CVE-2024-10915

CVE-2024-10915 - D-Link NAS Command Injection Exploit This Python-based exploit targets a command injection vulnerability in several D-Link NAS products via the /cgi-bin/accountmgr.cgi?cmd=cgiuseradd endpoint. The vulnerability allows unauthenticated attackers to execute arbitrary system commands...

CVE-2022-25063

CVE-2022-25063 This script exploits a vulnerability XSS in the TPLink WR840N router, using a field for injecting javascript code...

D-Link DIR-615 - Unauthorized Access

D-Link DIR-615 devices with firmware 20.06 are susceptible to unauthorized access. An attacker can access the WAN configuration page wan.htm without authentication, which can lead to disclosure of WAN settings, data modification, and/or other unauthorized operations. id: CVE-2021-42627 info: name...

TP-Link - OS Command Injection

The PING function on the TP-Link TL-WR840N EU v5 router with firmware through TL-WR840NEUV5171211 is vulnerable to remote code execution via a specially crafted payload in an IP address input field. id: CVE-2021-41653 info: name: TP-Link - OS Command Injection author: gy741 severity: critical...

Vulnerability-DLink-CVE-2025-14659

CVE-2025-14659: Анализ внедрения команд в DHCP-демон D-Link Recreate CVE Project | Offensive Security Автор: Peter Lin Дата: Май 2026 Описание проекта: CVE-2025-14659 сообщает об уязвимости внедрения команд в компоненте DHCP-демона, присутствующем в беспроводном маршрутизаторе D-Link DIR-860LB1 с...

viber-desktop-html-injection

Viber Desktop — HTML Injection CVE-2025-55996 CVE: CVE-2025-55996 Discoverer: Thaw Khant Cycbake Product: Viber Desktop Affected: Viber Desktop 25.6.0 and possibly earlier Summary Viber Desktop's deep-link handler viber://forward?text= can render unsanitized HTML supplied in the text parameter...

CVE-2026-103437

CVE-2026-103437: XSS через канонический URL, импортированный в ReadingLists Автор отчёта: Marco Paciaroni BomboBombone. ReadingLists принимал URL импортируемого проекта и использовал canonicalurl из ответа в качестве ссылки на карточку, не проверяя её схему. Вошедший в систему посетитель, открывш...

CVE-2026-100740

CVE-2026-100740 — D-Link DIR-895L L2TP OOB Write Python 3 PoC для CVE-2026-100740 — прошивка D-Link DIR-895L A1102b07. Описание PoCbit / GitHub CVE-2026-100740 — запись за границами буфера CWE-787 / CWE-119 в tunnelsetparams tunnel.c, парсер канала управления L2TP. Длина Host Name AVP...

SVPT_CW_2

CVE-2024-21413 https://github.com/KartheekKandalam99/SVPTCW2 CVE-2024-21413 Setup for CW TRYHACKME provided room for working on this vulnerability. Below is the link to access the room https://tryhackme.com/r/room/monikerlink To access room through RDP we have to connect to TryHackMe VPN. Click...

CVE-2025-65731

CVE-2025-65731 CWE-1191: On-Chip Debug and Test Interface With Improper Access Control UART Root Shell Access on D-Link DIR-605L Hardware F1, Firmware V6.02CN02 Summary A critical hardware security vulnerability has been identified in the D-Link DIR-605L router, Hardware Version F1, Firmware...

CVE-2023-40028

Exploit CVE-2023-40028 Ce script exploite une vulnérabilité dans Ghost CMS, permettant une lecture arbitraire de fichiers via l'abus de liens symboliques. Fonctionnalités Crée un lien symbolique vers le fichier cible Compresse la charge utile dans un fichier ZIP Télécharge le fichier ZIP via l'AP...

CVE-2024-3273-D-Link-Remote-Code-Execution-RCE

CVE-2024-3273 - D-Link Remote Code Execution RCE Exploit Description This repository contains an exploit for CVE-2024-3273 , a critical vulnerability found in specific D-Link devices that allows for Remote Code Execution RCE. The vulnerability arises from improper input validation in the...

CVE-2024-10914

CVE-2024-10914 Command Injection Vulnerability Testing for D-Link NASManual testing with burpsuite Dork for Finding Vulnerable Devices Use the following search dork to find potentially vulnerable D-Link NAS devices: FOFA: app="DLink-DNS-ShareCenter" && server=="lighttpd/1.4.25-devel-fb150ff"...

CVE-2024-22891

Nteract PoC A Proof-Of-Concept for CVE-2024-22891 vulnerability. nteract 0.28.0 allows Electron webview via Markdown link, with resultant remote code execution. In this repository there is an example vulnerable application and proof-of-concept POC exploit of it. As a PoC there is a python file th...

D-Link

CVE-2024-10914 Удаленное выполнение кода в D-Link RCE D-Link NAS — Внедрение команд через параметр Name CVE-2024-10914:- Уязвимость была обнаружена в D-Link DNS-320, DNS-320LW, DNS-325 и DNS-340L до версии 20241028. Она признана критической. Данная уязвимость затрагивает функцию cgiuseradd файла...

CVE-2023-52268

FreeScout End-User Portal Authentication Bypass Exploit CVE-2023-52268 Overview This exploit targets a vulnerability in the FreeScout End-User Portal Module versions below 1.0.65 that allows an attacker to bypass authentication through improper session token management. By generating and testing...

-cve-2021-46381

D-Link DAP-1620 arbitrary file read vulnerability fofa search statement: "DAP-1620" && title=="D-LINK" Use python3 DLINL.py...

CVE-2025-60854

CVE-2025-60854 D-link AX1500 Vulnerability I recently conducted a vulnerability analysis on a D-Link router and would like to document my findings. Target model: D-Link AX1500 Version : 1.20.01 and below The CVE number for this issue is currently published. The vulnerable function is as follows:...

CVE-2023-33782

CVE-2023-33782 Описание Обнаружено, что D-Link DIR-842V2 v1.0.3 содержит уязвимость внедрения команд в функциональности диагностики iperf3. Доказательство концепции...

cve-2026-23989-opencloud-lab

CVE-2026-23989 — обход области действия публичной ссылки OpenCloud / ownCloud Infinite Scale Автономная лаборатория из одной команды, которая воспроизводит CVE-2026-23989 и доказывает, что уязвимость исправлена, используя официальные образы Docker из апстрима. Публичная ссылка для общего доступа,...