DIR8xx_PoC

phpcgi phpcgi is responsible for processing requests to .php, .asp and .txt pages. Also, it checks whether a user is authorized or not. Nevertheless, if a request is crafted in a proper way, an attacker can easily bypass authorization and execute a script that returns a login and password to a...

VulnCheck KEV: CVE-2026-110536

A vulnerability was determined in D-Link DIR-868L 2.01b05. This impacts the function system of the file /htdocs/cgibin of the component HNAP CGI Handler. Executing a manipulation of the argument SOAPACTION can lead to os command injection. The attack may be launched remotely. The exploit has been...

CVE-2026-124561

A vulnerability was determined in D-Link DIR-878 1.20B05. This impacts the function SetVLANSettings of the file prog.cgi of the component HNAP Handler. Executing a manipulation of the argument VID can lead to stack-based buffer overflow. The attack can be launched remotely. The exploit has been...

CVE-2026-124564

A weakness has been identified in D-Link DIR-878 1.20B05. Affected by this issue is the function GetListDirectory of the file bin/prog.cgi of the component HNAP Handler. This manipulation of the argument ListDirectoryPath causes path traversal. Remote exploitation of the attack is possible. The...

CVE-2026-124563

A security flaw has been discovered in D-Link DIR-878 1.20B05. Affected by this vulnerability is the function SetWanSettings of the component HNAP Handler. The manipulation of the argument Primary/Secondary results in buffer overflow. The attack may be launched remotely. The exploit has been...

CVE-2026-124562

A vulnerability was identified in D-Link DIR-878 1.20B05. Affected is the function SetWanSettings of the component HNAP Handler. The manipulation of the argument ConfigDNS/Primary/ConfigDNS/Secondary leads to buffer overflow. The attack may be initiated remotely. The exploit is publicly available...

CVE-2026-124564 D-Link DIR-878 HNAP prog.cgi GetListDirectory path traversal

A weakness has been identified in D-Link DIR-878 1.20B05. Affected by this issue is the function GetListDirectory of the file bin/prog.cgi of the component HNAP Handler. This manipulation of the argument ListDirectoryPath causes path traversal. Remote exploitation of the attack is possible. The...

CVE-2026-124564

A path traversal vulnerability exists in the HNAP Handler component of the D-Link DIR-878 (version 1.20B05). The flaw is triggered by the manipulation of the ListDirectoryPath argument within the GetListDirectory function located in bin/prog.cgi. This weakness allows for remote exploitation , and...

EUVD-2026-119795

A weakness has been identified in D-Link DIR-878 1.20B05. Affected by this issue is the function GetListDirectory of the file bin/prog.cgi of the component HNAP Handler. This manipulation of the argument ListDirectoryPath causes path traversal. Remote exploitation of the attack is possible. The...

EUVD-2026-119794

A security flaw has been discovered in D-Link DIR-878 1.20B05. Affected by this vulnerability is the function SetWanSettings of the component HNAP Handler. The manipulation of the argument Primary/Secondary results in buffer overflow. The attack may be launched remotely. The exploit has been...

CVE-2026-124563

A security flaw exists in the HNAP Handler component of the D-Link DIR-878 1.20B05 firmware. Specifically, the SetWanSettings function is vulnerable to a buffer overflow when an attacker manipulates the Primary/Secondary argument. This vulnerability can be triggered remotely and may result in a h...

CVE-2026-124563 D-Link DIR-878 HNAP SetWanSettings buffer overflow

A security flaw has been discovered in D-Link DIR-878 1.20B05. Affected by this vulnerability is the function SetWanSettings of the component HNAP Handler. The manipulation of the argument Primary/Secondary results in buffer overflow. The attack may be launched remotely. The exploit has been...

CVE-2026-124562

A buffer overflow vulnerability exists in the HNAP Handler component of the D-Link DIR-878 (version 1.20B05) device. The flaw is located within the SetWanSettings function, where manipulating the ConfigDNS/Primary or ConfigDNS/Secondary arguments triggers the overflow. This vulnerability can be e...

CVE-2026-124562 D-Link DIR-878 HNAP SetWanSettings buffer overflow

A vulnerability was identified in D-Link DIR-878 1.20B05. Affected is the function SetWanSettings of the component HNAP Handler. The manipulation of the argument ConfigDNS/Primary/ConfigDNS/Secondary leads to buffer overflow. The attack may be initiated remotely. The exploit is publicly available...

CVE-2026-124562 D-Link DIR-878 HNAP SetWanSettings buffer overflow

A vulnerability was identified in D-Link DIR-878 1.20B05. Affected is the function SetWanSettings of the component HNAP Handler. The manipulation of the argument ConfigDNS/Primary/ConfigDNS/Secondary leads to buffer overflow. The attack may be initiated remotely. The exploit is publicly available...

EUVD-2026-119788

A vulnerability was identified in D-Link DIR-878 1.20B05. Affected is the function SetWanSettings of the component HNAP Handler. The manipulation of the argument ConfigDNS/Primary/ConfigDNS/Secondary leads to buffer overflow. The attack may be initiated remotely. The exploit is publicly available...

CVE-2026-124560

A vulnerability was found in D-Link DIR-878 1.20B05. This affects the function GetCAPTCHAsetting of the file bin/prog.cgi of the component HNAP Handler. Performing a manipulation of the argument uid results in heap-based buffer overflow. The attack can be initiated remotely. The exploit has been...

CVE-2026-124561 D-Link DIR-878 HNAP prog.cgi SetVLANSettings stack-based overflow

A vulnerability was determined in D-Link DIR-878 1.20B05. This impacts the function SetVLANSettings of the file prog.cgi of the component HNAP Handler. Executing a manipulation of the argument VID can lead to stack-based buffer overflow. The attack can be launched remotely. The exploit has been...

EUVD-2026-119787

A vulnerability was determined in D-Link DIR-878 1.20B05. This impacts the function SetVLANSettings of the file prog.cgi of the component HNAP Handler. Executing a manipulation of the argument VID can lead to stack-based buffer overflow. The attack can be launched remotely. The exploit has been...

CVE-2026-124561

A stack-based buffer overflow vulnerability exists in the HNAP Handler component of the D-Link DIR-878 (version 1.20B05). The flaw is triggered by manipulating the VID argument within the SetVLANSettings function of the prog.cgi file. This vulnerability can be exploited remotely , potentially lea...