689 matches found
DIR8xx_PoC
phpcgi phpcgi는 .php, .asp 및 .txt 페이지에 대한 요청을 처리합니다. 또한 사용자가 인증되었는지 여부도 확인합니다. 그럼에도 불구하고 요청을 적절한 방식으로 조작하면 공격자는 인증을 쉽게 우회하고 라우터의 로그인 및 비밀번호를 반환하는 스크립트를 실행할 수 있습니다. hnap hnap 프로토콜 구현 오류로 인해 스택을 오버플로우하여 root 권한으로 모든 sh 명령을 실행할 수 있습니다. update 이더넷 포트에 접근할 수 있다면, 재시작 후 몇 초 동안 시스템 복구 서비스가 시작되어 사용 가능하므로...
CVE-2026-8260
A vulnerability was found in D-Link DCS-935L up to 1.10.01. The impacted element is the function SetDeviceSettings of the file /web/cgi-bin/hnap/hnapservice of the component HNAP Service. The manipulation of the argument AdminPassword results in buffer overflow. The attack can be executed remotel...
Exploit for CVE-2026-8260
CVE-2026-8260 Overview A buffer overflow vulnerability af...
EUVD-2026-29016
A vulnerability was found in D-Link DCS-935L up to 1.10.01. The impacted element is the function SetDeviceSettings of the file /web/cgi-bin/hnap/hnapservice of the component HNAP Service. The manipulation of the argument AdminPassword results in buffer overflow. The attack can be executed remotel...
CVE-2026-8260
Technical details about CVE-2026-8260 are not publicly available in the provided documents. Monitor for updates from official advisories. The initial description states the vulnerability exists in D-Link DCS-935L HNAP service SetDeviceSettings buffer overflow.
CVE-2026-8260 D-Link DCS-935L HNAP Service hnap_service SetDeviceSettings buffer overflow
A vulnerability was found in D-Link DCS-935L up to 1.10.01. The impacted element is the function SetDeviceSettings of the file /web/cgi-bin/hnap/hnapservice of the component HNAP Service. The manipulation of the argument AdminPassword results in buffer overflow. The attack can be executed remotel...
D-Link DCS-935L 缓冲区错误漏洞
The D-Link DCS-935L is a router produced by D-Link Corporation. Versions of the D-Link DCS-935L prior to 1.10.01 contain a buffer error vulnerability. This vulnerability stems from the operation of the AdminPassword parameter in the SetDeviceSettings function within the HNAP Service component,...
CVE-2025-63932
D-Link Router DIR-868L A1 FW106KRb01.bin has an unauthenticated remote code execution vulnerability in the cgibin binary. The HNAP service provided by cgibin does not filter the HTTP SOAPAction header field. The unauthenticated remote attacker can execute the shell command...
PT-2025-47527
Name of the Vulnerable Software and Affected Versions D-Link Router DIR-868L version FW106KRb01 Description The D-Link Router DIR-868L version FW106KRb01 contains a remote code execution issue in the cgibin binary. The HNAP service within cgibin does not properly filter the HTTP SOAPAction header...
CVE-2025-11488 D-Link DIR-852 HNAP1 command injection
A weakness has been identified in D-Link DIR-852 up to 20251002. This affects an unknown part of the file /HNAP1/. Executing manipulation can lead to command injection. The attack may be launched remotely. The exploit has been made available to the public and could be exploited. This vulnerabilit...
EUVD-2017-12319
Malware in sbrugna...
EUVD-2019-16932
Malware in sbrugna...
EUVD-2019-18505
Malware in sbrugna...
EUVD-2019-18501
Malware in sbrugna...
EUVD-2019-17713
Malware in sbrugna...
EUVD-2019-17710
Malware in sbrugna...
EUVD-2020-7618
Malware in sbrugna...
EUVD-2019-17717
Malware in sbrugna...