796 matches found
DIR8xx_PoC
phpcgi phpcgi is responsible for processing requests to .php, .asp and .txt pages. Also, it checks whether a user is authorized or not. Nevertheless, if a request is crafted in a proper way, an attacker can easily bypass authorization and execute a script that returns a login and password to a...
CVE-2026-113736
A vulnerability has been found in D-Link DHP-W610AV 1.02EUb03. The impacted element is the function loginpreparehnap of the file etc/defnodes/defaultvalue.xml of the component HNAP Login. The manipulation of the argument Password leads to empty password in configuration file. The attack can be...
CVE-2026-113736 D-Link DHP-W610AV HNAP Login defaultvalue.xml login_prepare_hnap empty password
A vulnerability has been found in D-Link DHP-W610AV 1.02EUb03. The impacted element is the function loginpreparehnap of the file etc/defnodes/defaultvalue.xml of the component HNAP Login. The manipulation of the argument Password leads to empty password in configuration file. The attack can be...
CVE-2026-113736
The D-Link DHP-W610AV (firmware version 1.02EUb03 ) is vulnerable to a critical flaw in the HNAP Login component. Specifically, the login_prepare_hnap function within the etc/defnodes/defaultvalue.xml file can be manipulated. By manipulating the Password argument, an attacker can cause the config...
EUVD-2026-106988
A vulnerability has been found in D-Link DHP-W610AV 1.02EUb03. The impacted element is the function loginpreparehnap of the file etc/defnodes/defaultvalue.xml of the component HNAP Login. The manipulation of the argument Password leads to empty password in configuration file. The attack can be...
PT-2026-120163
A vulnerability has been found in D-Link DHP-W610AV 1.02EUb03. The impacted element is the function login prepare hnap of the file etc/defnodes/defaultvalue.xml of the component HNAP Login. The manipulation of the argument Password leads to empty password in configuration file. The attack can be...
D-Link DHP-W610AV Trust Management Vulnerability
The D-Link DHP-W610AV 1.02EUb03 version has a trust management vulnerability. This vulnerability stems from incorrect handling of the parameter “Password” in the “loginpreparehnap” function of the HNAP Login component. As a result, the password in the configuration file may become empty, allowing...
DN-Link DIR-868L CGI Handler System Call Code Execution
The vulnerability of the system function in the HNAP CGI Handler component of D-Link DIR-868L router microprogramming software is related to the lack of measures taken at the control level to prevent data corruption. Exploiting this vulnerability could allow a remote attacker to execute arbitrary...
CVE-2026-110536
A vulnerability was determined in D-Link DIR-868L 2.01b05. This impacts the function system of the file /htdocs/cgibin of the component HNAP CGI Handler. Executing a manipulation of the argument SOAPACTION can lead to os command injection. The attack may be launched remotely. The exploit has been...
CVE-2026-110536 D-Link DIR-868L HNAP CGI cgibin system os command injection
A vulnerability was determined in D-Link DIR-868L 2.01b05. This impacts the function system of the file /htdocs/cgibin of the component HNAP CGI Handler. Executing a manipulation of the argument SOAPACTION can lead to os command injection. The attack may be launched remotely. The exploit has been...
EUVD-2026-101590
A vulnerability was determined in D-Link DIR-868L 2.01b05. This impacts the function system of the file /htdocs/cgibin of the component HNAP CGI Handler. Executing a manipulation of the argument SOAPACTION can lead to os command injection. The attack may be launched remotely. The exploit has been...
CVE-2026-110536 D-Link DIR-868L HNAP CGI cgibin system os command injection
A vulnerability was determined in D-Link DIR-868L 2.01b05. This impacts the function system of the file /htdocs/cgibin of the component HNAP CGI Handler. Executing a manipulation of the argument SOAPACTION can lead to os command injection. The attack may be launched remotely. The exploit has been...
CVE-2026-110536
The D-Link DIR-868L (version 2.01b05 ) is vulnerable to an OS command injection vulnerability within the HNAP CGI Handler component. Specifically, the vulnerability exists in the system function of the /htdocs/cgibin file. An attacker can achieve remote code execution by manipulating the SOAPACTI...
CVE-2026-110536: Improper Neutralization of Special Elements used in an OS Command
A vulnerability was determined in D-Link DIR-868L 2.01b05. This impacts the function system of the file /htdocs/cgibin of the component HNAP CGI Handler. Executing a manipulation of the argument SOAPACTION can lead to os command injection. The attack may be launched remotely. The exploit has been...
PT-2026-114032
Name of the Vulnerable Software and Affected Versions D-Link DIR-868L version 2.01b05 Description The HNAP CGI Handler component contains a flaw in the system function within the /htdocs/cgibin file. A remote attacker can perform OS command injection by manipulating the SOAPACTION argument. OS...
Command-Injection-DIR-868L
D-Link DIR-868L rev. B1 — Pre-auth Command Injection in HNAP...
PT-2026-116261
Уязвимость функции system компонента HNAP CGI Handler микропрограммного обеспечения маршрутизатора D-Link DIR-868L связана с непринятием мер по очистке данных на управляющем уровне. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код от имени root...
CVE-2026-8260
A vulnerability was found in D-Link DCS-935L up to 1.10.01. The impacted element is the function SetDeviceSettings of the file /web/cgi-bin/hnap/hnapservice of the component HNAP Service. The manipulation of the argument AdminPassword results in buffer overflow. The attack can be executed remotel...
D-Link DCS-935L buffer overflow vulnerability
The D-Link DCS-935L is a network camera designed for home and small office environments. By default, it provides device configuration options through a CGI interface. The D-Link DCS-935L has a buffer overflow vulnerability. This vulnerability stems from the SetDeviceSettings function in the HNAP...