D-Link DAP-2310和DAP-2330 代码问题漏洞

The D-Link DAP-2310 is a single-band wireless network access point for small businesses or schools that need a fast and reliable wireless network.The D-Link DAP-2330 is a wireless N300 single-band PoE access point. A null pointer dereference vulnerability exists in multiple D-Link products, which...

CVE-2021-28840: NULL Pointer Dereference

Null Pointer Dereference vulnerability exists in D-Link DAP-2310 2.07.RC031, DAP-2330 1.07.RC028, DAP-2360 2.07.RC043, DAP-2553 3.06.RC027, DAP-2660 1.13.RC074, DAP-2690 3.16.RC100, DAP-2695 1.17.RC063, DAP-3320 1.01.RC014 and DAP-3662 1.01.RC022 in the uploadconfig function of sbin/httpd binary...

CVE-2021-28838: NULL Pointer Dereference

Null pointer dereference vulnerability in D-Link DAP-2310 2,10RC039, DAP-2330 1.10RC036 BETA, DAP-2360 2.10RC055, DAP-2553 3.10rc039 BETA, DAP-2660 1.15rc131b, DAP-2690 3.20RC115 BETA, DAP-2695 1.20RC093, DAP-3320 1.05RC027 BETA and DAP-3662 1.05rc069 in the sbin/httpd binary. The crash happens a...

PT-2021-17954

Name of the Vulnerable Software and Affected Versions: D-Link DAP-2310 version 2,10RC039 D-Link DAP-2330 version 1.10RC036 BETA D-Link DAP-2360 version 2.10RC055 D-Link DAP-2553 version 3.10rc039 BETA D-Link DAP-2660 version 1.15rc131b D-Link DAP-2690 version 3.20RC115 BETA D-Link DAP-2695 versio...

PT-2021-17955

Name of the Vulnerable Software and Affected Versions: D-Link DAP-2310 version 2.07.RC031 D-Link DAP-2330 version 1.07.RC028 D-Link DAP-2360 version 2.07.RC043 D-Link DAP-2553 version 3.06.RC027 D-Link DAP-2660 version 1.13.RC074 D-Link DAP-2690 version 3.16.RC100 D-Link DAP-2695 version 1.17.RC0...

PT-2021-17956

Name of the Vulnerable Software and Affected Versions: D-Link DAP-2310 version 2.07.RC031 D-Link DAP-2330 version 1.07.RC028 D-Link DAP-2360 version 2.07.RC043 D-Link DAP-2553 version 3.06.RC027 D-Link DAP-2660 version 1.13.RC074 D-Link DAP-2690 version 3.16.RC100 D-Link DAP-2695 version 1.17.RC0...

Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2021-2298)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

apache-httpd:fuzz_utils: Heap-buffer-overflow in ap_escape_path_segment_buffer

Detailed Report: https://oss-fuzz.com/testcase?key=4906072245665792 Project: apache-httpd Fuzzing Engine: afl Fuzz Target: fuzzutils Job Type: aflasanapache-httpd Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x60700000022c Crash State: apescapepathsegmentbuffer...

apache-httpd:fuzz_utils: Heap-buffer-overflow in ap_escape_quotes

Detailed Report: https://oss-fuzz.com/testcase?key=5629746242256896 Project: apache-httpd Fuzzing Engine: afl Fuzz Target: fuzzutils Job Type: aflasanapache-httpd Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x604000152a36 Crash State: apescapequotes fuzzutils.c...

AZL-6481 CVE-2021-32791 affecting package httpd for versions less than 2.4.52-1

modauthopenidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID Connect Provider. In modauthopenidc before version 2.4.9, the AES GCM encryption in modauthopenidc uses a static IV and...

AZL-6482 CVE-2021-32792 affecting package httpd for versions less than 2.4.52-1

modauthopenidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID Connect Provider. In modauthopenidc before version 2.4.9, there is an XSS vulnerability in when using OIDCPreservePost ...

Medium: httpd24

Issue Overview: A flaw was found in Apache httpd. The modproxywstunnel module tunnels non-upgraded connections. CVE-2019-17567 A flaw was found in HTTPd. In some Apache HTTP Server versions, unprivileged local users can stop HTTPd on Windows. The highest threat from this vulnerability is to syste...

CVE-2020-35452 affecting package httpd 2.4.46-6

CVE-2020-35452 affecting package httpd 2.4.46-6. A patched version of the package is available...

CVE-2021-30641 affecting package httpd 2.4.46-6

CVE-2021-30641 affecting package httpd 2.4.46-6. A patched version of the package is available...

CVE-2020-13950 affecting package httpd 2.4.46-6

CVE-2020-13950 affecting package httpd 2.4.46-6. A patched version of the package is available...

CVE-2020-11993 affecting package httpd 2.4.43-

CVE-2020-11993 affecting package httpd 2.4.43-. An upgraded version of the package is available that resolves this issue...

CVE-2021-26691 affecting package httpd 2.4.46-6

CVE-2021-26691 affecting package httpd 2.4.46-6. A patched version of the package is available...

CVE-2021-26690 affecting package httpd 2.4.46-6

CVE-2021-26690 affecting package httpd 2.4.46-6. A patched version of the package is available...

CVE-2020-11984 affecting package httpd 2.4.43-

CVE-2020-11984 affecting package httpd 2.4.43-. An upgraded version of the package is available that resolves this issue...

Netgear DGN2200v1 远程命令执行

Exploit Title: Netgear DGN2200v1 - Remote Command Execution RCE Unauthenticated Date: 02.07.2021 Exploit Author: SivertPL Vendor Homepage: https://www.netgear.com/ Version: All prior to v1.0.0.60 !/usr/bin/python """ NETGEAR DGN2200v1 Unauthenticated Remote Command Execution Author: SivertPL...