CVE-2022-38258

A local file inclusion LFI vulnerability in D-Link DIR 819 v1.06 allows attackers to cause a Denial of Service DoS or access sensitive server information via manipulation of the getpage parameter in a crafted web request...

CVE-2021-34860

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of D-Link DAP-2020 1.01rc001 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the getpage parameter provided to th...

CVE-2017-15647

On FiberHome routers, Directory Traversal exists in /cgi-bin/webproc via the getpage parameter in conjunction with a crafted var:page value...

CVE-2023-32141

D-Link DAP-1360 webproc WEBDisplayPage Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability...

CVE-2023-32141

D-Link DAP-1360 webproc WEBDisplayPage Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability...

xpdf:fuzz_pdfload: Heap-buffer-overflow in Catalog::getPage

Detailed Report: https://oss-fuzz.com/testcase?key=5913847295705088 Project: xpdf Fuzzing Engine: afl Fuzz Target: fuzzpdfload Job Type: aflasanxpdf Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x60200001ea08 Crash State: Catalog::getPage PDFDoc::displayPage...

SUSE CVE-2015-6758

The CPDFDocument::GetPage function in fpdfapi/fpdfparser/fpdfparserdocument.cpp in PDFium, as used in Google Chrome before 46.0.2490.71, does not properly perform a cast of a dictionary object, which allows remote attackers to cause a denial of service or possibly have unspecified other impact vi...

CVE-2020-18331

Directory traversal vulnerability in ChinaMobile PLC Wireless Router model GPN2.4P21-C-CN running the firmware version W2000EN-01hardware platform Gpn2.4P21-CWIFI-V0.05, via the getpage parameter to /cgi-bin/webproc...

PT-2023-11491 · China Mobile · Chinamobile Plc Wireless Router

Name of the Vulnerable Software and Affected Versions: ChinaMobile PLC Wireless Router model GPN2.4P21-C-CN version W2000EN-01 Description: The issue is related to a directory traversal vulnerability. It can be exploited via the getpage parameter to the "/cgi-bin/webproc" API endpoint...

CVE-2020-18331: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in ChinaMobile PLC Wireless Router model GPN2.4P21-C-CN running the firmware version W2000EN-01hardware platform Gpn2.4P21-CWIFI-V0.05, via the getpage parameter to /cgi-bin/webproc...

CVE-2022-38258

A local file inclusion LFI vulnerability in D-Link DIR 819 v1.06 allows attackers to cause a Denial of Service DoS or access sensitive server information via manipulation of the getpage parameter in a crafted web request...

CVE-2022-38258

A local file inclusion LFI vulnerability in D-Link DIR 819 v1.06 allows attackers to cause a Denial of Service DoS or access sensitive server information via manipulation of the getpage parameter in a crafted web request...

D-Link DIR-819 路径遍历漏洞

D-Link DIR-819 is a wireless dual-band router from China AUO D-Link. A security vulnerability exists in the D-Link DIR-819 v1.06. An attacker can exploit this vulnerability to cause a denial of service DoS or access sensitive server information by manipulating the getpage parameter in a specially...

CVE-2022-38258: Improper Limitation of a Pathname to a Restricted Directory

A local file inclusion LFI vulnerability in D-Link DIR 819 v1.06 allows attackers to cause a Denial of Service DoS or access sensitive server information via manipulation of the getpage parameter in a crafted web request...

PT-2022-24318 · D Link · D-Link Dir 819

Name of the Vulnerable Software and Affected Versions: D-Link DIR 819 version 1.06 Description: A local file inclusion issue allows attackers to cause a Denial of Service or access sensitive server information via manipulation of the getpage parameter in a crafted web request. This can lead to...

xpdf:fuzz_pdfload: Segv on unknown address in Catalog::getPage

Detailed Report: https://oss-fuzz.com/testcase?key=5190877163683840 Project: xpdf Fuzzing Engine: libFuzzer Fuzz Target: fuzzpdfload Job Type: libfuzzerasanxpdf Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: Catalog::getPage PDFDoc::displayPage fuzzpdfload.cc...

xpdf:fuzz_pdfload: Heap-buffer-overflow in Catalog::getPage

Detailed Report: https://oss-fuzz.com/testcase?key=6735595475435520 Project: xpdf Fuzzing Engine: honggfuzz Fuzz Target: fuzzpdfload Job Type: honggfuzzasanxpdf Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x60200001e648 Crash State: Catalog::getPage PDFDoc::getLinks...

CVE-2021-34860

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of D-Link DAP-2020 1.01rc001 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the getpage parameter provided to th...

CVE-2021-34860

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of D-Link DAP-2020 1.01rc001 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the getpage parameter provided to th...

CVE-2021-34860: Improper Limitation of a Pathname to a Restricted Directory

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of D-Link DAP-2020 1.01rc001 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the getpage parameter provided to th...