D-Link DSL-28881A FTP configuration error CVE-2020-24578 Vulnerability Description The D-Link DSL-2888A router has file sharing capability, which allows users to share files with other network us...

D-Link DCS series monitoring account password information leakage vulnerability CVE-2020-25078 Vulnerability Description D-Link DCS series monitoring by accessing specific URLs to obtain account ...

D-Link DAR-8000 Importhtml.php Remote Command Execution Vulnerability Vulnerability Description D-Link DAR-8000 SQL injection caused remote command execution vulnerability in the importml.php fil...

D-LINK DAP-2020 webproc arbitrary file reading vulnerability CVE-2021-27250 Vulnerability Description Recently, D-Link issued an announcement [1] saying that its product DAP-2020 has an arbitrary...

CxCMS Resource.ashx Arbitrary file reading vulnerability Vulnerability Description There is any file read in CxCMS. Because the /Sys/Handler/Resource.ashx page _FilePath parameter is not filtered...

Crestron aj.html Account password leak vulnerability CVE-2022-23178 Vulnerability Description Crestron HD and other series of devices can obtain sensitive information such as account password whe...

Crawlab users Add vulnerabilities to any user Vulnerability Description The Crawlab users API has any user added and is added as an unauthorized interface. You can further attack in the backgroun...

Crawlab file arbitrary file reading vulnerability Vulnerability Description Crawlab background /api/file interface There is a vulnerability to read any file in the server. The attacker can read a...

Commay RAS system Cookie verification overdue vulnerability Vulnerability Description The Cookie verification is overridden in the RAS system. When RAS_Admin_UserInfo_UserName is set to admin, th...

CmsEasy update_admin.php Any file upload vulnerability in the background Vulnerability Description There is a vulnerability to upload any file in the CmsEasy background. You can upload any file b...