Stack overflow

D-Link DIR-809 devices with firmware through DIR-809AxFW1.12WWB0320190410 were discovered to contain a stack buffer overflow vulnerability in the function sub8003183C in /fromLogin. This vulnerability is triggered via a crafted POST request...

Stack overflow

D-Link DIR-809 devices with firmware through DIR-809AxFW1.12WWB0320190410 were discovered to contain a stack buffer overflow vulnerability in the function FUN8004776c in /formVirtualServ. This vulnerability is triggered via a crafted POST request...

Stack overflow

D-Link DIR-809 devices with firmware through DIR-809AxFW1.12WWB0320190410 were discovered to contain a stack buffer overflow vulnerability in the function sub80046EB4 in /formSetPortTr. This vulnerability is triggered via a crafted POST request...

Stack overflow

D-Link DIR-809 devices with firmware through DIR-809AxFW1.12WWB0320190410 were discovered to contain a stack buffer overflow vulnerability in the function FUN80040af8 in /formWlanSetup. This vulnerability is triggered via a crafted POST request...

CVE-2021-33265

D-Link DIR-809 routers (firmware DIR-809Ax_FW1.12WWB03_20190410) contain a stack buffer overflow in the formSetPortTr path, triggered by a crafted POST request. The flaw occurs in FUN_80046eb4 and can permit buffer overflow with potential denial of service or code execution. Affected products are...

CVE-2021-33265

D-Link DIR-809 devices with firmware through DIR-809AxFW1.12WWB0320190410 were discovered to contain a stack buffer overflow vulnerability in the function FUN80046eb4 in /formSetPortTr. This vulnerability is triggered via a crafted POST request...

CVE-2021-33266

D-Link DIR-809 devices with firmware through DIR-809AxFW1.12WWB0320190410 were discovered to contain a stack buffer overflow vulnerability in the function FUN8004776c in /formVirtualApp. This vulnerability is triggered via a crafted POST request...

CVE-2021-33268

D-Link DIR-809 devices with firmware through DIR-809AxFW1.12WWB0320190410 were discovered to contain a stack buffer overflow vulnerability in the function sub8003183C in /fromLogin. This vulnerability is triggered via a crafted POST request...

CVE-2021-33267

D-Link DIR-809 devices with firmware through DIR-809AxFW1.12WWB0320190410 were discovered to contain a stack buffer overflow vulnerability in the function FUN80034d60 in /formStaticDHCP. This vulnerability is triggered via a crafted POST request...

CVE-2021-33270

D-Link DIR-809 devices with firmware through DIR-809AxFW1.12WWB0320190410 were discovered to contain a stack buffer overflow vulnerability in the function FUN800462c4 in /formAdvFirewall. This vulnerability is triggered via a crafted POST request...

CVE-2021-33274

CVE-2021-33274 affects D-Link DIR-809 devices with firmware up to DIR-809Ax_FW1.12WWB03_20190410. The vulnerability is a stack buffer overflow in the function FUN_80040af8 within /formWlanSetup, triggerable by a crafted POST request. Public documents describe potential impacts as denial of servic...

D-Link DIR-809 缓冲区错误漏洞

A buffer overflow vulnerability exists in the D-Link DIR-809, a dual-band router from D-Link China.The vulnerability stems from the failure of the FUN800462c4 function in the product/formAdvFirewall link to effectively determine data boundaries. An attacker could cause a buffer overflow resulting...

D-Link DIR-809 缓冲区错误漏洞

D-Link DIR-809 is a dual-band router from D-Link, China.D-Link DIR-809 device firmware version DIR-809AxFW1.12WWB0320190410 has a buffer overflow vulnerability, which originates from FUN8004776c in the product formSetPortTr function fails to effectively determine data boundaries. An attacker coul...

D-Link DIR-809 缓冲区错误漏洞

The D-Link DIR-809 is a dual-band router from China's AUO D-Link. A buffer overflow vulnerability exists in the D-Link DIR-809, which stems from the FUN8004776c function in the product/formVirtualServ link failing to effectively determine data boundaries. An attacker could cause a denial of servi...

D-Link DIR-809 缓冲区错误漏洞

A buffer error vulnerability exists in the D-Link DIR-809, a dual-band router from D-Link China. The vulnerability stems from the failure of the sub80046EB4 function in the product/formSetPortTr link to effectively determine data boundaries. An attacker could cause a buffer overflow resulting in ...

orangescrum 1.8.0 - (Multiple) Cross-Site Scripting Vulnerability

Exploit Title: orangescrum 1.8.0 - 'Multiple' Cross-Site Scripting XSS Authenticated Exploit Author: Hubert Wojciechowski Contact Author: email protected Company: https://redteam.pl Vendor Homepage: https://www.orangescrum.org/ Software Link: https://www.orangescrum.org/ Version: 1.8.0 Testeted o...

GitLab: Arbitrary POST request as victim user from HTML injection in Jupyter notebooks

Summary An attacker can create a Jupyter notebook that will make arbitrary POST requests as the victim user. In the "worst case" an attacker could make an admin create a new admin account for the attacker. Other possible attack vectors are forcing invites to private projects etc. Every POST reque...

Cross-site Scripting (XSS) - Stored in snipe/snipe-it

Description Multiple Stored XSS at 'snipeitram3' and 'snipeitcpu4' in the multipart message of POST request when creating a new Asset or editing an existed Asset. Proof of Concept POST /hardware HTTP/1.1 Host: develop.snipeitapp.com Connection: close Content-Length: 2560 Cache-Control: max-age=0...

Like Button Rating < 2.6.38 - Unauthorised Vote Export to Email & IP Addresses Disclosure

The plugin does not have any authorisation and CSRF checks in the likebtnexportvotes AJAX action, which could allow any authenticated user, such as subscriber, to get a list of email and IP addresses of people who liked content from the blog. fetch"http://example.com/wp-admin/admin-ajax.php",...

Cross-Site Request Forgery (CSRF) in bookstackapp/bookstack

Description Attacker is able to logout a user if a logged in user visits attacker website. Impact This vulnerability is capable of forging user to unintentional logout. Test Tested on Edge, firefox, chrome and safari. Fix You should use POST instead of GET. To expand: One way GET could be abused...