topchocs.com XSS vulnerability

Open Bug Bounty ID: OBB-579548 Description| Value ---|--- Affected Website:| topchocs.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

PT-2017-3654

Name of the Vulnerable Software and Affected Versions: ASUS RT-AC66U versions prior to 3.0.0.4.384 10007 ASUS RT-AC68U versions prior to 3.0.0.4.384 10007 ASUS RT-AC86U versions prior to 3.0.0.4.384 10007 ASUS RT-AC88U versions prior to 3.0.0.4.384 10007 ASUS RT-AC1900 versions prior to 3.0.0.4.3...

CVE-2017-11345

Stack buffer overflow in networkmap in Asuswrt-Merlin firmware for ASUS devices and ASUS firmware for ASUS RT-AC5300, RTAC1900P, RT-AC68U, RT-AC68P, RT-AC88U, RT-AC66U, RT-AC66UB1, RT-AC58U, RT-AC56U, RT-AC55U, RT-AC52U, RT-AC51U, RT-N18U, RT-N66U, RT-N56U, RT-AC3200, RT-AC3100, RTAC1200GU,...

Information disclosure

ASUS RT-AC and RT-N devices with firmware before 3.0.0.4.380.7378 allow JSONP Information Disclosure such as a network map...

CVE-2017-8877: Exposure of Sensitive Information to an Unauthorized Actor

ASUS RT-AC and RT-N devices with firmware through 3.0.0.4.380.7378 allow JSONP Information Disclosure such as the SSID...

PT-2017-18600

Name of the Vulnerable Software and Affected Versions ASUS RT-AC and RT-N devices with firmware prior to 3.0.0.4.380.7378 Description The issue allows remote authenticated users to discover the Wi-Fi password via the WPS info.xml file. Recommendations For ASUS RT-AC and RT-N devices with firmware...

PT-2017-16739

Name of the Vulnerable Software and Affected Versions ASUS RT-AC and RT-N devices with firmware prior to 3.0.0.4.380.7378 Description The issue affects the login page and save settings functionality, allowing for CSRF attacks. Recommendations For ASUS RT-AC and RT-N devices with firmware prior to...

CVE-2017-5891: Cross-Site Request Forgery (CSRF)

ASUS RT-AC and RT-N devices with firmware before 3.0.0.4.380.7378 have Login Page CSRF and Save Settings CSRF...

CVE-2017-5892: Exposure of Sensitive Information to an Unauthorized Actor

ASUS RT-AC and RT-N devices with firmware before 3.0.0.4.380.7378 allow JSONP Information Disclosure such as a network map...

PT-2017-18599

Name of the Vulnerable Software and Affected Versions ASUS RT-AC and RT-N devices with firmware through 3.0.0.4.380.7378 Description The issue allows for JSONP information disclosure, including sensitive details such as the SSID. Recommendations For ASUS RT-AC and RT-N devices with firmware throu...

PT-2017-16740

Name of the Vulnerable Software and Affected Versions ASUS RT-AC and RT-N devices with firmware prior to 3.0.0.4.380.7378 Description The issue allows JSONP information disclosure, which can include details such as a network map. Recommendations For ASUS RT-AC and RT-N devices with firmware prior...

CVE-2017-8878: Exposure of Sensitive Information to an Unauthorized Actor

ASUS RT-AC and RT-N devices with firmware before 3.0.0.4.380.7378 allow remote authenticated users to discover the Wi-Fi password via WPSinfo.xml...

Buffer overflow

Buffer overflow in Broadcom ACSD allows remote attackers to execute arbitrary code via a long string to TCP port 5916. This component is used on routers of multiple vendors including ASUS RT-AC66U and TRENDnet TEW-812DRU...

CVE-2013-4659

Buffer overflow in Broadcom ACSD allows remote attackers to execute arbitrary code via a long string to TCP port 5916. This component is used on routers of multiple vendors including ASUS RT-AC66U and TRENDnet TEW-812DRU...

CVE-2013-4659

Buffer overflow in Broadcom ACSD allows remote attackers to execute arbitrary code via a long string to TCP port 5916. This component is used on routers of multiple vendors including ASUS RT-AC66U and TRENDnet TEW-812DRU...

CVE-2013-4659

CVE-2013-4659 describes a buffer overflow in Broadcom ACSD (Wireless service) that allows remote code execution via a long string sent to TCP port 5916. Affected devices include ASUS RT-AC66U and other routers using Broadcom ACSD; multiple buffer overflow vectors have been reported. Public refere...

CVE-2013-4659: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Broadcom ACSD allows remote attackers to execute arbitrary code via a long string to TCP port 5916. This component is used on routers of multiple vendors including ASUS RT-AC66U and TRENDnet TEW-812DRU...

Unspecified Denial of Service Vulnerability in ASUS RT-N56U

ASUS RT-N56U Wireless Router is a wireless router product from ASUS. A security vulnerability exists in the ASUS RT-N56U Wireless Router using firmware version 3.0.0.4.374979. An attacker can exploit the vulnerability to cause the device's WAN connection to crash, the network to become unreachabl...

Command injection

An issue was discovered on the ASUS RT-N56U Wireless Router with Firmware 3.0.0.4.374979. When executing an "nmap -O" command that specifies an IP address of an affected device, one can crash the device's WAN connection, causing disconnection from the Internet, a Denial of Service DoS. The attack...

CVE-2017-5632

An issue was discovered on the ASUS RT-N56U Wireless Router with Firmware 3.0.0.4.374979. When executing an "nmap -O" command that specifies an IP address of an affected device, one can crash the device's WAN connection, causing disconnection from the Internet, a Denial of Service DoS. The attack...