Malicious code in @zalastax/nolb-_dsr-rollback-org-r (npm)

The package @zalastax/nolb-dsr-rollback-org-r was found to contain malicious code...

Malicious code in @zalastax/nolb-_dsr-rollback-org-s (npm)

The package @zalastax/nolb-dsr-rollback-org-s was found to contain malicious code...

Malicious code in @zalastax/nolb-dsr-rollback (npm)

The package @zalastax/nolb-dsr-rollback was found to contain malicious code...

MAL-2025-11232 Malicious code in @zalastax/nolb-dsr-rollback-w (npm)

The package @zalastax/nolb-dsr-rollback-w was found to contain malicious code...

MAL-2025-11234 Malicious code in @zalastax/nolb-dsr-rollback-z (npm)

The package @zalastax/nolb-dsr-rollback-z was found to contain malicious code...

MAL-2025-11213 Malicious code in @zalastax/nolb-dsr-packa (npm)

The package @zalastax/nolb-dsr-packa was found to contain malicious code...

MAL-2025-11212 Malicious code in @zalastax/nolb-dsr-pack (npm)

The package @zalastax/nolb-dsr-pack was found to contain malicious code...

MAL-2025-9947 Malicious code in @zalastax/nolb-_dsr-rollback-org-o (npm)

The package @zalastax/nolb-dsr-rollback-org-o was found to contain malicious code...

MAL-2025-11223 Malicious code in @zalastax/nolb-dsr-package-public-a (npm)

The package @zalastax/nolb-dsr-package-public-a was found to contain malicious code...

MAL-2025-11221 Malicious code in @zalastax/nolb-dsr-package-publ (npm)

The package @zalastax/nolb-dsr-package-publ was found to contain malicious code...

MAL-2025-11224 Malicious code in @zalastax/nolb-dsr-package-public-e (npm)

The package @zalastax/nolb-dsr-package-public-e was found to contain malicious code...

MAL-2025-11230 Malicious code in @zalastax/nolb-dsr-rollback- (npm)

The package @zalastax/nolb-dsr-rollback- was found to contain malicious code...

CVE-2021-39615

D-Link DSR-500N version 1.02 contains hard-coded credentials for undocumented user accounts in the '/etc/passwd' file.If an attacker succeeds in recovering the cleartext password of the identified hash value, he will be able to log in via SSH or Telnet and thus gain access to the underlying...

CVE-2020-25759

An issue was discovered on D-Link DSR-250 3.17 devices. Certain functionality in the Unified Services Router web interface could allow an authenticated attacker to execute arbitrary commands, due to a lack of validation of inputs provided in multipart HTTP POST requests...

CVE-2020-18568

The D-Link DSR-250 3.14 DSR-1000N 2.11B201 UPnP service contains a command injection vulnerability, which can cause remote command execution...

CVE-2020-26567

An issue was discovered on D-Link DSR-250N before 3.17B devices. The CGI script upgradeStatusReboot.cgi can be accessed without authentication. Any access reboots the device, rendering it therefore unusable for several minutes...

CVE-2020-25758

An issue was discovered on D-Link DSR-250 3.17 devices. Insufficient validation of configuration file checksums could allow a remote, authenticated attacker to inject arbitrary crontab entries into saved configurations before uploading. These entries are executed as root...

Exploit for Classic Buffer Overflow in Dlink Dsr-150_Firmware

CVE-2024-57376 Pre-auth remote code execution exploit for D-L...

The vulnerability of D-Link DSR series router microprogramming software, related to the execution of operations beyond the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of D-Link DSR series router microprogramming software lies in the fact that the operation data is written outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2024-57376

CVE-2024-57376 affects D-Link DSR-150, DSR-150N, DSR-250, DSR-250N, DSR-500N, and DSR-1000N with firmware versions 3.13–3.17B901C. The root cause is a buffer overflow in the CGI logout handling path triggered via extCpResult passed to captivePortalLib.duaLogoutInfoGet, using strcpy on user input,...