3839 matches found
ASUS Router Multiple Vulnerabilities (Aug 2015) - Active Check
ASUS Router is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Asus Wireless-N Gigabit Router Information Disclosure
Remote information disclosure Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...
Google $100 ChromeBit Turns Any TV Into a Computer
Imagine — reaching into your pocket — and pulling out a computer! Google has made it possible to put your whole computer into your pocket by introducing a whole new kind of Chrome device — a tiny stick that plugs into HDMI port of any display. Dubbed ChromeBit, a fully featured computer-on-a-stic...
ASUS RT-G32 Cross-Site Request Forgery Vulnerability
ASUS RT-G32 routers is a router device. A cross-site request forgery vulnerability exists in ASUS RT-G32 routers, which allows remote attackers to construct malicious URIs, trick users into parsing them, and can perform malicious actions in the context of the target user...
Asus RT-G32 Router Cross-Site Scripting Vulnerability
ASUS RT-G32 is a wireless router product from ASUS. A cross-site scripting vulnerability exists in the Asus RT-G32 router. The vulnerability exists because the startapply.htm script fails to adequately filter 'nextpage', 'groupid', 'actionscript ' and 'flag' parameters. A remote attacker could us...
CVE-2015-2681
Multiple cross-site scripting XSS vulnerabilities in the ASUS RT-G32 routers with firmware 2.0.2.6 and 2.0.3.2 allow remote attackers to inject arbitrary web script or HTML via the 1 nextpage, 2 groupid, 3 actionscript, or 4 flag parameter to startapply.htm...
CVE-2015-2676
Cross-site request forgery CSRF vulnerability in the ASUS RT-G32 routers with firmware 2.0.2.6 and 2.0.3.2 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via a request to startapply.htm...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the ASUS RT-G32 routers with firmware 2.0.2.6 and 2.0.3.2 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via a request to startapply.htm...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the ASUS RT-G32 routers with firmware 2.0.2.6 and 2.0.3.2 allow remote attackers to inject arbitrary web script or HTML via the 1 nextpage, 2 groupid, 3 actionscript, or 4 flag parameter to startapply.htm...
CVE-2015-2681
Multiple cross-site scripting XSS vulnerabilities in the ASUS RT-G32 routers with firmware 2.0.2.6 and 2.0.3.2 allow remote attackers to inject arbitrary web script or HTML via the 1 nextpage, 2 groupid, 3 actionscript, or 4 flag parameter to startapply.htm...
CVE-2015-2681
Affected product: Asus RT-G32 router. Vulnerable component: start_apply.htm handling for parameters next_page, group_id, action_script, and flag. Root cause: insufficient input validation allowing cross-site scripting (XSS) via these parameters in firmware versions 2.0.2.6 and 2.0.3.2. Impact: re...
CVE-2015-2676
Cross-site request forgery CSRF vulnerability in the ASUS RT-G32 routers with firmware 2.0.2.6 and 2.0.3.2 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via a request to startapply.htm...
CVE-2015-2676
CVE-2015-2676 affects Asus RT-G32 routers (firmware 2.0.2.6 and 2.0.3.2). A CSRF flaw lets an attacker hijack admin authentication and force password changes via start_apply.htm. Affected component: web interface; root cause: CSRF enabling unauthorized admin actions. Impact: compromise of admin c...
PT-2015-5828
Name of the Vulnerable Software and Affected Versions ASUS RT-G32 routers versions 2.0.2.6 through 2.0.3.2 Description A cross-site request forgery issue allows remote attackers to hijack administrator authentication for requests that change the administrator password via a request to "start...
CVE-2015-2676: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in the ASUS RT-G32 routers with firmware 2.0.2.6 and 2.0.3.2 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via a request to startapply.htm...
CVE-2015-2681: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in the ASUS RT-G32 routers with firmware 2.0.2.6 and 2.0.3.2 allow remote attackers to inject arbitrary web script or HTML via the 1 nextpage, 2 groupid, 3 actionscript, or 4 flag parameter to startapply.htm...
PT-2015-5833
Name of the Vulnerable Software and Affected Versions ASUS RT-G32 routers versions 2.0.2.6 through 2.0.3.2 Description The issue allows remote attackers to inject arbitrary web script or HTML via vulnerable parameters. The parameters next page, group id, action script, or flag in the "start...
KLA10495 Multiple vulnerabilities in Asus RT-G32 router
Multiple serious vulnerabilities have been found in Asus RT-G32. Malicious users can exploit these vulnerabilities to inject arbitrary code or hijack administrator authentication. Multiple XSS and CSRF vulnerabilities can be exploited remotely via vectors related to startapply.htm Original...
Vulnerabilities in ASUS RT-G32
Hello 3APA3A! There are Cross-Site Scripting and Cross-Site Request Forgery vulnerabilities in ASUS Wireless Router RT-G32. ------------------------- Affected products: ------------------------- Vulnerable is the next model: ASUS RT-G32 with different versions of firmware. I checked in ASUS RT-G3...