CVE-2019-19516

CVE-2019-19516 affects Intelbras WRN 150 firmware 1.0.18. The vulnerability is a CSRF flaw in the web admin UI that lets an attacker change the administrator password by forging a request to the URI goform/SysToolChangePwd with GO=system_password.asp. The issue is widely reported across sources (...

PT-2019-15863 · Intelbras · Intelbras Wrn 150

Name of the Vulnerable Software and Affected Versions: Intelbras WRN 150 version 1.0.18 Description: The issue allows for cross-site request forgery CSRF attacks, which can be used to change a password. This can be achieved by accessing the goform/SysToolChangePwd URI with GO=system password.asp...

CVE-2019-19516: Cross-Site Request Forgery (CSRF)

Intelbras WRN 150 1.0.18 devices allow CSRF via GO=systempassword.asp to the goform/SysToolChangePwd URI to change a password...

Intelbras WRN 150 Cross-Site Scripting Vulnerability

Intelbras WRN 150 is a wireless router from Intelbras Poland. A cross-site scripting vulnerability exists in Intelbras WRN 150. The vulnerability stems from the lack of proper validation of client data by the WEB application. An attacker can exploit the vulnerability to execute client-side code...

CVE-2019-17222

An issue was discovered on Intelbras WRN 150 1.0.17 devices. There is stored XSS in the Service Name tab of the WAN configuration screen, leading to a denial of service inability to change the configuration...

CVE-2019-17222

An issue was discovered on Intelbras WRN 150 1.0.17 devices. There is stored XSS in the Service Name tab of the WAN configuration screen, leading to a denial of service inability to change the configuration...

CVE-2019-17222

The CVE-2019-17222 entry concerns Intelbras WRN 150 devices (version 1.0.17) with a stored XSS in the WAN configuration Service Name tab that leads to a denial of service (inability to change the configuration). Public details from NVD provide CVSS v2 base score 4.3 (NETWORK, MEDIUM) and CVSS v3....

CVE-2019-17222

An issue was discovered on Intelbras WRN 150 1.0.17 devices. There is stored XSS in the Service Name tab of the WAN configuration screen, leading to a denial of service inability to change the configuration...

CVE-2019-17222: Improper Neutralization of Input During Web Page Generation

An issue was discovered on Intelbras WRN 150 1.0.17 devices. There is stored XSS in the Service Name tab of the WAN configuration screen, leading to a denial of service inability to change the configuration...

A Preview of Mueller's Testimony, an Electric Ford F-150, and More News

Catch up on the most important news from today in two minutes or less...

Rockwell Automation SMC Flex 150 SMC DPI to EtherNet/IP

Binary data 754510.prm...

Rockwell Automation SMC-50 150-SBxxxx DPI to DLR EtherNet/IP

Binary data 754744.prm...

Rockwell Automation Ultra5000 IPD-150 Drive 15.0kW 2098-IPD-150-DN

Binary data 753853.prm...

Rockwell Automation Ultra3000 Servo 230V 15.0kW 2098-DSD-150-DN

Binary data 753788.prm...

Rockwell Automation 150-SMC Dialog Plus SCANport to EtherNet/IP

Binary data 754574.prm...

Rockwell Automation SMC Flex 150 SMC DPI to DLR EtherNet/IP

Binary data 754737.prm...

Intex Router N-150 - Cross-Site Request Forgery (Add Admin)

Intex Router N-150 - Cross-Site Request Forgery Add Admin Exploit Title:​​ Intex Router N-150 - Cross-Site Request Forgery Add Admin Date: 2018-06-23 Exploit Author: Navina Asrani Version: N-150 CVE : N/A Category: Router Firmware 1. Description The firmware allows malicious request to be execute...

Intex Router N-150 Cross Site Request Forgery

Exploit Title:aa Intex Router N-150 - Cross-Site Request Forgery Add Admin Date: 2018-06-23 Exploit Author: Navina Asrani Version: N-150 CVE : N/A Category: Router Firmware 1. Description The firmware allows malicious request to be executed without verifying source of request. This leads to...

Intex Router N-150 - Arbitrary File Upload

Exploit Title: Intex Router N-150 - Arbitrary File Upload Date: 2018-06-23 Exploit Author: Samrat Das Version: N-150 CVE : N/A Category: Router Firmware 1. Description The firmware allows malicious files to be uploaded without any checking of extensions and allows filed to be uploaded. 2. Proof o...

Intex Router N-150 Arbitrary File Upload

Exploit Title:aa Intex Router N-150 - Arbitrary File Upload Date: 2018-06-23 Exploit Author: Samrat Das Version: N-150 CVE : N/A Category: Router Firmware 1. Description The firmware allows malicious files to be uploaded without any checking of extensions and allows filed to be uploaded. 2. Proof...