Unpatched D-Link DGS-3130 switches leak configs and can be reset over DDP - no fix yet. https://intel.threadlinqs.com/threat/TL-2026-5414?utm_source=bluesky #ThreatIntel #DLink
November 6, 2026 at 12:55 PM
Unpatched D-Link DGS-3130 switches leak configs and can be reset over DDP - no fix yet. https://intel.threadlinqs.com/threat/TL-2026-5414?utm_source=bluesky #ThreatIntel #DLink
都弄好了... 然後發現因為 OpenWrt 雖然是 musl，但跑的是 dropbear 所以沒受到這次的影響，但至少升級到最新版了 :o
插曲是 Dlink 的 M32 用 sysupgrade image 升級都會失敗，後來是用 recovery image 的方式直接上到最新版...
插曲是 Dlink 的 M32 用 sysupgrade image 升級都會失敗，後來是用 recovery image 的方式直接上到最新版...
Gea-Suan Lin (@gslin@abpe.org)
都弄好了... 然後發現因為 OpenWrt 雖然是 musl，但跑的是 dropbear 所以沒受到這次的影響，但至少升級到最新版了 :o
插曲是 Dlink 的 M32 用 sysupgrade image 升級都會失敗，後來是用 recovery image 的方式直接上到最新版...
abpe.org
November 8, 2026 at 4:48 AM
都弄好了... 然後發現因為 OpenWrt 雖然是 musl，但跑的是 dropbear 所以沒受到這次的影響，但至少升級到最新版了 :o
插曲是 Dlink 的 M32 用 sysupgrade image 升級都會失敗，後來是用 recovery image 的方式直接上到最新版...
插曲是 Dlink 的 M32 用 sysupgrade image 升級都會失敗，後來是用 recovery image 的方式直接上到最新版...
#dlink warns of multiple zero-days in #dgs3130 Series switches
https://www.bleepingcomputer.com/news/security/d-link-warns-of-multiple-zero-days-in-dgs-3130-series-switches/
#router #cybersecurity #networking
https://www.bleepingcomputer.com/news/security/d-link-warns-of-multiple-zero-days-in-dgs-3130-series-switches/
#router #cybersecurity #networking
D-Link warns of multiple zero-days in DGS-3130 Series switches (BleepingComputer)
D-Link shared mitigation measures for multiple unpatched security flaws affecting DGS-3130 series managed Gigabit stackable switches.
www.bleepingcomputer.com
November 7, 2026 at 8:30 PM
#dlink warns of multiple zero-days in #dgs3130 Series switches
https://www.bleepingcomputer.com/news/security/d-link-warns-of-multiple-zero-days-in-dgs-3130-series-switches/
#router #cybersecurity #networking
https://www.bleepingcomputer.com/news/security/d-link-warns-of-multiple-zero-days-in-dgs-3130-series-switches/
#router #cybersecurity #networking
D-Link warns of multiple zero-days in DGS-3130 Series switches reconbee.com/d-link-warns...
#Dlink #zerodayexploit #cyberattack
#Dlink #zerodayexploit #cyberattack
D-Link warns of multiple zero-days in DGS-3130 Series switches
other D-Link switching platforms and firmware security features read more about D-Link warns of multiple zero-days in DGS-3130 Series switches
reconbee.com
November 6, 2026 at 2:14 PM
D-Link warns of multiple zero-days in DGS-3130 Series switches reconbee.com/d-link-warns...
