routers are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPEPREFIX = "cpe:/o:dlink";...