CVE-2023-25283
https://notcve.org/view.php?id=CVE-2023-25283
A stack overflow vulnerability in D-Link DIR820LA1_FW106B02 allows attackers to cause a denial of service via the reserveDHCP_HostName_1.1.1.0 parameter to lan.asp. • https://github.com/migraine-sudo/D_Link_Vuln/tree/main/stackoverflow%20%20in%20reserveDHCP_HostName_1.1.1.0 https://www.dlink.com/en/security-bulletin • CWE-787: Out-of-bounds Write •
CVE-2023-24762
https://notcve.org/view.php?id=CVE-2023-24762
OS Command injection vulnerability in D-Link DIR-867 DIR_867_FW1.30B07 allows attackers to execute arbitrary commands via a crafted LocalIPAddress parameter for the SetVirtualServerSettings to HNAP1. • https://hackmd.io/%40uuXne2y3RjOdpWM87fw6_A/HyPK04zho https://www.dlink.com/en/security-bulletin • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •
CVE-2023-25279
https://notcve.org/view.php?id=CVE-2023-25279
OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to escalate privileges to root via a crafted payload. • https://github.com/migraine-sudo/D_Link_Vuln/tree/main/cmd%20Inject%20In%20tools_AccountName https://www.dlink.com/en/security-bulletin • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •
CVE-2023-0127
https://notcve.org/view.php?id=CVE-2023-0127
A command injection vulnerability in the firmware_update command, in the device's restricted telnet interface, allows an authenticated attacker to execute arbitrary commands as root. • https://www.tenable.com/security/research/tra-2023-1 • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') •
CVE-2023-24351
https://notcve.org/view.php?id=CVE-2023-24351
D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the FILECODE parameter at /goform/formLogin. • https://github.com/1160300418/Vuls/tree/main/D-Link/DIR-605L/01 https://www.dlink.com/en/security-bulletin • CWE-787: Out-of-bounds Write •