3536 matches found
MyASUS - ASUS support - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application MyASUS - ASUS support published at the 'play' market has multiple vulnerabilities...
Asus Faces 20 years of Audits Over Poor Wi-Fi Router Security
Currently, Asus is undergoing through a troublesome situation after a lawsuit had been filed by the US Federal Trade Commission FTC regarding its Router Insecurity. On Tuesday, FTC settled charges with Asus, where the hardware manufacturing company agrees to: Undergo Independent Security Audits...
FTC And Asus Settle Over Router Security
The U.S. Federal Trade Commission announced a settlement with ASUSTeK Computer over sloppy security settings tied to its routers that left the personal data of 12,900 consumers’ publicly available. On Tuesday, the Taiwanese electronics company agreed to 20 years of periodic security audits along...
FTC Shares Security Tips for ASUS Wireless Routers
The Federal Trade Commission FTC has provided network security tips for vulnerable ASUS-branded wireless routers. Major security flaws in these routers may have exposed customers' sensitive information to malicious actors. FTC urges consumers to download the latest security updates for their...
ASUS RT-N56U HTML Injection Vulnerability
ASUS RT-N56U is a wireless router product from ASUS. The ASUS RT-N56U suffers from an HTML injection vulnerability, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive information or hijack user sessions when...
ASUS RT-N56U 3.0.0.4.374_239 Cross Site Scripting
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Exploit Title: ASUS RT-N56U Persistent XSS Date: 2/2/2016 Exploit Author: @GraphX Vendor Homepage: http://asus.com/ Version: 3.0.0.4.374239 1 Description: It is possible for an authenticated attacker to bypass input sanitation in the username input...
ASUS Japan WL-330NUL Device Cross-Site Scripting Vulnerability
The ASUS Japan WL-330NUL is a portable wireless LAN router from ASUS. The ASUS Japan WL-330NUL suffers from a cross-site scripting vulnerability that can be exploited by remote attackers to inject malicious script or HTML code, which can be used to obtain sensitive information or hijack user...
CVE-2015-7789
ASUS Japan WL-330NUL devices with firmware before 3.0.0.42 allow remote attackers to cause a denial of service via unspecified vectors...
CVE-2015-7790
Cross-site scripting XSS vulnerability on ASUS Japan WL-330NUL devices with firmware before 3.0.0.42 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2015-7788
ASUS Japan WL-330NUL devices with firmware before 3.0.0.42 allow remote attackers to execute arbitrary commands via unspecified vectors...
CVE-2015-7787
ASUS Japan WL-330NUL devices with firmware before 3.0.0.42 allow remote attackers to discover the WPA2-PSK passphrase via unspecified vectors...
Code injection
ASUS Japan WL-330NUL devices with firmware before 3.0.0.42 allow remote attackers to discover the WPA2-PSK passphrase via unspecified vectors...
Design/Logic Flaw
ASUS Japan WL-330NUL devices with firmware before 3.0.0.42 allow remote attackers to cause a denial of service via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability on ASUS Japan WL-330NUL devices with firmware before 3.0.0.42 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Command injection
ASUS Japan WL-330NUL devices with firmware before 3.0.0.42 allow remote attackers to execute arbitrary commands via unspecified vectors...
CVE-2015-7789
ASUS Japan WL-330NUL devices with firmware before 3.0.0.42 allow remote attackers to cause a denial of service via unspecified vectors...
CVE-2015-7788
ASUS Japan WL-330NUL devices with firmware before 3.0.0.42 allow remote attackers to execute arbitrary commands via unspecified vectors...
CVE-2015-7787
CVE-2015-7787 affects ASUS Japan WL-330NUL devices with firmware prior to 3.0.0.42. The issue is an information management vulnerability that permits an attacker with access to the device to obtain the WPA2-PSK passphrase via unspecified vectors. Affected product: WL-330NUL. Root cause: informati...
CVE-2015-7790
The CVE-2015-7790 entry documents a stored cross-site scripting (XSS) vulnerability in the ASUS Japan WL-330NUL portable wireless router. Affected firmware versions are prior to 3.0.0.42. The issue allows remote attackers to execute arbitrary script or HTML in the user’s browser via unspecified v...