22 matches found
CVE-2022-37055
D-Link Go-RT-AC750 GORTAC750revAv101b03 and GO-RT-AC750revBFWv200b02 are vulnerable to Buffer Overflow via cgibin, hnapmain,...
EUVD-2021-30629
Malicious code in bioql PyPI...
CVE-2024-27683
D-Link Go-RT-AC750 GORTAC750A1FWv101b03 contains a stack-based buffer overflow via the function hnapmain. An attacker can send a POST request to trigger the vulnerablilify...
CVE-2024-33112
D-Link DIR-845L router v1.01KRb03 and before is vulnerable to Command injection via the hnapmainfunc...
CVE-2019-10892
An issue was discovered in D-Link DIR-806 devices. There is a stack-based buffer overflow in function hnapmain at /htdocs/cgibin. The function will call sprintf without checking the length of strings in parameters given by HTTP header and can be controlled by users. And it finally leads to a...
CVE-2024-33112
D-Link DIR-845L router v1.01KRb03 and before is vulnerable to Command injection via the hnapmainfunc...
CVE-2024-33112
D-Link DIR-845L router v1.01KRb03 and before is vulnerable to Command injection via the hnapmainfunc...
CVE-2024-33112
D-Link DIR-845L router v1.01KRb03 and before is vulnerable to Command injection via the hnapmainfunc...
CVE-2024-33112
D-Link DIR-845L router v1.01KRb03 and before is vulnerable to Command injection via the hnapmainfunc. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...
CVE-2024-27683
D-Link Go-RT-AC750 GORTAC750A1FWv101b03 contains a stack-based buffer overflow via the function hnapmain. An attacker can send a POST request to trigger the vulnerablilify...
CVE-2024-27683
D-Link Go-RT-AC750 GORTAC750A1FWv101b03 contains a stack-based buffer overflow via the function hnapmain. An attacker can send a POST request to trigger the vulnerablilify...
CVE-2024-27683
D-Link Go-RT-AC750 GORTAC750A1FWv101b03 contains a stack-based buffer overflow via the function hnapmain. An attacker can send a POST request to trigger the vulnerablilify...
CVE-2024-27683
D-Link Go-RT-AC750 GORTAC750A1FWv101b03 contains a stack-based buffer overflow via the function hnapmain. An attacker can send a POST request to trigger the vulnerablilify...
CVE-2024-27683
D-Link Go-RT-AC750 (GORTAC750_A1_FW_v101b03) is affected by a stack-based buffer overflow in the hnap_main function. An attacker can trigger this via a crafted POST request to the vulnerable API, potentially enabling arbitrary code execution or causing device instability/DoS. Public details indic...
VulnCheck KEV: CVE-2019-10891
An issue was discovered in D-Link DIR-806 devices. There is a command injection in function hnapmain, which calls system without checking the parameter that can be controlled by user, and finally allows remote attackers to execute arbitrary shell commands with a special HTTP header...
CVE-2022-37055
D-Link Go-RT-AC750 GORTAC750revAv101b03 and GO-RT-AC750revBFWv200b02 are vulnerable to Buffer Overflow via cgibin, hnapmain,...
Command injection
D-Link GO-RT-AC750 GORTAC750revAv101b03 and GO-RT-AC750revBFWv200b02 is vulnerable to Command Injection via /cgibin, hnapmain,...
CVE-2022-37055
D-Link Go-RT-AC750 GORTAC750revAv101b03 and GO-RT-AC750revBFWv200b02 are vulnerable to Buffer Overflow via cgibin, hnapmain,...
CVE-2022-37055
CVE-2022-37055 affects D-Link Go-RT-AC750 devices (GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02). Root cause: buffer overflow via cgibin and hnap_main, due to insufficient stack/size checks. Impact reported as high confidentiality, integrity, and availability losses. Public sources descr...
Buffer overflow
D-Link DIR-645 1.03 A1 is vulnerable to Buffer Overflow. The hnapmain function in the cgibin handler uses sprintf to format the soapaction header onto the stack and has no limit on the size...