D-Link DSL-2888A - Cookie Auth Bypass Detection (CVE-2020-24579)

Detects D-Link DSL-2888A session elevation by fetching /page/login/loginsucc.html with a random uid cookie, then /index.html with the same cookie and looking for authenticated UI markers. !/usr/bin/env python3 -- coding: utf-8 -- """D-Link DSL-2888A cookie privilege escalation / auth bypass...

Remote Code Execution (RCE)

Overview Affected versions of this package are vulnerable to Remote Code Execution RCE. A vulnerability exists in .NET applications where the diagnostic server can be exploited to achieve cross-session/cross-user elevation of privilege EoP and code execution. Remediation Upgrade...