The vulnerability of D-Link DIR-882 and DIR-878 wireless routers’ microprogramming software lies in the lack of measures to neutralize special elements, allowing attackers to execute arbitrary commands.

The vulnerability of the microprogrammed software in D-Link DIR-882 and DIR-878 routers lies in the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by sending...

The vulnerability of the implementation of the SetStaticRouteSettings() function in D-Link DIR-823-Pro wireless router software allows a hacker to execute arbitrary commands.

The vulnerability of the SetStaticRouteSettings function in D-Link DIR-823-Pro wireless router microprogramming software is related to insufficient cleaning of input data during the processing of the staticroutelist parameter. Exploiting this vulnerability allows an attacker to execute arbitrary...

The vulnerability of the implementation of the twsystem() function in D-Link DIR-882 wireless router software allows a hacker to execute arbitrary commands.

The vulnerability of the twsystem function in D-Link DIR-882 wireless router microprogrammed software is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the implementation of the SetWLanApcliSettings() function in D-Link DIR-823-Pro wireless router software allows a hacker to execute arbitrary commands.

The vulnerability of the implementation of the SetWLanApcliSettings function in the microprogramming software for D-Link DIR-823-Pro wireless routers is related to insufficient cleaning of input data during the processing of the ApCliKeyStr parameter. Exploiting this vulnerability allows a remote...

The vulnerability of the `version_upgrade.asp` implementation in the D-Link DI-7200G V2.E1 microprogramming router software allows a hacker to execute arbitrary commands.

The vulnerability of the versionupgrade.asp implementation in the D-Link DI-7200G V2.E1 microprogramming router software is related to insufficient cleaning of input data during the processing of the path parameter. Exploiting this vulnerability allows an attacker to execute arbitrary commands...

The vulnerability of the implementation of the SetWLanACLSettings() function in D-Link DIR-823-Pro wireless router software allows a hacker to execute arbitrary commands.

The vulnerability of the implementation of the SetWLanACLSettings function in D-Link DIR-823-Pro wireless router microprogramming software is related to insufficient cleaning of input data during the processing of the parameter wl0.0maclist. Exploiting this vulnerability allows a remote attacker ...

The vulnerability of D-Link DIR-882 wireless routers’ microprogramming software lies in the improper handling of the LocalIPAddress parameter, allowing attackers to execute arbitrary commands.

The vulnerability of D-Link DIR-882 wireless routers’ microprogramming software is related to incorrect processing of the LocalIPAddress parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by sending specially crafted HNAP1 POST requests...

The vulnerability of the httpddebug.asp implementation of the D-Link DI-7200G V2.E1 router microprogramming system allows a hacker to execute arbitrary commands.

The vulnerability of the httpddebug.asp implementation of the D-Link DI-7200G V2.E1 router microprogramming system is related to insufficient cleaning of input data during the processing of the time parameter. Exploiting this vulnerability allows an attacker to execute arbitrary commands remotely...

The vulnerability of the ChgSambaUserSettings() function implementation in D-Link DIR-823-Pro wireless router software allows a hacker to execute arbitrary commands.

The vulnerability of the ChgSambaUserSettings function in the microprogramming software for D-Link DIR-823-Pro wireless routers is related to insufficient cleaning of input data during the processing of the sambaname parameter. Exploiting this vulnerability allows a remote attacker to execute...

The vulnerability of the implementation of the SetNetworkTomographySettings() function in the microprogrammed software for D-Link DIR-823-Pro wireless routers allows a hacker to execute arbitrary commands.

The vulnerability of the implementation of the SetNetworkTomographySettings function in the microprogrammed wireless router software from D-Link DIR-823-Pro relates to insufficient cleaning of input data during the processing of parameters tomographypingaddress, tomographypingnumber,...

The vulnerability of the urlrd_opt.asp implementation in D-Link DI-7200G V2.E1 microprogrammed router software allows a hacker to execute arbitrary commands.

The vulnerability of the urlrdopt.asp implementation in the microprogramming software for D-Link DI-7200G V2.E1 routers is related to insufficient cleaning of input data during the processing of the urlen parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

The vulnerability of the upgrade_filter function implementation in D-Link DI-7200G V2.E1 router microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability of the upgradefilter function in the microprogramming software for D-Link DI-7200G V2.E1 routers is related to insufficient cleaning of input data during the processing of parameters path and time. Exploiting this vulnerability allows an attacker operating remotely to execute...

The vulnerability of the `usb_paswd.asp` file implementation of the D-Link DI-7200G V2.E1 router’s microprogramming system allows a hacker to execute arbitrary commands.

The vulnerability of the usbpaswd.asp file of the D-Link DI-7200G V2.E1 microprogramming router’s implementation is related to insufficient cleaning of input data during the processing of the name parameter. Exploiting this vulnerability allows an attacker to execute arbitrary commands remotely...

The vulnerability of the implementation of the twsystem() function in D-Link DIR-878 wireless router software allows a hacker to execute arbitrary commands.

The vulnerability of the twsystem function in D-Link DIR-878 wireless router microprogramming software is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary command...

The vulnerability of the msp_info.htm file implementation in D-Link DI-7200G V2.E1 microprogrammable router software allows a hacker to execute arbitrary commands.

The vulnerability of the mspinfo.htm file implementation of the D-Link DI-7200G V2.E1 router microprogramming system is related to insufficient cleaning of input data during the processing of the cmd parameter. Exploiting this vulnerability allows an attacker to execute arbitrary commands remotel...

CVE-2022-23992

XCOM Data Transport for Windows, Linux, and UNIX 11.6 releases contain a vulnerability due to insufficient input validation that could potentially allow remote attackers to execute arbitrary commands with elevated privileges...

XStream: remote command execution attack by manipulating the processed input stream

A flaw was found in XStream. By manipulating the processed input stream, a remote attacker may be able to obtain sufficient rights to execute commands. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

PT-2022-16393 · Unknown · Xcom Data Transport

Name of the Vulnerable Software and Affected Versions: XCOM Data Transport for Windows, Linux, and UNIX version 11.6 Description: The issue is due to insufficient input validation, which could potentially allow remote attackers to execute arbitrary commands with elevated privileges...

GHSA-74MG-6XQX-2VRQ Deserialization exploitation in Apache Dubbo

A deserialization vulnerability existed in dubbo 2.7.5 and its earlier versions, which could lead to malicious code execution. Most Dubbo users use Hessian2 as the default serialization/deserialization protool, during Hessian2 deserializing the HashMap object, some functions in the classes stored...

Backdoor.Win32.XRat.k Remote Command Execution

Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/3d4350282ae043177063de2ad4827b97.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.XRat.k Vulnerability: Unauthenticated Remote Command Execution Description: XRat...