CVE-2002-0346

CVE-2002-0346 Cobalt RAQ 4 のクロスサイトスクリプティングの脆弱性により、リモートの攻撃者が 1 service.cgi または 2 alert.cgi への URL 内の JavaScript を介して、他の Cobalt ユーザーとして任意のスクリプトを実行できる可能性があります。 Packetstorm 公開: https://packetstormsecurity.com/files/25837/Colbalt-RAQ-v4.txt.html SecurityFocus 公開: https://www.securityfocus.com/bid/4211...

CVE-2002-0348

CVE-2002-0348 Cobalt RAQ 4のservice.cgiにより、リモート攻撃者がサービス拒否を引き起こす可能性があります Packetstorm公開: https://packetstormsecurity.com/files/25837/Colbalt-RAQ-v4.txt.html SecurityFocus公開: https://www.securityfocus.com/bid/4209 著者 Alex Hernandez 別名 @alt3kx ベンダーの応答: ベンダーに通知済み 公開リスト セキュリティcobalt:...

dlink_shell_poc

dlinkshellpoc Dlink shell PoC Tested on D-Link 815 Version A 1.3 Works with: DIR-110 DIR-412 DIR-600 DIR-610 DIR-615 DIR-645 https://vuldb.com/?id.7843 DIR-815 Note: PoC Code doe not handle captas. Example root@kitploit: root@kali: ./dlinkshellpoc.py -h usage: dlinkshellpoc.py -h -p PASSWORD -u U...

EUVD-2002-0343

Malware in sbrugna...

EUVD-2018-21602

Malware in sbrugna...

D-Link Multiple DIR Devices RCE Vulnerability (Aug 2025)

Multiple D-Link DIR devices are prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

CVE-2018-25115

Multiple D-Link DIR-series routers, including DIR-110, DIR-412, DIR-600, DIR-610, DIR-615, DIR-645, and DIR-815 firmware version 1.03, contain a vulnerability in the service.cgi endpoint that allows remote attackers to execute arbitrary system commands without authentication. The flaw stems from...

CVE-2018-25115

Multiple D-Link DIR-series routers, including DIR-110, DIR-412, DIR-600, DIR-610, DIR-615, DIR-645, and DIR-815 firmware version 1.03, contain a vulnerability in the service.cgi endpoint that allows remote attackers to execute arbitrary system commands without authentication. The flaw stems from...

CVE-2018-25115

Multiple D-Link DIR-series routers (DIR-110, DIR-412, DIR-600, DIR-610, DIR-615, DIR-645, DIR-815) are affected by a remote code execution vulnerability in the /service.cgi endpoint. The flaw stems from improper input handling in the EVENT=CHECKFW parameter, which is passed directly to the system...

CVE-2018-25115 D-Link DIR-110/412/600/615/645/815 RCE via service.cgi

Multiple D-Link DIR-series routers, including DIR-110, DIR-412, DIR-600, DIR-610, DIR-615, DIR-645, and DIR-815 firmware version 1.03, contain a vulnerability in the service.cgi endpoint that allows remote attackers to execute arbitrary system commands without authentication. The flaw stems from...

CVE-2024-46565

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sSrvName parameter at service.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2024-46565

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sSrvName parameter at service.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

PT-2024-32046 · Draytek · Draytek Vigor 3910

Name of the Vulnerable Software and Affected Versions: Draytek Vigor 3910 version 4.3.2.6 Description: A buffer overflow issue was discovered in the sSrvName parameter at the "service.cgi" endpoint. This issue allows attackers to cause a Denial of Service DoS via a crafted input. Recommendations:...

VulnCheck KEV: CVE-2018-25115

Multiple D-Link DIR-series routers, including DIR-110, DIR-412, DIR-600, DIR-610, DIR-615, DIR-645, and DIR-815 firmware version 1.03, contain a vulnerability in the service.cgi endpoint that allows remote attackers to execute arbitrary system commands without authentication. The flaw stems...

D-Link DIR 615/645/815 service.cgi Remote Command Execution Vulnerability

D-Link DIR 615/645/815 is a wireless router product from AUO D-Link. A remote command execution vulnerability exists in D-Link DIR 615/645/815 routers with firmware version 1.03 and earlier. The vulnerability is caused by splicing data from HTTP POST requests in service.cgi, resulting in splicing...

Colbalt-RAQ-v4-Bugs&Vulnerabilities

------oOo---------------- Cobalt RAQ 4 Server Management, Cross Site Scripting , Directory Traversal & DoS Vulnerabilities. ------oOo---------------- Company Affected: www.cobalt.com & www.sun.com Version: RAQ 4 Server Management. Dowload: http://www.cobalt.com/products/raq/index.html OS Affected...