CVE-2019-10999

The CVE-2019-10999 issue affects D-Link DCS series cameras with the alphapd web server, via a stack-based buffer overflow triggered by a long WEPEncryption value in wireless.htm. Root cause: improper handling in alphapd leading to remote code execution. Affected devices include DCS-5009L, 5010L, ...

CVE-2017-7852

CVE-2017-7852 affects D-Link DCS series cameras (notably DCS-933L, DCS-5030L, DCS-5020L, DCS-2530L, DCS-2630L, DCS-930L, DCS-932L, DCS-932LB1). Root cause: weak CrossDomain.XML with allow-access-from set to * enables Cross-Site Request Forgery (CSRF) via malicious Flash hosted on attacker sites. ...

CVE-2015-2049

CVE-2015-2049 describes an Unrestricted Upload of File with Dangerous Type affecting D-Link DCS-931L and related DCS-93xL family devices. The vulnerability exists in firmware 1.04 and earlier, where an authenticated remote attacker can upload a file with an executable extension, enabling arbitrar...

CVE-2015-2048

CVE-2015-2048 corresponds to a CSRF vulnerability in D-Link DCS-931L cameras. Affected firmware: 1.04 and earlier. Impact: remote attackers can hijack authentication of victims via unknown vectors. Root cause: CSRF in the device web interface allows unauthorized actions. Exploit details are not p...

CVE-2026-2227

CVE-2026-2227 affects D-Link DCS-931L devices

CVE-2026-2260

CVE-2026-2260 affects D-Link DCS-931L firmware up to 1.13.0. The flaw resides in an unspecified aspect of /goform/setSysAdmin where manipulating AdminID triggers an OS command injection. It is remotely exploitable and the exploit is public, implying remote code execution with high impact in confi...