CVE-2002-0348

CVE-2002-0348 Cobalt RAQ 4의 service.cgi는 원격 공격자가 서비스 거부를 일으킬 수 있게 합니다. Packetstorm 게시물: https://packetstormsecurity.com/files/25837/Colbalt-RAQ-v4.txt.html SecurityFocus 게시물: https://www.securityfocus.com/bid/4209 저자 Alex Hernandez 일명 @alt3kx 공급업체 응답: 공급업체에 통보되었습니다. Security cobalt 목록에 게시됨:...

CVE-2002-0346

CVE-2002-0346 Cobalt RAQ 4의 크로스 사이트 스크립팅 취약점으로 인해 원격 공격자가 Javascript를 포함한 URL을 통해 1 service.cgi 또는 2 alert.cgi에서 다른 Cobalt 사용자로 임의 스크립트를 실행할 수 있습니다. Packetstorm 게시물: https://packetstormsecurity.com/files/25837/Colbalt-RAQ-v4.txt.html SecurityFocus 게시물: https://www.securityfocus.com/bid/4211 작성자...

dlink_shell_poc

dlinkshellpoc Dlink 셸 PoC D-Link 815 버전 A 1.3에서 테스트됨 호환 기기: DIR-110 DIR-412 DIR-600 DIR-610 DIR-615 DIR-645 https://vuldb.com/?id.7843 DIR-815 참고: PoC 코드는 캡차를 처리하지 않습니다. 예시 root@kali: ./dlinkshellpoc.py -h usage: dlinkshellpoc.py -h -p PASSWORD -u URL -x D-Link Service.cgi RCE optional arguments:...

EUVD-2002-0343

Malware in sbrugna...

EUVD-2018-21602

Malware in sbrugna...

D-Link Multiple DIR Devices RCE Vulnerability (Aug 2025)

Multiple D-Link DIR devices are prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

The vulnerability in the service.cgi script of D-Link router microprogramming devices such as DIR-110, DIR-412, DIR-600, DIR-610, DIR-615, DIR-645, and DIR-815 allows attackers to execute malicious commands.

The vulnerability in the service.cgi script of D-Link router microprogramming devices such as DIR-110, DIR-412, DIR-600, DIR-610, DIR-615, DIR-645, and DIR-815 lies in the failure to eliminate special elements during the processing of the EVENT=CHECKFW parameter. Exploiting this vulnerability...

CVE-2018-25115

Multiple D-Link DIR-series routers, including DIR-110, DIR-412, DIR-600, DIR-610, DIR-615, DIR-645, and DIR-815 firmware version 1.03, contain a vulnerability in the service.cgi endpoint that allows remote attackers to execute arbitrary system commands without authentication. The flaw stems from...

CVE-2018-25115

Multiple D-Link DIR-series routers, including DIR-110, DIR-412, DIR-600, DIR-610, DIR-615, DIR-645, and DIR-815 firmware version 1.03, contain a vulnerability in the service.cgi endpoint that allows remote attackers to execute arbitrary system commands without authentication. The flaw stems from...

CVE-2018-25115

Multiple D-Link DIR-series routers, including DIR-110 , DIR-412 , DIR-600 , DIR-610 , DIR-615 , DIR-645 , and DIR-815 running firmware version 1.03 , are vulnerable to remote code execution (RCE) . The flaw exists in the service.cgi endpoint due to improper input handling of the EVENT=CHECKFW par...

CVE-2018-25115 D-Link DIR-110/412/600/615/645/815 RCE via service.cgi

Multiple D-Link DIR-series routers, including DIR-110, DIR-412, DIR-600, DIR-610, DIR-615, DIR-645, and DIR-815 firmware version 1.03, contain a vulnerability in the service.cgi endpoint that allows remote attackers to execute arbitrary system commands without authentication. The flaw stems from...

CVE-2018-25115: Improper Neutralization of Special Elements used in an OS Command

Multiple D-Link DIR-series routers, including DIR-110, DIR-412, DIR-600, DIR-610, DIR-615, DIR-645, and DIR-815 firmware version 1.03, contain a vulnerability in the service.cgi endpoint that allows remote attackers to execute arbitrary system commands without authentication. The flaw stems from...

CVE-2024-46565

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sSrvName parameter at service.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2024-46565

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sSrvName parameter at service.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

PT-2024-32046 · Draytek · Draytek Vigor 3910

Name of the Vulnerable Software and Affected Versions: Draytek Vigor 3910 version 4.3.2.6 Description: A buffer overflow issue was discovered in the sSrvName parameter at the "service.cgi" endpoint. This issue allows attackers to cause a Denial of Service DoS via a crafted input. Recommendations:...

CVE-2024-46565: Buffer Copy without Checking Size of Input

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sSrvName parameter at service.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

VulnCheck KEV: CVE-2018-25115

Multiple D-Link DIR-series routers, including DIR-110, DIR-412, DIR-600, DIR-610, DIR-615, DIR-645, and DIR-815 firmware version 1.03, contain a vulnerability in the service.cgi endpoint that allows remote attackers to execute arbitrary system commands without authentication. The flaw stems from...

D-Link DIR 615/645/815 service.cgi Remote Command Execution Vulnerability

D-Link DIR 615/645/815 is a wireless router product from AUO D-Link. A remote command execution vulnerability exists in D-Link DIR 615/645/815 routers with firmware version 1.03 and earlier. The vulnerability is caused by splicing data from HTTP POST requests in service.cgi, resulting in splicing...

CVE-2002-0346: Undefined Security Weakness

Cross-site scripting vulnerability in Cobalt RAQ 4 allows remote attackers to execute arbitrary script as other Cobalt users via Javascript in a URL to 1 service.cgi or 2 alert.cgi...

CVE-2002-0348: Undefined Security Weakness

service.cgi in Cobalt RAQ 4 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long service argument...