[Exploit] CVE-2024-3273 : Remote Command Injection
by trampoline - Sunday April 7, 2024 at 07:31 AM
#31
(Apr 07, 2024, 07:31 AM)trampoline Wrote: This script exploits CVE-2024-3273 vulnerability found in specific versions of D-Link NAS devices. (D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403.)

It enables command execution and unauthorized access to the affected devices.

NOTE: This vulnerability only affects products that are no longer supported by the maintainer. The vendor was contacted early and confirmed immediately that the product is end-of-life, so there's no option to patch this vulnerability. 



PS: I dont own source; only sharing for those who need.

thx for ur sharing
Reply
#32
Thks for the upload !!
Reply
#33
hmmmmm let me try
Reply
#34
(Apr 07, 2024, 07:31 AM)trampoline Wrote: This script exploits CVE-2024-3273 vulnerability found in specific versions of D-Link NAS devices. (D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403.)

It enables command execution and unauthorized access to the affected devices.

NOTE: This vulnerability only affects products that are no longer supported by the maintainer. The vendor was contacted early and confirmed immediately that the product is end-of-life, so there's no option to patch this vulnerability. 



PS: I dont own source; only sharing for those who need.
1110101010001010111111010010111
Reply
#35
Lets take a look please
Reply
#36
Thanks brother!!!!!
Reply
#37
Amazing PoC. Really interesting.

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Leeching | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.
Reply
#38
Thanks for this I am interested in D-link and am looking into it.
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  {SECRET} DATABASE OF EXPLOITS lulagain 440 27,514 Yesterday, 09:44 PM
Last Post: caribou
  Dokan Pro Unauthenticated SQL Injection POC | CVSS 10 Loki 44 3,977 Yesterday, 04:45 PM
Last Post: Insulina
  [POC] Google OAuth "MultiLogin" endpoint 0-day Farfallaiero 108 14,039 May 06, 2026, 05:42 PM
Last Post: nobcoderfck
  Ban Any Discord Exploit phineasfisherman 7 526 May 06, 2026, 10:16 AM
Last Post: sniperx86
  New Zer0 Day Wordpress A3g00n 81 3,533 May 05, 2026, 03:06 AM
Last Post: DirtyEra

Forum Jump:


 Users browsing this forum: 1 Guest(s)