350 matches found
CVE-2023-43197
D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a stack overflow via the fn parameter in the tgfile.asp function...
CVE-2023-43196
D-Link DI-7200GV2.E1 v21.04.09E1 was discovered to contain a stack overflow via the znjb parameter in the arpsys.asp function...
CVE-2023-43199
D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a stack overflow via the prev parameter in the H5/login.cgi function...
The vulnerability of the DDP microprogramming software-based wireless access points from D-Link, model DAP-2622, allows a intruder to execute any arbitrary code.
The vulnerability of the DDP microprogramming software used in D-Link DAP-2622 wireless access points lies in the fact that the execution of commands is carried out outside of the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...
CVE-2023-4711
A vulnerability, which was classified as critical, has been found in D-Link DAR-8000-10 up to 20230819. Affected by this issue is some unknown functionality of the file /log/decodmail.php. The manipulation of the argument file leads to os command injection. The attack may be launched remotely. Th...
PT-2023-4856 · D Link · D-Link Dap-2622
Name of the Vulnerable Software and Affected Versions: D-Link DAP-2622 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. The specific flaw exists within the DDP service, resulti...
D-Link DAP-2660 安全漏洞
The D-Link DAP-2660 is a wireless device from China AUO D-Link. A security vulnerability exists in D-Link DAP-2660 v1.13, which stems from a buffer overflow vulnerability in the parameter fipv6enable. An attacker can exploit the vulnerability by designing a POST request...
PT-2023-5385 · D Link · Di-7200Gv2.E1
Name of the Vulnerable Software and Affected Versions: D-Link device DI-7200GV2.E1 version 21.04.09E1 Description: The issue is related to a stack overflow in the yyxz.data function when processing the id parameter, potentially allowing a remote attacker to impact the confidentiality, integrity,...
PT-2023-5386 · D Link · Di-7200Gv2.E1
Name of the Vulnerable Software and Affected Versions: D-Link device DI-7200GV2.E1 version 21.04.09E1 Description: The issue is related to a stack overflow in the qos ext.asp function when handling the hi up parameter. This can allow a remote attacker to impact the confidentiality, integrity, and...
PT-2023-5378 · D Link · Di-7200Gv2.E1
Name of the Vulnerable Software and Affected Versions: D-Link device DI-7200GV2.E1 version 21.04.09E1 Description: The issue is related to a stack overflow in the tgfile.asp function when processing the fn parameter. This can allow a remote attacker to impact the confidentiality, integrity, and...
CVE-2023-32222
D-Link DSL-G256DG version vBZ1.00.27 web management interface allows authentication bypass via an unspecified method...
CVE-2023-34800
D-Link Go-RT-AC750 revAv101b03 was discovered to contain a command injection vulnerability via the service parameter at genacgimain...
CVE-2023-29562
TP-Link TL-WPA7510 EUV2190125 was discovered to contain a stack overflow via the operation parameter at /admin/locale...
CVE-2023-34856
A Cross Site Scripting XSS vulnerability in D-Link DI-7500G-CI-19.05.29A allows attackers to execute arbitrary code via uploading a crafted HTML file to the interface /authpic.cgi...
The vulnerability of the D-Link DIR-615 T1 network device’s microprogramming software arises from the lack of protective measures for the website structure. This allows attackers to carry out XSS attacks.
The vulnerability of the D-Link DIR-615 T1 network device’s microprogramming software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...
CVE-2023-31701
TP-Link TL-WPA4530 KIT V2 EU170406 and V2 EU161115 is vulnerable to Command Injection via httpRpmPlcDeviceRemove...
The vulnerability in the spotifyConnect.php script of D-Link’s wireless signal amplifiers allows a hacker to execute arbitrary commands.
The vulnerability in the spotifyConnect.php microprogramming of D-Link DCH-M225 wireless signal amplifiers is related to the failure to eliminate special elements used in the operating system’s processing of the parameter userName. Exploiting this vulnerability allows a remote attacker to execute...
CVE-2023-26822
D-Link Go-RT-AC750 revAv101b03 was discovered to contain a command injection vulnerability via the service parameter at soapcgi.main...
The vulnerability of the COMM_MakeCustomMsg() function in D-Link’s wireless access points DAP-2020 and DAP-1360 allows a hacker to execute arbitrary code.
The vulnerability of the COMMMakeCustomMsg function in D-Link’s wireless access points DAP-2020 and DAP-1360 is related to buffer overflows during the processing of the webproc endpoint. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...