24 matches found
D-Link DIR-823G - EXCU_SHELL Command Injection (CVE-2023-26613)
Exploits unauthenticated OS command injection on D-Link DIR-823G via /EXCUSHELL headers Command1/Confirm1. Command output is returned in the HTTP response; opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """D-Link DIR-823G EXCUSHELL unauthenticated RCE CVE-2023-266...
D-Link DWR - EXCU_SHELL RCE Detection (CVE-2018-19300)
Detects CVE-2018-19300 by sending cmdnum/command1/confirm1 headers to /EXCUSHELL and checking for /etc/passwd contents distinct header set from CVE-2023-26613. !/usr/bin/env python3 -- coding: utf-8 -- """D-Link DWR EXCUSHELL command injection CVE-2018-19300.""" import re from kittysploit import...
D-Link DWR - EXCU_SHELL Command Injection (CVE-2018-19300)
Exploits unauthenticated OS command injection on D-Link DWR devices via /EXCUSHELL headers cmdnum/command1/confirm1. !/usr/bin/env python3 -- coding: utf-8 -- """D-Link DWR EXCUSHELL unauthenticated RCE CVE-2018-19300 — opens execute session.""" import re from kittysploit import from...
D-Link DIR-823G - EXCU_SHELL RCE Detection (CVE-2023-26613)
D-Link DIR-823G processes HTTP headers Command1/Confirm1 on /EXCUSHELL, allowing unauthenticated OS command execution CVE-2023-26613. !/usr/bin/env python3 -- coding: utf-8 -- """D-Link DIR-823G EXCUSHELL command injection CVE-2023-26613.""" import re from kittysploit import from...
Ruijie Switch Web Management System EXCU_SHELL - Information Disclosure Detection
Ruijie switch WEB management system is vulnerable to an EXCUSHELL information disclosure issue, potentially exposing sensitive system information to unauthorized parties. !/usr/bin/env python3 -- coding: utf-8 -- """Ruijie switch WEB management system is vulnerable to an EXCUSHELL information...
EUVD-2025-35579
D-Link DIR-823G A1 v1.0.2B05 was discovered to contain a buffer overflow in the FillMacCloneMac parameter in the /EXCUSHELL endpoint. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2025-60331
The D-Link DIR-823G A1 wireless router, specifically version v1.0.2B05 , is vulnerable to a stack-based buffer overflow within the FillMacCloneMac parameter of the /EXCU_SHELL endpoint. The root cause is a failure to properly validate the length of the input data. A remote attacker can exploit th...
CVE-2025-60331: Stack-based Buffer Overflow
D-Link DIR-823G A1 v1.0.2B05 was discovered to contain a buffer overflow in the FillMacCloneMac parameter in the /EXCUSHELL endpoint. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2025-60331
D-Link DIR-823G A1 v1.0.2B05 was discovered to contain a buffer overflow in the FillMacCloneMac parameter in the /EXCUSHELL endpoint. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2024-2642 Ruijie RG-NBS2009G-P EXCU_SHELL command injection
A vulnerability was found in Ruijie RG-NBS2009G-P up to 20240305. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /EXCUSHELL. The manipulation of the argument Command1 leads to command injection. The attack can be launched remotely. The...
CVE-2024-2642: Improper Neutralization of Special Elements used in a Command
A vulnerability was found in Ruijie RG-NBS2009G-P up to 20240305. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /EXCUSHELL. The manipulation of the argument Command1 leads to command injection. The attack can be launched remotely. The...
D-Link DIR-823G Router Command Execution
The vulnerability of D-Link DIR-823G router microprogramming software is related to the lack of measures taken to neutralize special elements during the processing of the EXCUSHELL header. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by sending a specially...
D-Link DIR-823G 'EXCU_SHELL' RCE Vulnerability - Active Check
D-Link DIR-823G Routers are prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2023-26613
An OS command injection vulnerability in D-Link DIR-823G firmware version 1.02B05 allows unauthorized attackers to execute arbitrary operating system commands via a crafted GET request to EXCUSHELL...
Command injection
An OS command injection vulnerability in D-Link DIR-823G firmware version 1.02B05 allows unauthorized attackers to execute arbitrary operating system commands via a crafted GET request to EXCUSHELL...
CVE-2023-26613: Improper Neutralization of Special Elements used in an OS Command
An OS command injection vulnerability in D-Link DIR-823G firmware version 1.02B05 allows unauthorized attackers to execute arbitrary operating system commands via a crafted GET request to EXCUSHELL...
CVE-2023-26613
An OS command injection vulnerability in D-Link DIR-823G firmware version 1.02B05 allows unauthorized attackers to execute arbitrary operating system commands via a crafted GET request to EXCUSHELL...
CVE-2023-26613
The CVE-2023-26613 case affects D-Link DIR-823G (firmware 1.02B05). A command-injection flaw exists in the EXCU_SHELL endpoint that allows an unauthenticated attacker to execute OS commands via a crafted GET request, resulting in remote code execution. Multiple sources confirm the firmware and en...