EUVD-2026-97238

A vulnerability was detected in TRENDnet TEW-751DR, TEW-752DRU and TEW733GR 1.03B01/1.03B03. Affected is the function fwrite of the file pigwidgeon.cgi of the component Web Management Backend. The manipulation of the argument service results in os command injection. It is possible to launch the...

CVE-2026-108804 TRENDnet TEW-751DR/TEW-752DRU/TEW733GR Web Management Backend pigwidgeon.cgi fwrite os command injection

A vulnerability was detected in TRENDnet TEW-751DR, TEW-752DRU and TEW733GR 1.03B01/1.03B03. Affected is the function fwrite of the file pigwidgeon.cgi of the component Web Management Backend. The manipulation of the argument service results in os command injection. It is possible to launch the...

CVE-2026-108804

The TRENDnet TEW-751DR , TEW-752DRU , and TEW733GR routers (firmware versions 1.03B01/1.03B03 ) are vulnerable to an OS command injection in the Web Management Backend . The flaw exists within the fwrite function of the pigwidgeon.cgi file, where manipulating the service argument allows for remot...

CVE-2026-108804: Improper Neutralization of Special Elements used in an OS Command

A vulnerability was detected in TRENDnet TEW-751DR, TEW-752DRU and TEW733GR 1.03B01/1.03B03. Affected is the function fwrite of the file pigwidgeon.cgi of the component Web Management Backend. The manipulation of the argument service results in os command injection. It is possible to launch the...

VulnCheck KEV: CVE-2018-10957

CSRF exists on D-Link DIR-868L devices, leading to for example a change to the Admin password. hedwig.cgi and pigwidgeon.cgi are two of the affected components...

EUVD-2018-3009

Malware in sbrugna...

D-Link DIR-868L Cross-Site Request Forgery Vulnerability

D-Link DIR-868L is a wireless router product from AUO D-Link. A cross-site request forgery vulnerability exists in the hedwig.cgi and pigwidgeon.cgi files in the D-Link DIR-868L. A remote attacker can exploit this vulnerability to change the Admin password...

CVE-2018-10957

CSRF exists on D-Link DIR-868L devices, leading to for example a change to the Admin password. hedwig.cgi and pigwidgeon.cgi are two of the affected components...

CVE-2018-10957

CSRF exists on D-Link DIR-868L devices, leading to for example a change to the Admin password. hedwig.cgi and pigwidgeon.cgi are two of the affected components...

CVE-2018-10957

CVE-2018-10957 affects the D-Link DIR-868L router. The vulnerability is a CSRF in the affected components hedwig.cgi and pigwidgeon.cgi that can allow a remote attacker to perform actions such as changing the Admin password. Impact is described across multiple sources; no official patch/version i...

CVE-2018-10957

CSRF exists on D-Link DIR-868L devices, leading to for example a change to the Admin password. hedwig.cgi and pigwidgeon.cgi are two of the affected components...

CVE-2018-10957: Cross-Site Request Forgery (CSRF)

CSRF exists on D-Link DIR-868L devices, leading to for example a change to the Admin password. hedwig.cgi and pigwidgeon.cgi are two of the affected components...

PT-2018-3909 · D Link · D-Link Dir-868L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-868L affected versions not specified Description: The issue is related to a CSRF Cross-Site Request Forgery attack, which can be exploited by a remote attacker. This could allow the attacker to perform actions such as changing the...

D-Link DIR-816L Cross-Site Request Forgery Vulnerability

D-Link DIR-816L is a wireless router product from AUO D-Link. A cross-site request forgery vulnerability exists in D-Link DIR-816L Wireless routers using firmware versions prior to 2.06.B09BETA. A remote attacker can exploit this vulnerability by sending specially crafted requests to the hedwig.c...

CVE-2015-5999: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the D-Link DIR-816L Wireless Router with firmware before 2.06.B09BETA allow remote attackers to hijack the authentication of administrators for requests that 1 change the admin password, 2 change the network policy, or 3 possibly have...

CVE-2014-100005

Multiple cross-site request forgery CSRF vulnerabilities in D-Link DIR-600 router rev. Bx with firmware before 2.17b02 allow remote attackers to hijack the authentication of administrators for requests that 1 create an administrator account or 2 enable remote management via a crafted configuratio...

CVE-2014-100005: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in D-Link DIR-600 router rev. Bx with firmware before 2.17b02 allow remote attackers to hijack the authentication of administrators for requests that 1 create an administrator account or 2 enable remote management via a crafted configuratio...

PT-2013-4137

Name of the Vulnerable Software and Affected Versions D-Link DIR865L router Rev. A1 with firmware before 1.05b07 Description The issue affects the D-Link DIR865L router, allowing remote attackers to hijack the authentication of administrators. This can be achieved through multiple cross-site...

CVE-2013-3095: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in D-Link DIR865L router Rev. A1 with firmware before 1.05b07 allow remote attackers to hijack the authentication of administrators for requests that 1 change the administrator password or 2 enable remote management via a request to...