D-Link Go-RT-AC750 安全漏洞

The D-Link GO-RT-AC750 is a wireless dual-band simple router from China's AUO D-Link. A command injection vulnerability exists in the D-Link Go-RT-AC750 revAv101b03 version, which stems from the service parameter of hedwig.cgi failing to correctly filter the construct command special characters,...

D-Link DIR-868L Cross-Site Request Forgery Vulnerability

D-Link DIR-868L is a wireless router product from AUO D-Link. A cross-site request forgery vulnerability exists in the hedwig.cgi and pigwidgeon.cgi files in the D-Link DIR-868L. A remote attacker can exploit this vulnerability to change the Admin password...

CVE-2018-10957

CSRF exists on D-Link DIR-868L devices, leading to for example a change to the Admin password. hedwig.cgi and pigwidgeon.cgi are two of the affected components...

CVE-2018-10957

CSRF exists on D-Link DIR-868L devices, leading to for example a change to the Admin password. hedwig.cgi and pigwidgeon.cgi are two of the affected components...

CVE-2018-10957

CSRF exists on D-Link DIR-868L devices, leading to for example a change to the Admin password. hedwig.cgi and pigwidgeon.cgi are two of the affected components...

CVE-2018-10957

CVE-2018-10957 affects the D-Link DIR-868L router. The vulnerability is a CSRF in the affected components hedwig.cgi and pigwidgeon.cgi that can allow a remote attacker to perform actions such as changing the Admin password. Impact is described across multiple sources; no official patch/version i...

PT-2018-3909 · D Link · D-Link Dir-868L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-868L affected versions not specified Description: The issue is related to a CSRF Cross-Site Request Forgery attack, which can be exploited by a remote attacker. This could allow the attacker to perform actions such as changing the...

D-Link DIR-816L Cross-Site Request Forgery Vulnerability

D-Link DIR-816L is a wireless router product from AUO D-Link. A cross-site request forgery vulnerability exists in D-Link DIR-816L Wireless routers using firmware versions prior to 2.06.B09BETA. A remote attacker can exploit this vulnerability by sending specially crafted requests to the hedwig.c...

D-Link hedwig.cgi Buffer Overflow in Cookie Header

No description provided by source. !/usr/bin/env python Exploit for the DIR-645/DIR-815 hedwig.cgi stack based buffer overflow vulnerability. NimdaKey test 06-12-2014 import sys import time import string import socket from random import Random import urllib, urllib2, httplib class MIPSPayload:...

D-Link DIR300, DIR600, DIR645 hedwig.cgi Buffer Overflow in Cookie Header

This Metasploit module exploits an anonymous remote code execution vulnerability on several D-Link routers. The vulnerability exists in the handling of HTTP queries to the hedwig.cgi with long value cookies. This Metasploit module has been tested successfully on D-Link DIR300v2.14, DIR600 and the...

D-Link Devices - 'hedwig.cgi' Remote Buffer Overflow in Cookie Header (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'D-Link hedwig.cgi Buffer Overflow in Cookie Header', 'Description' = %q This module exploits an anonymous remote code execution...

D-Link hedwig.cgi Buffer Overflow in Cookie Header

This module exploits an anonymous remote code execution vulnerability on several D-Link routers. The vulnerability exists in the handling of HTTP queries to the hedwig.cgi with long value cookies. This module has been tested successfully on D-Link DIR300v2.14, DIR600 and the DIR645A1FW103B11...