Lucene search
+L

8 matches found

Positive Technologies
Positive Technologies
•added 2025/06/26 12:00 a.m.•23 views

PT-2025-27416 · D Link · D-Link Di-7300G+

Name of the Vulnerable Software and Affected Versions: D-Link DI-7300G+ version 19.12.25A1 Description: A critical issue has been found, affecting an unknown function of the file wget test.asp. The manipulation of the url argument leads to os command injection. It is possible to launch the attack...

8.8CVSS7.7AI score0.04249EPSS
SaveExploits1References11
CNVD
CNVD
•added 2022/04/01 12:00 a.m.•58 views

TotoLink A3100R Access Control Error Vulnerability (CNVD-2022-54663)

TotoLink A3100R is a series of wireless router TotoLink A3100R V5.9c.4577 from TotoLink Electronics Taiwan, China has an access control error vulnerability, which stems from test.asp contains an API-like function that is not authenticated and can be exploited by an attacker without authentication...

6.5CVSS3.1AI score0.05503EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/03/30 11:15 p.m.•23 views

CVE-2021-46006

In Totolink A3100R V5.9c.4577, "test.asp" contains an API-like function, which is not authenticated. Using this function, an attacker can configure multiple settings without authentication...

6.5CVSS6.6AI score0.05503EPSS
SaveExploits1References4
OSV
OSV
•added 2022/03/30 11:15 p.m.•15 views

CVE-2021-46006

In Totolink A3100R V5.9c.4577, "test.asp" contains an API-like function, which is not authenticated. Using this function, an attacker can configure multiple settings without authentication...

6.5CVSS5.8AI score0.05503EPSS
SaveExploits1References3
Prion
Prion
•added 2022/03/30 11:15 p.m.•23 views

Authentication flaw

In Totolink A3100R V5.9c.4577, "test.asp" contains an API-like function, which is not authenticated. Using this function, an attacker can configure multiple settings without authentication...

4CVSS6.5AI score0.05503EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/30 12:00 a.m.•7 views

CVE-2021-46006: Missing Authentication for Critical Function

In Totolink A3100R V5.9c.4577, "test.asp" contains an API-like function, which is not authenticated. Using this function, an attacker can configure multiple settings without authentication...

6.5CVSS6.7AI score0.05503EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2022/01/10 12:00 a.m.•3 views

PT-2022-1559

Name of the Vulnerable Software and Affected Versions D-Link device DI-7200GV2.E1 version 21.04.09E1 Description The issue is related to a command injection vulnerability in the wget test.asp function. This vulnerability allows attackers to execute arbitrary commands via the url parameter. The...

10CVSS0.03715EPSS
SaveExploits0References7
Vulnerability Lab
Vulnerability Lab
•added 2014/02/05 12:00 a.m.•62 views

Telekom Bug Bounty #11 - SQL Injection Vulnerability

Document Title: =============== Telekom Bug Bounty 11 - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1177 Dev Article:...

SaveExploits0
Rows per page
Query Builder