The vulnerability of the hedwig.cgi file in the D-LINK GO-RT-AC750 router microprogramming system allows a hacker to execute any command they desire.

The vulnerability of the hedwig.cgi file of the D-LINK GO-RT-AC750 router’s microprogramming system is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Exploit for OS Command Injection in Dlink Go-Rt-Ac750_Firmware

CVE-2023-48842 Source : D-Link Go-RT-AC750 revAv101b03 w...

CVE-2023-48842

D-Link Go-RT-AC750 revAv101b03 was discovered to contain a command injection vulnerability via the service parameter at hedwig.cgi...

CVE-2023-48842

D-Link Go-RT-AC750 revAv101b03 was discovered to contain a command injection vulnerability via the service parameter at hedwig.cgi...

Command injection

D-Link Go-RT-AC750 revAv101b03 was discovered to contain a command injection vulnerability via the service parameter at hedwig.cgi...

CVE-2023-48842

CVE-2023-48842 affects D-Link Go-RT-AC750 revA_v101b03. A command-injection exists in hedwig.cgi via the service parameter, allowing execution of arbitrary commands on the device. The CVE is rated CRITICAL (CVSS v3.1: 9.8, Network attack, no privileges required, no user interaction). Multiple sou...

D-Link Go-RT-AC750 安全漏洞

The D-Link GO-RT-AC750 is a wireless dual-band simple router from China's AUO D-Link. A command injection vulnerability exists in the D-Link Go-RT-AC750 revAv101b03 version, which stems from the service parameter of hedwig.cgi failing to correctly filter the construct command special characters,...

CVE-2023-48842: Improper Neutralization of Special Elements used in a Command

D-Link Go-RT-AC750 revAv101b03 was discovered to contain a command injection vulnerability via the service parameter at hedwig.cgi...

CVE-2023-48842

D-Link Go-RT-AC750 revAv101b03 was discovered to contain a command injection vulnerability via the service parameter at hedwig.cgi...

D-Link DIR-868L Cross-Site Request Forgery Vulnerability

D-Link DIR-868L is a wireless router product from AUO D-Link. A cross-site request forgery vulnerability exists in the hedwig.cgi and pigwidgeon.cgi files in the D-Link DIR-868L. A remote attacker can exploit this vulnerability to change the Admin password...

CVE-2018-10957

CSRF exists on D-Link DIR-868L devices, leading to for example a change to the Admin password. hedwig.cgi and pigwidgeon.cgi are two of the affected components...

CVE-2018-10957

CSRF exists on D-Link DIR-868L devices, leading to for example a change to the Admin password. hedwig.cgi and pigwidgeon.cgi are two of the affected components...

CVE-2018-10957

CSRF exists on D-Link DIR-868L devices, leading to for example a change to the Admin password. hedwig.cgi and pigwidgeon.cgi are two of the affected components...

CVE-2018-10957

CVE-2018-10957 affects the D-Link DIR-868L router. The vulnerability is a CSRF in the affected components hedwig.cgi and pigwidgeon.cgi that can allow a remote attacker to perform actions such as changing the Admin password. Impact is described across multiple sources; no official patch/version i...

CVE-2018-10957: Cross-Site Request Forgery (CSRF)

CSRF exists on D-Link DIR-868L devices, leading to for example a change to the Admin password. hedwig.cgi and pigwidgeon.cgi are two of the affected components...

PT-2018-3909 · D Link · D-Link Dir-868L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-868L affected versions not specified Description: The issue is related to a CSRF Cross-Site Request Forgery attack, which can be exploited by a remote attacker. This could allow the attacker to perform actions such as changing the...

D-Link DIR-816L Cross-Site Request Forgery Vulnerability

D-Link DIR-816L is a wireless router product from AUO D-Link. A cross-site request forgery vulnerability exists in D-Link DIR-816L Wireless routers using firmware versions prior to 2.06.B09BETA. A remote attacker can exploit this vulnerability by sending specially crafted requests to the hedwig.c...

CVE-2015-5999: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the D-Link DIR-816L Wireless Router with firmware before 2.06.B09BETA allow remote attackers to hijack the authentication of administrators for requests that 1 change the admin password, 2 change the network policy, or 3 possibly have...

CVE-2014-100005: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in D-Link DIR-600 router rev. Bx with firmware before 2.17b02 allow remote attackers to hijack the authentication of administrators for requests that 1 create an administrator account or 2 enable remote management via a crafted configuratio...

D-Link hedwig.cgi Buffer Overflow in Cookie Header

No description provided by source. !/usr/bin/env python Exploit for the DIR-645/DIR-815 hedwig.cgi stack based buffer overflow vulnerability. NimdaKey test 06-12-2014 import sys import time import string import socket from random import Random import urllib, urllib2, httplib class MIPSPayload:...