CVE-2019-7642

CVE-2019-7642 D-Link routers with the mydlink feature have some web interfaces without authentication requirements. An attacker can remotely obtain users' DNS query logs and login logs. Vulnerable targets include but are not limited to the latest firmware versions of DIR-817LW A1-1.04, DIR-816L...

PT-2026-120150

A vulnerability was determined in D-Link DCS-6501LH 3.03.02. Affected by this vulnerability is the function mydlink set root pwd of the file /mnt/mtd/aoni ipc. Executing a manipulation can lead to use of weak credentials. The attack may be launched remotely. The attack requires a high level of...

PT-2026-61817

A vulnerability was detected in D-Link DNS-320 1.0.2. This impacts an unknown function of the file /mydlink/multi uploadify.php. Performing a manipulation of the argument Filedata results in unrestricted upload. The attack is possible to be carried out remotely. The exploit is now public and may ...

D-Link DNS-320 Uploadify.php DoS

The vulnerability of the /mydlink/multi Uploadify.php component of the D-Link DNS-320 network storage software is related to errors in access control when processing the Fildata parameter. Exploiting this vulnerability could allow an attacker to cause service interruptions...

CVE-2023-25282

A heap overflow vulnerability in D-Link DIR820LA1FW106B02 allows attackers to cause a denial of service via the config.logtosyslog and logoptdropPackets parameters to mydlinkapi.ccp...

EUVD-2017-5920

Malware in sbrugna...

EUVD-2017-5922

Malware in sbrugna...

EUVD-2017-5921

Malware in sbrugna...

EUVD-2018-19414

Malware in sbrugna...

mydlink-watch-dog.sh Code Execution

The vulnerability of the mydlink-watch-dog.sh script, a microprogramming software for D-Link DCS-825L video surveillance cameras, lies in the fact that the code is loaded without any checks for its integrity. Exploiting this vulnerability allows an intruder to execute arbitrary code...

CVE-2025-55582: Improper Privilege Management

D-Link DCS-825L firmware v1.08.01 contains a vulnerability in the watchdog script mydlink-watch-dog.sh, which blindly respawns binaries such as dcp and signalc without verifying integrity, authenticity, or permissions. An attacker with local filesystem access via physical access, firmware...

CVE-2025-55581: Improper Privilege Management

D-Link DCS-825L firmware version 1.08.01 and possibly prior versions contain an insecure implementation in the mydlink-watch-dog.sh script. The script monitors and respawns the dcp and signalc binaries without validating their integrity, origin, or permissions. An attacker with filesystem access...

CVE-2025-55581

The D-Link DCS-825L video surveillance camera (firmware version 1.08.01 and possibly prior) contains an insecure implementation in the mydlink-watch-dog.sh script. The script monitors and respawns the dcp and signalc binaries without validating their integrity, origin, or permissions. This lack o...

D-Link DCS-825L security vulnerability

The D-Link DCS-825L is a wireless webcam from China AUO D-Link. A security vulnerability exists in the D-Link DCS-825L version 1.08.01 and earlier, which stems from the mydlink-watch-dog.sh script that does not verify binary integrity, which could lead to persistent arbitrary code execution...

CVE-2023-41226

D-Link DIR-3040 prog.cgi SetMyDLinkRegistration Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication is required to exploit this...

PT-2023-2358 · D Link · D-Link Dir820La1

Name of the Vulnerable Software and Affected Versions: D-Link DIR820LA1 versions prior to FW106B02 Description: The issue is related to a heap overflow vulnerability in the D-Link DIR820LA1 router's firmware. This vulnerability can be exploited by a remote attacker to cause a denial of service. T...

CVE-2022-46588

TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the sysservice parameter in the setupwizardmydlink sub4104B8 function...

CVE-2022-46597

TRENDnet TEW755AP 1.13B01 was discovered to contain a command injection vulnerability via the sysservice parameter in the setupwizardmydlink sub4104B8 function...

PT-2022-27915 · Trendnet · Trendnet Tew755Ap

Name of the Vulnerable Software and Affected Versions: TRENDnet TEW755AP version 1.13B01 Description: A stack overflow issue was discovered via the sys service parameter in the setup wizard mydlink function, specifically in the sub 4104B8 function. Recommendations: For TRENDnet TEW755AP version...

TRENDnet TEW-755AP Buffer Error Vulnerability

The TRENDnet TEW-755AP is a router from TRENDnet. The TRENDnet TEW-755AP suffers from a stack overflow vulnerability that stems from a lack of size checking of input data in the sysservice parameter of the setupwizardmydlink sub4104B8 function, which can be exploited by an attacker to execute...