#Dlink #zerodayexploit #cyberattack
#Dlink #zerodayexploit #cyberattack
Congratulations to Steven D who has been selected as the winner of our On-The-Go Giveaway. Follow D-Link for NEW product announcements, promotional sales and contest giveaways. Thanks to all that entered. #dlink #winner #giveaway #PowerBank #USBCHub #wifi7adapter
November 4, 2026 at 8:17 PM
Congratulations to Steven D who has been selected as the winner of our On-The-Go Giveaway. Follow D-Link for NEW product announcements, promotional sales and contest giveaways. Thanks to all that entered. #dlink #winner #giveaway #PowerBank #USBCHub #wifi7adapter
［注意］D-Link スイッチ DGS-3130 に修正のない欠陥 回避策のみ
D-Link の管理型スイッチ DGS-3130-30TS（H/W B1、ファームウェア 2.00.B014〜2.04.001）に、DDP や SSH の欠陥がある。修正版はまだ無く、D-Link は DDP を止めて管理のアクセスを絞るよう勧めている。
https://chuiho.net/posts/dlink-dgs-3130-unpatched-flaws/ #DLink #DGS3130
D-Link の管理型スイッチ DGS-3130-30TS（H/W B1、ファームウェア 2.00.B014〜2.04.001）に、DDP や SSH の欠陥がある。修正版はまだ無く、D-Link は DDP を止めて管理のアクセスを絞るよう勧めている。
https://chuiho.net/posts/dlink-dgs-3130-unpatched-flaws/ #DLink #DGS3130
D-Link スイッチ DGS-3130 に修正のない欠陥 回避策のみ
D-Link の管理型スイッチ DGS-3130-30TS（H/W B1、ファームウェア 2.00.B014〜2.04.001）に、DDP や SSH の欠陥がある。修正版はまだ無く、D-Link は DDP を止めて管理のアクセスを絞るよう勧めている。
chuiho.net
November 6, 2026 at 3:13 PM
［注意］D-Link スイッチ DGS-3130 に修正のない欠陥 回避策のみ
D-Link の管理型スイッチ DGS-3130-30TS（H/W B1、ファームウェア 2.00.B014〜2.04.001）に、DDP や SSH の欠陥がある。修正版はまだ無く、D-Link は DDP を止めて管理のアクセスを絞るよう勧めている。
https://chuiho.net/posts/dlink-dgs-3130-unpatched-flaws/ #DLink #DGS3130
D-Link の管理型スイッチ DGS-3130-30TS（H/W B1、ファームウェア 2.00.B014〜2.04.001）に、DDP や SSH の欠陥がある。修正版はまだ無く、D-Link は DDP を止めて管理のアクセスを絞るよう勧めている。
https://chuiho.net/posts/dlink-dgs-3130-unpatched-flaws/ #DLink #DGS3130
Beware for a scare!
Dlink: puddingpudd.com/Puddinacious...
Dlink: puddingpudd.com/Puddinacious...
Pudding's Cove: Blog
Page with lots of words!
puddingpudd.com
November 2, 2026 at 1:11 AM
Beware for a scare!
Dlink: puddingpudd.com/Puddinacious...
Dlink: puddingpudd.com/Puddinacious...
This inadvertently reminded me of when DJ Fett Burger and Jayda G were releasing records with the Kool-AId Man on them. Classic tracks though
www.youtube.com/watch?v=7YAI...
www.youtube.com/watch?v=7YAI...
DJ Fett Burger & Jayda G - Wind Waker (Club House Mix)
YouTube video by dlink
www.youtube.com
October 27, 2026 at 11:24 PM
This inadvertently reminded me of when DJ Fett Burger and Jayda G were releasing records with the Kool-AId Man on them. Classic tracks though
www.youtube.com/watch?v=7YAI...
www.youtube.com/watch?v=7YAI...
📌 CVE-2024-28729 - An issue in DLink DWR 2000M 5G CPE With Wifi 6 Ax1800 and Dlink DWR 5G CPE DWR-2000M_1.34ME allows a local attacker to execute arbitrary code via a cr... https://www.cyberhub.blog/cves/CVE-2024-28729
CVE-2024-28729
An issue in DLink DWR 2000M 5G CPE With Wifi 6 Ax1800 and Dlink DWR 5G CPE DWR-2000M_1.34ME allows a local attacker to execute arbitrary code via a crafted request.
