Command injection

OS Command Injection vulnerability in debugfcgi of D-Link DWR-932C E1 firmware allows a remote attacker to perform command injection via a crafted HTTP request...

CVE-2021-42783

The CVE-2021-42783 issue affects the D-Link DWR-932C E1 firmware, where a Missing Authentication for Critical Function in debug_post_set.cgi enables an unauthenticated attacker to perform administrative actions. The vulnerability is documented with a high-severity CVSS score (3.1: 9.8; 2.0: 10.0)...

CVE-2021-42784 OS Command Injection in debug_fcgi in D-Link DWR-932C E1 Firmware 1.0.0.4

OS Command Injection vulnerability in debugfcgi of D-Link DWR-932C E1 firmware allows a remote attacker to perform command injection via a crafted HTTP request...

CVE-2021-42784

CVE-2021-42784 describes an OS command injection in the debug_fcgi component of the D-Link DWR-932C E1 firmware. A remote attacker could exploit a crafted HTTP request to execute commands on the device, with high impact across confidentiality, integrity, and availability per CVSS 3.1/3.0 scores i...

D-Link Dwr-932C E1 访问控制错误漏洞

The D-Link Dwr-932C E1 is a WiFi mobile modem router from D-Link, a Chinese company. A security vulnerability exists in the D-Link DWR-932C E1 firmware, stemming from a lack of critical function authentication in post set.cgi, which could be exploited by attackers to perform administrative action...

CVE-2021-41555

In ARCHIBUS Web Central 21.3.3.815 a version from 2014, XSS occurs in /archibus/dwr/call/plaincall/workflow.runWorkflowRule.dwr because the data received as input from clients is re-included within the HTTP response returned by the application without adequate validation. In this way, if HTML cod...

Improper access control

Improper access control vulnerability in Buffalo broadband routers BHR-4GRV firmware Ver.1.99 and prior, DWR-HP-G300NH firmware Ver.1.83 and prior, HW-450HP-ZWE firmware Ver.1.99 and prior, WHR-300HP firmware Ver.1.99 and prior, WHR-300 firmware Ver.1.99 and prior, WHR-G301N firmware Ver.1.86 and...

Buffalo broadband routers 安全漏洞

Buffalo Firmware is a networking device from Buffalo Japan. A security vulnerability exists in Buffalo broadband routers that originates from allowing an unauthenticated, remote attacker to gain access to information, such as configurations, via unspecified vectors. The following products and...

Security Bulletin: Rational Synergy is affected by vulnerabilities (CVE-2014-5325 and CVE-2014-5326) in Java Open Source Direct Web Remoting library.

Summary The DOMConverter, JDOMConverter, DOM4JConverter, and XOMConverter functions in Direct Web Remoting DWR through 2.0.10 and 3.x through 3.0.RC2 allow remote attackers to read arbitrary files via DOM data containing an XML external entity declaration in conjunction with an entity reference,...

CVE-2014-3136

Cross-site request forgery CSRF vulnerability in D-Link DWR-113 Rev. Ax with firmware before 2.03b02 allows remote attackers to hijack the authentication of administrators for requests that change the admin password via unspecified vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in D-Link DWR-113 Rev. Ax with firmware before 2.03b02 allows remote attackers to hijack the authentication of administrators for requests that change the admin password via unspecified vectors...

CVE-2014-3136

Cross-site request forgery CSRF vulnerability in D-Link DWR-113 Rev. Ax with firmware before 2.03b02 allows remote attackers to hijack the authentication of administrators for requests that change the admin password via unspecified vectors...

CVE-2014-3136

CVE-2014-3136 describes a CSRF vulnerability in the D-Link DWR-113 Rev. Ax router, with firmware versions before 2.03b02. The issue allows an authenticated administrator session to be hijacked so an attacker can issue requests that change the admin password via unspecified vectors. The root cause...

CVE-2019-16321

ScadaBR 1.0CE, and 1.1.x through 1.1.0-RC, has XSS via a request for a nonexistent resource, as demonstrated by the dwr/test/ PATHINFO...

CVE-2019-16321

ScadaBR 1.0CE, and 1.1.x through 1.1.0-RC, has XSS via a request for a nonexistent resource, as demonstrated by the dwr/test/ PATHINFO...

Multiple D-Link Products Input Validation Error Vulnerability

D-Link DAP-1530 and so on are products of Taiwan, China AUO D-Link.D-Link DAP-1530 is a wireless signal extender.D-Link DAP-1610 is a wireless signal extender.D-Link DWR-111 is a wireless router.D-Link DAP-1610 is a wireless signal extender.D-Link DAP-1610 is a wireless signal extender.D-Link...

CVE-2018-19300

CVE-2018-19300 affects multiple D-Link devices (DAP-1530/A1 before 1.06b01; DAP-1610/A1 before 1.06b01; DWR-111/A1 before 1.02v02; DWR-116/A1 before 1.06b03; DWR-512/B1 before 2.02b01; DWR-711/A1 up to 1.11; DWR-712/B1 before 2.04b01; DWR-921/A1 before 1.02b01; DWR-921/B1 before 2.03b01). The vul...

D-Link DWR-116 Device < V1.05b09 Directory Traversal Vulnerability - Active Check

D-Link DWR devices are prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPEPREFIX = "cpe:/o:dlink"...

D-Link DWR Devices Detection (HTTP)

HTTP based detection of D-Link DWR Router devices. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

D-Link DWR/DAP 'EXCU_SHELL' RCE Vulnerability - Active Check

D-Link DWR and DAP Routers are prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...