ASUS RP-AC52 Access Point Cross-Site Request Forgery Vulnerability

The ASUS RP-AC52 Access Point is a wireless access point from ASUS. A cross-site request forgery vulnerability exists in the ASUS RP-AC52 Access Point using firmware version 1.0.1.1s. A remote attacker can exploit this vulnerability to modify settings and take full control of the system...

ASUS RP-AC52 contains multiple vulnerabilities

Overview The ASUS RP-AC52 access point, firmware version 1.0.1.1s and possibly earlier, is vulnerable to cross-site request forgery and command injection. Description CWE-352:Cross-Site Request ForgeryCSRF- CVE-2016-6557 The RP-AC52 web interface does not sufficiently verify whether a valid reque...

ASLDRService ATK Hotkey 1.0.69.0 - Unquoted Service Path Privilege Escalation

Exploit for windows platform in category local exploits ---------------------------------------------------------------------------------------------------------- Exploit Title: ASLDRService ATK Hotkey- Privilege Escalation Unquoted Service Path Date: 13/10/2016 Exploit Author : Cyril Vallicari...

ATKGFNEXSrv ATKGFNEX 1.0.11.1 - Unquoted Service Path Privilege Escalation

ATKGFNEXSrv ATKGFNEX 1.0.11.1 - Unquoted Service Path Privilege Escalation Exploit Title: ATKGFNEXSrv ATKGFNEX- Privilege Escalation Unquoted Service Path vulnerability Date: 13/10/2016 Exploit Author : Cyril Vallicari Vendor Homepage: www.asus.com Version: 1.0.11.1 Tested on: Windows 7 x64 SP1 b...

ATKGFNEXSrv ATKGFNEX 1.0.11.1 - Unquoted Service Path Privilege Escalation

Exploit for windows platform in category local exploits Exploit Title: ATKGFNEXSrv ATKGFNEX- Privilege Escalation Unquoted Service Path vulnerability Date: 13/10/2016 Exploit Author : Cyril Vallicari Vendor Homepage: www.asus.com Version: 1.0.11.1 Tested on: Windows 7 x64 SP1 but it should works ...

ASLDRService ATK Hotkey 1.0.69.0 Privilege Escalation

---------------------------------------------------------------------------------------------------------- Exploit Title: ASLDRService ATK Hotkey- Privilege Escalation Unquoted Service Path Date: 13/10/2016 Exploit Author : Cyril Vallicari Vendor Homepage: www.asus.com Version: 1.0.69.0 Tested on...

InsOnSrv Asus InstantOn 2.3.1.1 - Unquoted Service Path Privilege Escalation

Exploit Title: InsOnSrv Asus InstantOn- Privilege Escalation Unquoted Service Path vulnerability Date: 13/10/2016 Exploit Author : Cyril Vallicari Vendor Homepage: www.asus.com Version: 2.3.1.1 Tested on: Windows 7 x64 SP1 but it should works on all windows version The application suffers from an...

InsOnSrv Asus InstantOn 2.3.1.1 - Unquoted Service Path Privilege Escalation

Exploit for windows platform in category local exploits Exploit Title: InsOnSrv Asus InstantOn- Privilege Escalation Unquoted Service Path vulnerability Date: 13/10/2016 Exploit Author : Cyril Vallicari Vendor Homepage: www.asus.com Version: 2.3.1.1 Tested on: Windows 7 x64 SP1 but it should work...

ASLDRService ATK Hotkey 1.0.69.0 - Unquoted Service Path Privilege Escalation

---------------------------------------------------------------------------------------------------------- Exploit Title: ASLDRService ATK Hotkey- Privilege Escalation Unquoted Service Path Date: 13/10/2016 Exploit Author : Cyril Vallicari Vendor Homepage: www.asus.com Version: 1.0.69.0 Tested on...

ATKGFNEXSrv ATKGFNEX 1.0.11.1 - Unquoted Service Path Privilege Escalation

Exploit Title: ATKGFNEXSrv ATKGFNEX- Privilege Escalation Unquoted Service Path vulnerability Date: 13/10/2016 Exploit Author : Cyril Vallicari Vendor Homepage: www.asus.com Version: 1.0.11.1 Tested on: Windows 7 x64 SP1 but it should works on all windows version The application suffers from an...

InsOnSrv Asus InstantOn 2.3.1.1 Privilege Escalation

Exploit Title: InsOnSrv Asus InstantOn- Privilege Escalation Unquoted Service Path vulnerability Date: 13/10/2016 Exploit Author : Cyril Vallicari Vendor Homepage: www.asus.com Version: 2.3.1.1 Tested on: Windows 7 x64 SP1 but it should works on all windows version The application suffers from an...

InsOnSrv Asus InstantOn 2.3.1.1 - Unquoted Service Path Privilege Escalation

InsOnSrv Asus InstantOn 2.3.1.1 - Unquoted Service Path Privilege Escalation Exploit Title: InsOnSrv Asus InstantOn- Privilege Escalation Unquoted Service Path vulnerability Date: 13/10/2016 Exploit Author : Cyril Vallicari Vendor Homepage: www.asus.com Version: 2.3.1.1 Tested on: Windows 7 x64 S...

asus.com XSS vulnerability

Vulnerable URL: http://www.asus.com/zentalk/tw/home.php/member.php?mod=loggingz9lte"alert'OPENBUGBOUNTY'...

asus.com XSS vulnerability

Vulnerable URL: http://www.asus.com/jp/support/Repair-Status-Result?RMANO=A=A=qw9xj%2522%253e%253cscript%253ealert%2528%252fOPENBUGBOUNTY%252f%2529%253c%252fscript%253e Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 11:23 GMT Vulnerability...

asus.com XSS vulnerability

Vulnerable URL: http://www.asus.com/zentalk/tw/forum.php?mod=viewthread=82557dd2ks';alert'OPENBUGBOUNTY';//=page%3D1 Details: Description| Value ---|--- Patched:| Yes, at 24.03.2017 Latest check for patch:| 24.03.2017 04:53 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

ASUS RT-N10E Code Execution Vulnerability

ASUS RT-N10E Wireless Router is a wireless router device developed by ASUS. A code execution vulnerability exists in ASUS RT-N10E. An attacker can exploit the vulnerability to potentially execute system commands at some system commands. Code can also be executed via a cross-site request forgery...

ASUS RT-N10E URL Redirection Vulnerability

ASUS RT-N10E Wireless Router is a wireless router device developed by ASUS. A URL redirection vulnerability exists in ASUS RT-N10E. Allowing an attacker can exploit the vulnerability to conduct redirection attacks...

ASUS RT-N10E Cross-Site Scripting Vulnerability

ASUS RT-N10E Wireless Router is a wireless router device developed by ASUS. A cross-site scripting vulnerability exists in ASUS RT-N10E. An attacker can exploit the vulnerability to launch a cross-site scripting attack...

ASUS RT-N10 CSRF / Code Execution / XSS / Open Redirection

Hello list! There are multiple vulnerabilities in ASUS Wireless Router RT-N10. There are Code Execution, Cross-Site Scripting and URL Redirector Abuse vulnerabilities. ------------------------- Affected products: ------------------------- Vulnerable are the next models: ASUS RT-N10, RT-N10E,...

ASUS DSL-X11 ADSL Router - Unauthenticated DNS Change

Exploit for cgi platform in category web applications !/bin/bash ASUS DSL-X11 ADSL Router Unauthenticated Remote DNS Change Exploit Copyright 2016 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Description: The vulnerability exist in the web interface, whi...