Lucene search
+L

28 matches found

BDU FSTEC
BDU FSTEC
•added 2026/01/16 12:00 a.m.•21 views

D-Link DI-7400G+ Router Arbitrary Command Execution

The vulnerability of the mspinfohtm function in the mspinfo.htm file of the D-Link DI-7400G+ router microprogramming system is related to the lack of measures taken to neutralize special elements during the processing of the cmd parameter. Exploiting this vulnerability allows a remote attacker to...

6.5CVSS7.6AI score0.04558EPSS
SaveExploits1References6Affected Software1
RedhatCVE
RedhatCVE
•added 2025/05/23 7:23 a.m.•20 views

CVE-2024-44381

D-Link DI8004W 16.07.26A1 contains a command execution vulnerability in jhttpd mspinfohtm function...

9.8CVSS8.7AI score0.01378EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/23 6:41 a.m.•24 views

CVE-2024-52739

D-LINK DI-8400 v16.07.26A1 was discovered to contain multiple remote command execution RCE vulnerabilities in the mspinfohtm function via the flag and cmd parameters...

8CVSS7.7AI score0.10334EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/23 6:40 a.m.•22 views

CVE-2024-51151

D-Link DI-8200 16.07.26A1 is vulnerable to remote command execution in the mspinfohtm function via the flag parameter and cmd parameter...

9.8CVSS8.7AI score0.31221EPSS
SaveExploits1References1
CNVD
CNVD
•added 2024/11/26 12:00 a.m.•25 views

D-Link DI-8200 Command Injection Vulnerability

The D-Link DI-8200 is an enterprise router from China-based AUO D-Link. The D-Link DI-8200 suffers from a command injection vulnerability that stems from a remote command execution vulnerability in the flag parameter and cmd parameter of the mspinfohtm function. No details of the vulnerability ar...

9.8CVSS8.7AI score0.31221EPSS
SaveExploits1References1
NVD
NVD
•added 2024/11/21 9:45 a.m.•27 views

CVE-2024-51151

D-Link DI-8200 16.07.26A1 is vulnerable to remote command execution in the mspinfohtm function via the flag parameter and cmd parameter...

9.8CVSS0.31221EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/21 12:00 a.m.•8 views

CVE-2024-51151: Improper Neutralization of Special Elements used in a Command

D-Link DI-8200 16.07.26A1 is vulnerable to remote command execution in the mspinfohtm function via the flag parameter and cmd parameter...

9.8CVSS8.7AI score0.31221EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2024/11/20 6:15 p.m.•20 views

CVE-2024-52739

D-LINK DI-8400 v16.07.26A1 was discovered to contain multiple remote command execution RCE vulnerabilities in the mspinfohtm function via the flag and cmd parameters...

8CVSS7.7AI score0.10334EPSS
SaveExploits1References2
NVD
NVD
•added 2024/11/20 6:15 p.m.•43 views

CVE-2024-52739

D-LINK DI-8400 v16.07.26A1 was discovered to contain multiple remote command execution RCE vulnerabilities in the mspinfohtm function via the flag and cmd parameters...

8CVSS0.10334EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2024/11/20 12:00 a.m.•26 views

CVE-2024-51151

D-Link DI-8200 16.07.26A1 is vulnerable to remote command execution in the mspinfohtm function via the flag parameter and cmd parameter...

8.6AI score0.31221EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/20 12:00 a.m.•6 views

CVE-2024-52739: Improper Neutralization of Special Elements used in a Command

D-LINK DI-8400 v16.07.26A1 was discovered to contain multiple remote command execution RCE vulnerabilities in the mspinfohtm function via the flag and cmd parameters...

8CVSS7.7AI score0.10334EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/11/20 12:00 a.m.•16 views

CVE-2024-52739

D-LINK DI-8400 v16.07.26A1 was discovered to contain multiple remote command execution RCE vulnerabilities in the mspinfohtm function via the flag and cmd parameters...

7.7AI score0.10334EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2024/11/20 12:00 a.m.•36 views

CVE-2024-51151

D-Link DI-8200 16.07.26A1 is vulnerable to remote command execution in the mspinfohtm function via the flag parameter and cmd parameter...

0.31221EPSS
SaveExploits1References1
CVE
CVE
•added 2024/11/20 12:00 a.m.•104 views

CVE-2024-51151

CVE-2024-51151 affects the D-Link DI-8200 with firmware 16.07.26A1. The vulnerability is a remote command execution in the msp_info_htm function, exploitable via the flag parameter and the cmd parameter. The connected documents consistently describe this issue as a command injection/remotely expl...

9.8CVSS8.6AI score0.31221EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2024/11/20 12:00 a.m.•44 views

CVE-2024-52739

D-LINK DI-8400 v16.07.26A1 was discovered to contain multiple remote command execution RCE vulnerabilities in the mspinfohtm function via the flag and cmd parameters...

0.10334EPSS
SaveExploits1References2
CNVD
CNVD
•added 2024/09/11 12:00 a.m.•20 views

D-Link DI-8300 msp_info_htm Function Command Injection Vulnerability

The D-Link DI-8300 is a wireless broadband router designed for small to medium-sized network environments from China's D-Link. A command injection vulnerability exists in the D-Link DI-8300 version v16.07.26A1, which stems from the mspinfohtm function failing to properly filter construct command...

9.8CVSS8.8AI score0.03742EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2024/09/09 9:15 p.m.•14 views

CVE-2024-44411

D-Link DI-8300 v16.07.26A1 is vulnerable to command injection via the mspinfohtm function...

9.8CVSS8.5AI score0.03742EPSS
SaveExploits1References3
NVD
NVD
•added 2024/09/09 9:15 p.m.•34 views

CVE-2024-44411

D-Link DI-8300 v16.07.26A1 is vulnerable to command injection via the mspinfohtm function...

9.8CVSS0.03742EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2024/09/09 12:00 a.m.•30 views

CVE-2024-44411

D-Link DI-8300 v16.07.26A1 is vulnerable to command injection via the mspinfohtm function...

0.03742EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/09 12:00 a.m.•7 views

CVE-2024-44411: Improper Control of Generation of Code

D-Link DI-8300 v16.07.26A1 is vulnerable to command injection via the mspinfohtm function...

9.8CVSS8.6AI score0.03742EPSS
SaveExploits1References1
Rows per page
Query Builder