CVE-2024-10914: D-Link Command Injection
by PangPang - Friday November 15, 2024 at 09:04 PM
#1
A new RCE vulnerability was found in some D-Link devices (DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028). The vulnerability has been disclosed publicly, so im just sharing :)

CVE: CVE-2024-10914

POC: https://github.com/verylazytech/CVE-2024-10914 (includes fofa search)

This isnt my exploit, just sharing it
Reply
#2
Thanks, I'm learning about penetration testing for this vulnerability.
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  CVE-2024-5630 WordPress RCE via zip bypass upload HA_twck 59 6,160 Yesterday, 01:10 PM
Last Post: Shreker
  !Next.js Middleware Bypass (CVE-2025-29927) Rat1337 22 1,421 09-17-2026, 03:49 AM
Last Post: kilkiller
  VenusChen Tianyue Network Security Audit System - SQL Injection Loki 8 1,077 09-16-2026, 08:54 PM
Last Post: anomalyuser
  Google Dorks for finding SQL injection vulnerabilities and other security issues 1yush 71 3,455 09-15-2026, 02:29 AM
Last Post: Snyergy
  CVE-2025-40554 - SolarWinds Web Help Desk Auth Bypass & RCE PoC miyako 3 246 02-07-2026, 03:32 PM
Last Post: cysc



 Users browsing this thread: 1 Guest(s)