www.cyberhub.blog
October 27, 2026 at 2:37 PM
📌 CVE-2024-28729 - An issue in DLink DWR 2000M 5G CPE With Wifi 6 Ax1800 and Dlink DWR 5G CPE DWR-2000M_1.34ME allows a local attacker to execute arbitrary code via a cr... https://www.cyberhub.blog/cves/CVE-2024-28729
CVE-2026-93958: OS command injection in D-Link R95 BE9500 (DHMAPI, NTPServer arg). CVSS 9.1, remote, public exploit, no patch yet. Update immediately. #CVE #infosec #DLink https://www.valtersit.com/cve/CVE-2026-93958/
October 26, 2026 at 9:10 PM
CVE-2026-93958: OS command injection in D-Link R95 BE9500 (DHMAPI, NTPServer arg). CVSS 9.1, remote, public exploit, no patch yet. Update immediately. #CVE #infosec #DLink https://www.valtersit.com/cve/CVE-2026-93958/
substack.com/@mrricknew/n... The language in this even with minor grammatcal errors says what need be said. The video is of a genuine entity. This is not a human soul. This is for those I criticize who think violence will silence truth. You could just end up provoking something out of your league.
Ricky New (@mrricknew)
The date on the video is accurate. Lots of videos got redated after moving them from phone to phone. This was on my laptop being viewed remotely. Id invested in a couple Dlink cameras to mount in the ...
substack.com
October 27, 2026 at 3:10 PM
substack.com/@mrricknew/n... The language in this even with minor grammatcal errors says what need be said. The video is of a genuine entity. This is not a human soul. This is for those I criticize who think violence will silence truth. You could just end up provoking something out of your league.
Welcome to week 2 of PHP2Shell-mania! I wrote up a quick summary of what we know and what to prioritize:
substack.com/@adriansanab...
substack.com/@adriansanab...
Adrian Sanabria (@adriansanabria)
Welcome to week two of being inundated with PHP2Shell information! Let's level set on where we are and what we know so far.
1. We know PHP is EVERYWHERE. Your 12 year old DLink router uses it. So do ...
substack.com
October 26, 2026 at 3:50 PM
Welcome to week 2 of PHP2Shell-mania! I wrote up a quick summary of what we know and what to prioritize:
substack.com/@adriansanab...
substack.com/@adriansanab...
This looks interesting. I've got an old DNS-320L with two 2TB hard drives installed. Might flash it with this firmware to see if it is any better than the default which is now no longer supported by DLINK.
github.com/coolshou/Alt-F
github.com/coolshou/Alt-F
GitHub - coolshou/Alt-F: Alt-F provides a free and open source alternative firmware for the DLINK DNS-320/320L/321/323/325/327L and DNR-322L.
Alt-F provides a free and open source alternative firmware for the DLINK DNS-320/320L/321/323/325/327L and DNR-322L. - coolshou/Alt-F
github.com
October 23, 2026 at 1:39 PM
This looks interesting. I've got an old DNS-320L with two 2TB hard drives installed. Might flash it with this firmware to see if it is any better than the default which is now no longer supported by DLINK.
github.com/coolshou/Alt-F
github.com/coolshou/Alt-F
CVE-2026-94089: critical stack buffer overflow in D-Link DIR-868L auth handler, remote, public exploit, CVSS 10, no patch yet. Stop exposing the web UI and update now: #CVE #infosec #DLink https://www.valtersit.com/cve/CVE-2026-94089/
October 20, 2026 at 1:20 AM
CVE-2026-94089: critical stack buffer overflow in D-Link DIR-868L auth handler, remote, public exploit, CVSS 10, no patch yet. Stop exposing the web UI and update now: #CVE #infosec #DLink https://www.valtersit.com/cve/CVE-2026-94089/
CVE-2026-94036: D-Link DIR-X1860 access control flaw (CVSS 8.8), public exploit out. No patch yet - restrict local access and watch for firmware. #CVE #infosec #DLink https://www.valtersit.com/cve/CVE-2026-94036/
October 19, 2026 at 8:30 AM
CVE-2026-94036: D-Link DIR-X1860 access control flaw (CVSS 8.8), public exploit out. No patch yet - restrict local access and watch for firmware. #CVE #infosec #DLink https://www.valtersit.com/cve/CVE-2026-94036/
D-Link and Ubiquiti Devices Targeted in a Global Proxyjacking Campaign
Researchers report that compromised devices across 34 countries were being used to resell internet bandwidth.
