73 matches found
D-Link DIR-868L Credential Leak (CVE-2019-17506)
Exploits CVE-2019-17506 in D-Link DIR-868L/817LW: unauthenticated POST to getcfg.php with AUTHORIZEDGROUP newline injection returns admin credentials. !/usr/bin/env python3 -- coding: utf-8 -- """D-Link DIR-868L getcfg credential leak CVE-2019-17506.""" from kittysploit import from...
D-Link DIR-645 Password Disclosure
Module exploits D-Link DIR-645 password disclosure vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """D-Link DIR-645 Password Disclosure""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleAuxiliary, Httpclient: info = 'name': 'D-Link...
D-Link DIR-8XX Password Disclosure
Module exploits D-Link DIR-8XX password disclosure vulnerability, which allows retrieving administrative credentials. !/usr/bin/env python3 -- coding: utf-8 -- """D-Link DIR-8XX Password Disclosure""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class...
D-Link DIR-645 - getcfg.php Auth Bypass Detection
Detects DIR-645 unauthenticated DEVICE.ACCOUNT disclosure via POST /getcfg.php SERVICES=DEVICE.ACCOUNT. !/usr/bin/env python3 -- coding: utf-8 -- """D-Link DIR-645 getcfg.php authentication bypass / account disclosure.""" from kittysploit import from lib.protocols.http.httpclient import Httpclien...
D-Link DIR-816L - getcfg.php Account Disclosure (CVE-2020-15894)
Detects CVE-2020-15894 by requesting getcfg.php with a crafted SERVICES payload that dumps DEVICE.ACCOUNT including password fields. !/usr/bin/env python3 -- coding: utf-8 -- """D-Link DIR-816L getcfg.php account disclosure CVE-2020-15894.""" import re from kittysploit import from...
D-Link DIR-610 Devices - Information Disclosure Detection
D-Link DIR-610 devices allow information disclosure via SERVICES=DEVICE.ACCOUNT%0AAUTHORIZEDGROUP=1 to getcfg.php. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. !/usr/bin/env python3 -- coding: utf-8 -- """D-Link DIR-610 devices allow information...
D-Link DIR-868L/817LW - Information Disclosure Detection
D-Link DIR-868L B1-2.03 and DIR-817LW A1-1.04 routers are vulnerable to information disclosure vulnerabilities because certain web interfaces do not require authentication. An attacker can get the router's username and password and other information via a DEVICE.ACCOUNT value for SERVICES in...
CVE-2025-14528
A vulnerability was detected in D-Link DIR-803 up to 1.04. Impacted is an unknown function of the file /getcfg.php of the component Configuration Handler. The manipulation of the argument AUTHORIZEDGROUP results in information disclosure. The attack may be performed from remote. The exploit is no...
CVE-2025-14528
The CVE-2025-14528 issue affects D-Link DIR-803 routers (firmware up to 1.04, A1 era). A vulnerability in the Configuration Handler’s /getcfg.php allows manipulation of the AUTHORIZED_GROUP parameter via newline injection, resulting in an authentication bypass and exposure of administrator creden...
CVE-2025-14528 D-Link DIR-803 Configuration getcfg.php information disclosure
A vulnerability was detected in D-Link DIR-803 up to 1.04. Impacted is an unknown function of the file /getcfg.php of the component Configuration Handler. The manipulation of the argument AUTHORIZEDGROUP results in information disclosure. The attack may be performed from remote. The exploit is no...
CVE-2025-14528: Exposure of Sensitive Information to an Unauthorized Actor
A vulnerability was detected in D-Link DIR-803 up to 1.04. Impacted is an unknown function of the file /getcfg.php of the component Configuration Handler. The manipulation of the argument AUTHORIZEDGROUP results in information disclosure. The attack may be performed from remote. The exploit is no...
D-Link DIR-803 security vulnerabilities
The D-Link DIR-803 is a wireless router from China's AUO D-Link. The D-Link DIR-803 suffers from an information disclosure vulnerability that originates from the incorrect operation of the parameter AUTHORIZEDGROUP in the file /getcfg.php of the component Configuration Handler, which can be...
PT-2025-50639
Name of the Vulnerable Software and Affected Versions D-Link DIR-803 versions prior to 1.05 Description A flaw exists in D-Link DIR-803, potentially leading to information disclosure. The issue resides within the Configuration Handler component, specifically in the /getcfg.php file. Manipulation ...
EUVD-2020-7868
Malware in sbrugna...
EUVD-2022-39455
Malicious code in bioql PyPI...
CVE-2025-10093
A vulnerability was identified in D-Link DIR-852 up to 1.00CN B09. Affected by this vulnerability is the function phpcgimain of the file /getcfg.php of the component Device Configuration Handler. Such manipulation leads to information disclosure. The attack may be performed from remote. The explo...
CVE-2025-10093
CVE-2025-10093 affects the D-Link DIR-852 (up to 1.00CN B09), targeting the Device Configuration Handler, specifically the function phpcgi_main in the file /getcfg.php . The vulnerability allows remote manipulation that leads to information disclosure . The issue is exploitable over the network w...
CVE-2025-10093: Exposure of Sensitive Information to an Unauthorized Actor
A vulnerability was identified in D-Link DIR-852 up to 1.00CN B09. Affected by this vulnerability is the function phpcgimain of the file /getcfg.php of the component Device Configuration Handler. Such manipulation leads to information disclosure. The attack may be performed from remote. The explo...
PT-2025-36463
Name of the Vulnerable Software and Affected Versions: D-Link DIR-852 versions up to 1.00CN B09 Description: A vulnerability exists in D-Link DIR-852 that allows for information disclosure. The vulnerability is located in the phpcgi main function of the /getcfg.php file within the Device...
