4403 matches found
TOTOLINK LR350 命令注入漏洞
TOTOLINK LR350 is a wireless router from China Gion Electronics TOTOLINK. A security vulnerability exists in TOTOLINK LR350 version V9.3.5u.6369B20220309. An attacker can exploit this vulnerability to conduct a command injection attack via the ussd parameter of the setUssd method...
PT-2023-5090 · Milesight · Milesight Ur32L
Name of the Vulnerable Software and Affected Versions: Milesight UR32L version 32.3.0.5 Description: The issue is caused by a buffer overflow vulnerability in the handle interface acl function of the Milesight UR32L router's firmware. This vulnerability can be exploited by a remote attacker to...
Milesight UR32L 缓冲区错误漏洞
The Milesight UR32L is a 4G industrial router from China's StarZone IOT Milesight. A buffer error vulnerability exists in the Milesight UR32L v32.3.0.5, which stems from the use of an insecure sprintf pattern. An attacker could exploit the vulnerability to cause a buffer overflow via a specially...
D-Link DIR-823G 'EXCU_SHELL' RCE Vulnerability - Active Check
D-Link DIR-823G Routers are prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
D-Link DIR-823G Multiple Vulnerabilities (2023 - 2025)
D-Link DIR-823G devices are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
D-Link DAP-1325 Insecure Direct Object Reference
Exploit Title: D-Link DAP-1325 - Broken Access Control Date: 27-06-2023 Exploit Author: ieduardogoncalves Contact : twitter.com/0x00dia Vendor : www.dlink.com Version: Hardware version: A1 Firmware version: 1.01 Tested on:All Platforms 1 Description Security vulnerability known as "Unauthenticate...
PT-2023-8183 · Zyxel · Zyxel Nas326 +1
Name of the Vulnerable Software and Affected Versions: Zyxel NAS326 firmware version V5.21AAZF.14C0 Zyxel NAS542 firmware version V5.21ABAG.11C0 Description: The issue is related to the improper neutralization of special elements in the CGI program of the Zyxel NAS326 and NAS542 firmware. This...
CVE-2023-32620
Improper authentication vulnerability in WL-WN531AX2 firmware versions prior to 2023526 allows a network-adjacent attacker to obtain a password for the wireless network...
CVE-2023-26612
D-Link DIR-823G firmware version 1.02B05 has a buffer overflow vulnerability, which originates from the HostName field in SetParentsControlInfo...
CVE-2023-26616
D-Link DIR-823G firmware version 1.02B05 has a buffer overflow vulnerability, which originates from the URL field in SetParentsControlInfo...
Buffer overflow
D-Link DIR-823G firmware version 1.02B05 has a buffer overflow vulnerability, which originates from the HostName field in SetParentsControlInfo...
D-Link DIR-823G 操作系统命令注入漏洞
The D-Link DIR-823G is a wireless router from China's AUO D-Link. A command execution vulnerability exists in the D-Link DIR-823G version 1.02B05, which stems from the application failing to properly filter construct command special characters, commands, etc. An attacker can exploit this...
CVE-2023-32224
D-Link DSL-224 firmware version 3.0.10 CWE-307: Improper Restriction of Excessive Authentication Attempts...
CVE-2023-32224
D-Link DSL-224 firmware version 3.0.10 CWE-307: Improper Restriction of Excessive Authentication Attempts...
CVE-2023-32223 D-Link DSL-224 firmware version 3.0.10 post authentication command execution
D-Link DSL-224 firmware version 3.0.10 allows post authentication command execution via an unspecified method...
CVE-2023-32224 D-Link DSL-224 firmware version 3.0.10 CWE-307: Improper Restriction of Excessive Authentication Attempts
D-Link DSL-224 firmware version 3.0.10 CWE-307: Improper Restriction of Excessive Authentication Attempts...
PT-2023-3639 · D Link · D-Link Dir-823G
Name of the Vulnerable Software and Affected Versions: D-Link DIR-823G firmware version 1.02B05 Description: The issue is related to a password reset vulnerability in the D-Link DIR-823G firmware, which stems from errors in the password recovery mechanism. This vulnerability can be exploited by...
CVE-2022-40010
Tenda AC6 AC1200 Smart Dual-Band WiFi Router 15.03.06.50multi was discovered to contain a cross-site scripting XSS vulnerability via the deviceId parameter in the Parental Control module...