Zdenda

2 exploits Active since Oct 2019
CVE-2019-17508 METASPLOIT CRITICAL ruby WORKING POC
D-Link DIR-859 A3-1.06 and DIR-850 A1.13 - OS Command Injection via DEVICE.TIME.php
On D-Link DIR-859 A3-1.06 and DIR-850 A1.13 devices, /etc/services/DEVICE.TIME.php allows command injection via the $SERVER variable.
CVSS 9.8
EIP-2026-103348 EXPLOITDB ruby WORKING POC
D-Link DIR-850L - OS Command Execution (Metasploit)