3135 matches found
ASUS RT-AC88U 注入漏洞
The ASUS RT-AC88U is a wireless router from the Chinese company ASUS. An injection vulnerability exists in ASUS RT-AC88U Download Master versions prior to 3.1.0.108, which originates from MainLogin.asp?flag=1&productname=FOOBAR&url=/downloadmaster/task.asp without filtering user input. An attacke...
ASUS RT-AC88U Information Disclosure Vulnerability
The ASUS RT-AC88U is a wireless router from Asus China. An information disclosure vulnerability exists in RT-AC88U Download Master versions prior to 3.1.0.108, which stems from allowing direct access to the downloadmaster dm app .cgi...
ASUS RT-AX86U suffers from a buffer overflow vulnerability
The ASUS RT-AX86U is a wireless router. A buffer overflow vulnerability exists in the ASUS RT-AX86U. The vulnerability stems from the RT-AX86U failing to limit the length of parameters when handling the Blockingrequest service in the httpd service, which can be exploited by an attacker to cause a...
ASUS TM-AC1900 Command Injection
A command injection vulnerability exists in ASUS TM-AC1900. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
ASUS TM-AC1900 Arbitrary Command Execution Vulnerability
ASUS RT-AC66U and others are wireless router products from ASUS. An operating system command injection vulnerability exists in MainAnalysisContent.asp in the /apply.cgi file on multiple ASUS devices. The vulnerability can be exploited to inject and execute OS commands with elevated privileges by...
ASUS TM-AC1900 Arbitrary Command Execution Exploit
This Metasploit module exploits a code execution vulnerability within the ASUS TM-AC1900 router as an authenticated user. The vulnerability is due to a failure filter out percent encoded newline characters within the HTTP argument SystemCmd when invoking /apply.cgi which bypasses the patch for...
ASUS TM-AC1900 - Arbitrary Command Execution (Metasploit)
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'ASUS TM-AC1900 - Arbitrary Command Execution', 'Description' = %q This module exploits a code execution vulnerability within the ASUS TM-AC1900...
ASUS TM-AC1900 Arbitrary Command Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'ASUS TM-AC1900 - Arbitrary Command Execution', 'Description' = %q This module exploits a code execution vulnerability within the ASUS TM-AC1900...
VulnCheck KEV: CVE-2013-5948
The Network Analysis tab MainAnalysisContent.asp in the ASUS RT-AC68U and other RT series routers with firmware before 3.0.0.4.374.5047 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the Target field destIP parameter...
Weak Password Vulnerability in Asus Computer Incorporated RT-N10E B1
Offering easy CD-ROM-free installation and stable data transfer rates, the RT-N10E B1 is a basic solution for wireless network setup. A weak password vulnerability exists in the Asus Computer Incorporated RT-N10E B1. The vulnerability can be exploited by an attacker to log into the router's backe...
Binary Vulnerability in ASUS RT-AC5300, RT-AC1200
ASUS was established in June 2000, business scope: research and development, manufacturing of notebook computers, computer motherboards, medium-sized mainframe computers, high-end personal computers, servers and so on. A binary vulnerability exists in ASUS RT-AC5300, RT-AC1200, which can be...
press.asus.com Cross Site Scripting vulnerability OBB-1370211
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Binary Vulnerability in RT-AC5300 of ASUS Computer (Shanghai) Co.
ASUS Computer Shanghai Co., Ltd. business scope: research and development, manufacture of notebook computers, computer motherboards, equipment and related software, cell phone communication systems. A binary vulnerability exists in Asus Computer Shanghai Limited RT-AC5300, which can be exploited ...
Binary Vulnerability in RT-AC5300 of ASUS Computer (Shanghai) Co.
ASUS Computer Shanghai Co., Ltd. business scope: research and development, manufacture of notebook computers, computer motherboards, equipment and related software, cell phone communication systems. A binary vulnerability exists in Asus Computer Shanghai Limited RT-AC5300, which can be exploited ...
ASUS RT-AC1900P routers firmware validation vulnerability
ASUS RT-AC1900P routers is a router device. A security vulnerability in the ASUS RT-AC1900P routers firmware upgrade processing certificate allows remote attackers to exploit the vulnerability by submitting a special request that can upgrade malicious firmware and take control of the server...
ASUS RT-AC1900P routers cross-site scripting vulnerability
ASUS RT-AC1900P routers is a router device. A cross-site scripting vulnerability exists in the ASUS RT-AC1900P routers firmware update page, which can be exploited by remote attackers to inject malicious script or HTML code that can be used to gain access to sensitive information or hijack user...
CVE-2020-15499
An issue was discovered on ASUS RT-AC1900P routers before 3.0.0.4.38520253. They allow XSS via spoofed Release Notes on the Firmware Upgrade page...
CVE-2020-15498
An issue was discovered on ASUS RT-AC1900P routers before 3.0.0.4.38520253. The router accepts an arbitrary server certificate for a firmware update. The culprit is the --no-check-certificate option passed to wget tool used to download firmware update files...
CVE-2020-15498
An issue was discovered on ASUS RT-AC1900P routers before 3.0.0.4.38520253. The router accepts an arbitrary server certificate for a firmware update. The culprit is the --no-check-certificate option passed to wget tool used to download firmware update files...