#CyberSecurity #DLink #Ubiquiti #IoTSecurity #CyberThreats
Researchers report that compromised devices across 34 countries were being used to resell internet bandwidth.
#CyberSecurity #DLink #Ubiquiti #IoTSecurity #CyberThreats
October 17, 2026 at 11:41 AM
D-Link and Ubiquiti Devices Targeted in a Global Proxyjacking Campaign
Researchers report that compromised devices across 34 countries were being used to resell internet bandwidth.
#CyberSecurity #DLink #Ubiquiti #IoTSecurity #CyberThreats
Researchers report that compromised devices across 34 countries were being used to resell internet bandwidth.
#CyberSecurity #DLink #Ubiquiti #IoTSecurity #CyberThreats
Eine weltweite Kampagne kapert Netzwerkgeräte von #DLink und Co. Kriminelle nutzen die Geräte, um Proxy-Dienste zu vermieten und Geld zu verdienen.
Geld verdienen mit fremden Geräten: Angreifer kapern D-Link & Co.
winfuture.de
October 16, 2026 at 3:41 PM
Eine weltweite Kampagne kapert Netzwerkgeräte von #DLink und Co. Kriminelle nutzen die Geräte, um Proxy-Dienste zu vermieten und Geld zu verdienen.
Hackers hijack #dlink, #ubiquiti devices to resell your stolen bandwidth
https://www.bleepingcomputer.com/news/security/hackers-hijack-d-link-ubiquiti-devices-to-resell-your-stolen-bandwidth/
#cybersecurity #proxyjacking
https://www.bleepingcomputer.com/news/security/hackers-hijack-d-link-ubiquiti-devices-to-resell-your-stolen-bandwidth/
#cybersecurity #proxyjacking
Hackers hijack D-Link, Ubiquiti devices to resell your stolen bandwidth
A proxyjacking campaign has impacted devices in 34 countries, monetizing victims' internet connections through a commercial residential proxy network.
www.bleepingcomputer.com
October 16, 2026 at 9:00 PM
Hackers hijack #dlink, #ubiquiti devices to resell your stolen bandwidth
https://www.bleepingcomputer.com/news/security/hackers-hijack-d-link-ubiquiti-devices-to-resell-your-stolen-bandwidth/
#cybersecurity #proxyjacking
https://www.bleepingcomputer.com/news/security/hackers-hijack-d-link-ubiquiti-devices-to-resell-your-stolen-bandwidth/
#cybersecurity #proxyjacking
あなたをパンで例えると診断の結果は...
【クリームパンタイプ】でした
🥐よく昼寝をしていそう
🥐細かいことはあまり気にしない
🥐自分の生き方をしっかり持ってる
#あなたをパンで例えると診断 #16TEST
16test.uranaino.net/dlink/pan01
【クリームパンタイプ】でした
🥐よく昼寝をしていそう
🥐細かいことはあまり気にしない
🥐自分の生き方をしっかり持ってる
#あなたをパンで例えると診断 #16TEST
16test.uranaino.net/dlink/pan01
クリームパン | あなたをパンで例えると診断
あなたは、クリームパンのように、いつもブレない強い信念を持った性格であることがわかりました。クリームパンは誰もが一度は目にしたことのある人気の菓子パンであり、子供から大人まで非常に人気の高いパンです。シュークリームのようなデザート気分を味わうことのできるパンで、美味しいですが食べると何故か眠くなりがちです。
16test.uranaino.net
October 17, 2026 at 1:54 PM
あなたをパンで例えると診断の結果は...
