Lucene search
+L

30 matches found

Prion
Prion
•added 2024/01/10 10:15 p.m.•35 views

Design/Logic Flaw

An issue discovered in D-Link dir815 v.1.01SSb08.bin allows a remote attacker to execute arbitrary code via a crafted POST request to the service parameter in the soapcgimain function of the cgibin binary component...

7.5CVSS8.1AI score0.24381EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/10 12:00 a.m.•3 views

CVE-2023-51123: Improper Neutralization of Special Elements used in an OS Command

An issue discovered in D-Link dir815 v.1.01SSb08.bin allows a remote attacker to execute arbitrary code via a crafted POST request to the service parameter in the soapcgimain function of the cgibin binary component...

9.8CVSS8.7AI score0.24381EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2024/01/10 12:00 a.m.•35 views

CVE-2023-51123

An issue discovered in D-Link dir815 v.1.01SSb08.bin allows a remote attacker to execute arbitrary code via a crafted POST request to the service parameter in the soapcgimain function of the cgibin binary component...

9.7AI score0.24381EPSS
SaveExploits1References2
NVD
NVD
•added 2023/01/19 11:15 p.m.•28 views

CVE-2022-46476

D-Link DIR-859 A1 1.05 was discovered to contain a command injection vulnerability via the service= variable in the soapcgimain function...

9.8CVSS9.8AI score0.41055EPSS
SaveExploits1References1
Prion
Prion
•added 2023/01/19 11:15 p.m.•35 views

Command injection

D-Link DIR-859 A1 1.05 was discovered to contain a command injection vulnerability via the service= variable in the soapcgimain function...

7.5CVSS9.7AI score0.41055EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2023/01/19 12:00 a.m.•77 views

CVE-2022-46476

CVE-2022-46476 affects the D-Link DIR-859 A1 firmware (1.05). The issue is a command-injection vulnerability in the router’s soapcgi_main function, exploitable via the service= parameter due to inadequate input sanitization in the management interface. This could enable a remote attacker to execu...

9.8CVSS9.8AI score0.41055EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2023/01/19 12:00 a.m.•15 views

D-Link DIR-859 操作系统命令注入漏洞

D-Link DIR-859 is a wireless router from D-Link China.A security vulnerability exists in the D-Link DIR-859A1 1.05, which was discovered to contain a command injection vulnerability via the service= variable in the soapcgimain function. No detailed vulnerability details are currently available...

9.8CVSS8AI score0.41055EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2023/01/19 12:00 a.m.•46 views

CVE-2022-46476

D-Link DIR-859 A1 1.05 was discovered to contain a command injection vulnerability via the service= variable in the soapcgimain function...

10AI score0.41055EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/19 12:00 a.m.•1 views

CVE-2022-46476: Improper Neutralization of Special Elements used in an OS Command

D-Link DIR-859 A1 1.05 was discovered to contain a command injection vulnerability via the service= variable in the soapcgimain function...

9.8CVSS6AI score0.41055EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
•added 2019/01/15 12:00 a.m.•20 views

The vulnerability of the soapcgi_main function in the soap.cgi script of D-Link DIR-818LW and DIR-860L routers allows a hacker to execute arbitrary commands on the operating system.

The vulnerability of the soapcgimain function in the soap.cgi script /htdocs/cgibin/soap.cgi of the D-Link DIR-818LW and DIR-860L router software is caused by privilege management errors. Exploiting this vulnerability allows an attacker to execute arbitrary operating system commands using the...

6.5CVSS8.1AI score0.06725EPSS
SaveExploits1References2Affected Software2
Rows per page
Query Builder