655 matches found
CVE-2020-25478--ASUS-RT-AC87U-TFTP-is-vulnerable-to-Denial-of-Service-DoS-attack
ASUS-RT-AC87U-TFTP-is-vulnerable-to-Denial-of-Service-DoS-attack CVE-2020-25478 - ASUS RT-AC87U TFTP is vulnerable to Denial of ServiceDoS attack 1. NAME OF AFFECTED PRODUCTS AND VERSIONS ASUS RT-AC87U 3.0.0.4.38251640 2. PROBLEM TYPE Its primarily related to CWE-20, TFTP service running in ASUS...
CVE-2023-35086-POC
CVE-2023-35086-POC July 25 2023, Altin tin-z, github.com/tin-z Brief description ASUS RT-AX56U V2 & RT-AC86U router firmwares below or equal to version 3.0.0.4.38650460 and 3.0.0.438651529 respectively have a format string vulnerability in the detwan.cgi function of the httpd service that can cau...
CVE-2018-14714-POC
CVE-2018-14714-POC Apr 25 2020, Altin Thartori, github.com/tin-z Vulnerability Details System command injection in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to execute system commands via the "loadscript" URL parameter References For CVE-2018-14714 :...
CVE-2020-36109-POC
CVE-2020-36109-POC Feb 13 2021, Altin Thartori, github.com/tin-z Vulnerability details ASUS RT-AX86U router firmware below version under 9.0.0.4386 has a buffer overflow in the blockingrequest.cgi function of the httpd module that can cause code execution when an attacker constructs malicious dat...
ASUS RT-AX55 3.0.0.4.386.51598 Command Injection
ASUS RT-AX55 firmware version 3.0.0.4.386.51598 contains an authenticated command injection vulnerability in its token-refresh module. The included proof of concept submits a benign marker payload. https://packetstorm.news/download/238681...
ASUS RT-AX55 3.0.0.4.386.51598 Command Injection
ASUS RT-AX55 firmware version 3.0.0.4.386.51598 contains an authenticated OS command injection vulnerability in the qosbwrulelist parameter of /startapply.htm. A proof of concept and local laboratory model are included. https://packetstorm.news/download/238691...
Exploit for OS Command Injection in Asus Rt-Ax55_Firmware
CVE-2023-39780 — ASUS RT-AX55: command injection в qosbwrul...
Exploit for OS Command Injection in Asus Rt-Ax55_Firmware
CVE-2023-41348 — ASUS RT-AX55 — инъекция в code-auth Лаборато...
Exploit for OS Command Injection in Asus Rt-Ax55_Firmware
CVE-2023-41346 — ASUS RT-AX55 — инъекция в token-refresh Лабо...
CVE-2026-19396
A predictable seed in the pseudo-random number generator PRNG in the IFTTT pairing token generation of the ASUS RT-BE57 router allows an unauthenticated nearby user to derive the pairing token and read or modify router settings via observed values from an administrator-initiated IFTTT pairing...
EUVD-2026-94158
A predictable seed in the pseudo-random number generator PRNG in the IFTTT pairing token generation of the ASUS RT-BE57 router allows an unauthenticated nearby user to derive the pairing token and read or modify router settings via observed values from an administrator-initiated IFTTT pairing...
CVE-2026-19396
A predictable seed in the pseudo-random number generator PRNG in the IFTTT pairing token generation of the ASUS RT-BE57 router allows an unauthenticated nearby user to derive the pairing token and read or modify router settings via observed values from an administrator-initiated IFTTT pairing...
CVE-2026-19396
A predictable seed in the pseudo-random number generator PRNG in the IFTTT pairing token generation of the ASUS RT-BE57 router allows an unauthenticated nearby user to derive the pairing token and read or modify router settings via observed values from an administrator-initiated IFTTT pairing...
CVE-2026-19396
The ASUS RT-BE57 router is vulnerable to an issue where a predictable seed in the pseudo-random number generator (PRNG) is used during IFTTT pairing token generation . This flaw allows an unauthenticated nearby user to derive the pairing token by observing values during an administrator-initiated...
CVE-2026-19396: Predictable Seed in Pseudo-Random Number Generator (PRNG)
A predictable seed in the pseudo-random number generator PRNG in the IFTTT pairing token generation of the ASUS RT-BE57 router allows an unauthenticated nearby user to derive the pairing token and read or modify router settings via observed values from an administrator-initiated IFTTT pairing...
PT-2026-107383
A predictable seed in the pseudo-random number generator PRNG in the IFTTT pairing token generation of the ASUS RT-BE57 router allows an unauthenticated nearby user to derive the pairing token and read or modify router settings via observed values from an administrator-initiated IFTTT pairing...
Asus RT-N16 Password Disclosure
Module exploits password disclosure vulnerability in Asus RT-N16 devices that allows to fetch credentials for the device. !/usr/bin/env python3 -- coding: utf-8 -- """Asus RT-N16 Password Disclosure""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class...
ASUS RT - AICloud smb Traversal Detection (CVE-2013-4937)
Detects CVE-2013-4937 by requesting /smb/tmp/etc/shadow and matching passwd-style entries. !/usr/bin/env python3 -- coding: utf-8 -- """ASUS RT AICloud smb path traversal CVE-2013-4937.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...
CVE-2023-29772
A Cross-site scripting XSS vulnerability in the System Log/General Log page of the administrator web UI in ASUS RT-AC51U wireless router firmware version up to and including 3.0.0.4.380.8591 allows remote attackers to inject arbitrary web script or HTML via a malicious network request...