【クリームパンタイプ】でした
🥐よく昼寝をしていそう
🥐細かいことはあまり気にしない
🥐自分の生き方をしっかり持ってる
#あなたをパンで例えると診断 #16TEST
16test.uranaino.net/dlink/pan01
【クリームパンタイプ】でした
🥐よく昼寝をしていそう
🥐細かいことはあまり気にしない
🥐自分の生き方をしっかり持ってる
#あなたをパンで例えると診断 #16TEST
16test.uranaino.net/dlink/pan01
Hackers hijack D-Link, Ubiquiti devices to resell your stolen bandwidth
A proxyjacking campaign has impacted D-Link and Ubiquiti devices in 34 countries, monetizing victims' internet connections through a commercial res... https://threatintel.cc/2026/10/16/hackers-hijack-dlink-ubiquiti-devices.html
A proxyjacking campaign has impacted D-Link and Ubiquiti devices in 34 countries, monetizing victims' internet connections through a commercial res... https://threatintel.cc/2026/10/16/hackers-hijack-dlink-ubiquiti-devices.html
October 16, 2026 at 9:02 AM
Hackers hijack D-Link, Ubiquiti devices to resell your stolen bandwidth
A proxyjacking campaign has impacted D-Link and Ubiquiti devices in 34 countries, monetizing victims' internet connections through a commercial res... https://threatintel.cc/2026/10/16/hackers-hijack-dlink-ubiquiti-devices.html
A proxyjacking campaign has impacted D-Link and Ubiquiti devices in 34 countries, monetizing victims' internet connections through a commercial res... https://threatintel.cc/2026/10/16/hackers-hijack-dlink-ubiquiti-devices.html
CVE-2026-108971 - dcs-930l
The D-Link DCS-930L camera’s emergency recovery feature can be fooled into accepting altered firmware because it does not correctly check the digital signature. An attacker on the…
Too many irrelevant or confusing CVEs? Use stackflag.com
#dcs930l #dlink #CVE #infosec
The D-Link DCS-930L camera’s emergency recovery feature can be fooled into accepting altered firmware because it does not correctly check the digital signature. An attacker on the…
Too many irrelevant or confusing CVEs? Use stackflag.com
#dcs930l #dlink #CVE #infosec
CVE-2026-108971: D-Link DCS-930L can be tricked into accepting fake firmware
The D-Link DCS-930L camera’s emergency recovery feature can be fooled into accepting altered firmware because it does not correctly check the digital.
stackflag.com
October 13, 2026 at 6:20 AM
CVE-2026-108971 - dcs-930l
The D-Link DCS-930L camera’s emergency recovery feature can be fooled into accepting altered firmware because it does not correctly check the digital signature. An attacker on the…
Too many irrelevant or confusing CVEs? Use stackflag.com
#dcs930l #dlink #CVE #infosec
The D-Link DCS-930L camera’s emergency recovery feature can be fooled into accepting altered firmware because it does not correctly check the digital signature. An attacker on the…
Too many irrelevant or confusing CVEs? Use stackflag.com
#dcs930l #dlink #CVE #infosec
ClingSTUN is a Linux backdoor that abuses STUN servers to turn infected devices into proxies, self-propagate via dozens of flaws, and run remote commands across multiple architectures. #ClingSTUN #STUN #FortiGuard
Linux Backdoor Abuses STUN Protocol, Exploits Dozens Of Flaws
FortiGuard Labs uncovered ClingSTUN, a Linux backdoor that turns infected devices into STUN-based proxies and includes exploits for self-propagation across many vulnerable products. It also uses persistence, architecture-specific payloads, and remote command capabilities while abusing legitimate public STUN servers for NAT connectivity. #ClingSTUN #FortiGuardLabs #STUN #Avtech #EnGenius #DLink #Ivanti #TPLink...
www.hendryadrian.com
October 5, 2026 at 6:45 PM
ClingSTUN is a Linux backdoor that abuses STUN servers to turn infected devices into proxies, self-propagate via dozens of flaws, and run remote commands across multiple architectures. #ClingSTUN #STUN #FortiGuard
Lol. You know what - i am an idiot! I had a DLink adaptor that looked a lot like it and I guess my brain just turned i into Nintendo over time in my memory - it was this thing:
September 28, 2026 at 4:16 PM
Lol. You know what - i am an idiot! I had a DLink adaptor that looked a lot like it and I guess my brain just turned i into Nintendo over time in my memory - it was this thing: