D-Link DIR-600M Wireless Cross Site Scripting

Exploit Title: D-Link DIR-600M Wireless - Persistent Cross Site Scripting Date: 11.02.2018 Vendor Homepage: http://www.dlink.co.in Hardware Link: http://www.dlink.co.in/products/?pid=DIR-600M Category: Hardware Exploit Author: Prasenjit Kanti Paul Web: http://hack2rule.wordpress.com/ Hardware...

D-Link DIR-600M Wireless - Cross-Site Scripting Vulnerability

Exploit for hardware platform in category web applications Exploit Title: D-Link DIR-600M Wireless - Persistent Cross Site Scripting Vendor Homepage: http://www.dlink.co.in Hardware Link: http://www.dlink.co.in/products/?pid=DIR-600M Category: Hardware Exploit Author: Prasenjit Kanti Paul Web:...

D-Link DIR-600M Wireless - Cross-Site Scripting

D-Link DIR-600M Wireless - Cross-Site Scripting Exploit Title: D-Link DIR-600M Wireless - Persistent Cross Site Scripting Date: 11.02.2018 Vendor Homepage: http://www.dlink.co.in Hardware Link: http://www.dlink.co.in/products/?pid=DIR-600M Category: Hardware Exploit Author: Prasenjit Kanti Paul...

D-Link DIR-600M Wireless - Cross-Site Scripting

Exploit Title: D-Link DIR-600M Wireless - Persistent Cross Site Scripting Date: 11.02.2018 Vendor Homepage: http://www.dlink.co.in Hardware Link: http://www.dlink.co.in/products/?pid=DIR-600M Category: Hardware Exploit Author: Prasenjit Kanti Paul Web: http://hack2rule.wordpress.com/ Hardware...

CVE-2018-6936

Cross Site Scripting XSS exists on the D-Link DIR-600M C1 3.01 via the SSID or the name of a user account...

CVE-2018-6936

CVE-2018-6936 affects D-Link DIR-600M C1 firmware 3.01. A cross-site scripting vulnerability exists in the router’s admin panel, allowing injection via the SSID or the name of a user account due to inadequate input filtering. Exploitation is demonstrated in public writeups (e.g., stored XSS via U...

CVE-2016-6936

Adobe AIR SDK & Compiler for Windows prior to 23.0.0.257 does not support secure Android runtime analytics transport, enabling potential information disclosure over the analytics channel. Impact is information exposure via network access. Remediation: update to Adobe AIR SDK & Compiler 23.0.0.257...

CVE-2016-6936

creationtimestamp| type| source ---|---|--- 2016-09-15 20:29:14+00:00| seen| https://t.me/FullDisclosure/68...

CVE-2014-6936

The CVE-2014-6936 entry concerns the IDS 2013 Android application (version 1.21) that fails to verify X.509 certificates from SSL servers, enabling potential MITM attacks to spoof servers and exfiltrate data. The vulnerability is described across multiple sources (NVD/NVD-derived records) as a ce...

CVE-2013-6936

CVE-2013-6936 describes multiple SQL injection vulnerabilities in the Ajaxfs plugin (MyBB), specifically in ajaxfs.php via the tooltip and usertooltip parameters in the Ajax forum stat plugin 2.0. Remote attackers could execute arbitrary SQL commands. OpenVAS notes a WillNotFix remediation.

CVE-2013-6936

creationtimestamp| type| source ---|---|--- 2013-11-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/29797...

CVE-2008-6937

Argument injection vulnerability in Exodus 0.10 allows remote attackers to inject arbitrary command line arguments, overwrite arbitrary files, and cause a denial of service via encoded spaces in an xmpp:// URI, a different vector than CVE-2008-6935 and CVE-2008-6936. NOTE: the provenance of this...

CVE-2008-6936

CVE-2008-6936 involves Exodus 0.10 with an argument injection flaw that lets remote attackers inject arbitrary command line arguments, overwrite arbitrary files, and cause a denial of service via encoded spaces in a pres:// URI (vector variants include im:// and pres://; xmpp:// for related CVEs)...

CVE-2008-4883

creationtimestamp| type| source ---|---|--- 2008-11-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6936 2008-11-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6937...

CVE-2008-4884

creationtimestamp| type| source ---|---|--- 2008-11-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6936 2008-11-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6948...

CVE-2006-6936

The CVE-2006-6936 entry describes a cross-site scripting (XSS) vulnerability in Xtreme ASP Photo Gallery. The vulnerability is triggered by user-supplied input in two vectors: (1) the catname parameter to displaypic.asp and (2) the search field, enabling remote attackers to inject arbitrary HTML/...