CVE-2018-13787: Undefined Security Weakness

Certain Supermicro X11S, X10, X9, X8SI, K1SP, C9X299, C7, B1, A2, and A1 products have a misconfigured Descriptor Region, allowing OS programs to modify firmware...

Default credentials

D-Link DIR-601 A1 1.02NA devices do not require the old password for a password change, which occurs in cleartext...

CVE-2018-10641: Improper Authentication

D-Link DIR-601 A1 1.02NA devices do not require the old password for a password change, which occurs in cleartext...

CVE-2016-5681

Stack-based buffer overflow in dws/api/Login on D-Link DIR-850L B1 2.07 before 2.07WWB05, DIR-817 Ax, DIR-818LW Bx before 2.05b03beta03, DIR-822 C1 3.01 before 3.01WWb02, DIR-823 A1 1.00 before 1.00WWb05, DIR-895L A1 1.11 before 1.11WWb04, DIR-890L A1 1.09 before 1.09b14, DIR-885L A1 1.11 before...

CVE-2016-5681: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in dws/api/Login on D-Link DIR-850L B1 2.07 before 2.07WWB05, DIR-817 Ax, DIR-818LW Bx before 2.05b03beta03, DIR-822 C1 3.01 before 3.01WWb02, DIR-823 A1 1.00 before 1.00WWb05, DIR-895L A1 1.11 before 1.11WWb04, DIR-890L A1 1.09 before 1.09b14, DIR-885L A1 1.11 before...

a1-centar.hr XSS vulnerability

Vulnerable URL: http://www.a1-centar.hr/index.php?q=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check a1-centar.hr SSL...

German A1 for Beginners Free - Customized SSL, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application German A1 for Beginners Free published at the 'play' market has multiple vulnerabilities...

shop.a1.net XSS vulnerability

Vulnerable URL: http://shop.a1.net/is-bin/INTERSHOP.enfinity/WFS/Mobilkom-A1Shop-Site/deAT/-/EUR/mkBrowseCatalog-StartMyNext?CategoryName=alle-handys=NE952168%27-alert%28'XSSPOSED'%29-%27 Details: Description| Value ---|--- Patched:| Yes, at 11.03.2016 Latest check for patch:| 11.03.2016 01:23 GM...

DIR-514 A1 Backdoor y path equivalence

DIR-514 A1 tiene el telnetd listening en el puerto 2300 y los credenciales son "root:amittima". Supongo que los developers no querian soldar los pads microscopicos de la UART... Con un poquito de google encontre que otros dispositivos con chipsets Ralink tienen el mismo passwd... Por otra parte e...

Fluorite A1 Internet Alarm box crack details analysis-vulnerability warning-the black bar safety net

Fluorite is Hikvision's safety of life service brand,for the home and small business users with Visual security as the Foundation of caring, communication, sharing service. Fluorite business covers the fluorite cloud video APP, fluorite cloud video services platform, a series of Internet...

WordPress Webdorado Spider Event Calendar 1.4.9 - SQL Injection Vulnerability

Exploit for php platform in category web applications . Exploit Title: WordPress: Webdorado Spider Event Calendar = 1.4.9 SQL Injection Date: 2015-02-12 Exploit Author: Mateusz Lach Vendor Homepage: https://www.facebook.com/WebDorado or http://www.webdorado.com Software Link:...

CVE-2014-6433: Improper Control of Generation of Code

gpExec in GoPro HERO 3+ allows remote attackers to execute arbitrary files via a the 1 a1 or 2 a2 parameter in a start action...

CVE-2014-6434: Improper Neutralization of Special Elements used in an OS Command

gpExec in GoPro HERO 3+ allows remote attackers to execute arbitrary commands via a the 1 a1 or 2 a2 parameter in a restart action...

PT-2014-7218

Name of the Vulnerable Software and Affected Versions GoPro HERO 3+ affected versions not specified Description The issue allows remote attackers to execute arbitrary files. This is achieved via the a1 or a2 parameter in a start action. No information is provided about the estimated number of...

PT-2014-7219

Name of the Vulnerable Software and Affected Versions GoPro HERO 3+ affected versions not specified Description The issue allows remote attackers to execute arbitrary commands. This can be achieved via the a1 or a2 parameter in a restart action. Recommendations At the moment, there is no...

PT-2014-3413 · D Link · D-Link Dir-645 Router

Name of the Vulnerable Software and Affected Versions: D-Link DIR-645 Router Rev. A1 with firmware prior to 1.04B11 Description: The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the deviceid parameter to the "parentalcontrols/bind.php" endpoint, t...

CVE-2013-7389: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in D-Link DIR-645 Router Rev. A1 with firmware before 1.04B11 allow remote attackers to inject arbitrary web script or HTML via the 1 deviceid parameter to parentalcontrols/bind.php, 2 RESULT parameter to info.php, or 3 receiver parameter to...

robin twombly a1 http server 1.0 - Directory Traversal vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2436/info It is possible for a remote user to gain read access to directories and files outside the web root. Requesting a specially crafted URL composed of '../' sequences will disclose an arbitrary directory, appending...

CVE-2013-7320

CVE-2013-7320 describes a CSRF vulnerability in the D-Link DAP-2253 Access Point (Rev. A1) with firmware before 1.30. The issue allows remote attackers to hijack the administrator’s authenticated session and perform configuration changes via unspecified vectors. Affected product: DAP-2253 Access ...

CVE-2013-7321: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in D-Link DAP-2253 Access Point Rev. A1 with firmware before 1.30 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...