3839 matches found
MIPS Little Endian Shellcode
No description provided by source. Disassembled MIPS Little Endian Shellcode Shellcode was designed for ACSD exploit on the ASUS RT-AC66U SOHO router. CVE: CVE-2013-4659 Written by Jacob Holcomb, Security Analyst @ Independent Security Evaluators Blog: http://infosec42.blogspot.com Company Websit...
Asus RT-N66U 3.0.0.4.374_720 - CSRF Vulnerability
Description: The Asus RT-N66U is a home wireless router. Its web application has a CSRF vulnerability that allows an attacker to execute arbitrary commands on the target device. Exploitable URL: The parameter SystemCmd in the URL below causes the device to execute arbitrary commands. The value...
Asus VideoSecurity Online 3.5 Web Server Authentication Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15279/info Asus VideoSecurity Online is prone to a buffer overflow in the authentication mechanism of the included Web server. This issue only exists if authentication is enabled on the Web server. The Web server included...
Asus AAM6330BI/AAM6000EV ADSL Router Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8183/info It has been reported that remote users may be able to obtain sensitive information from Asus ADSL routers. It is possible to request files from the built-in Web server that contain information such as usernames,...
Asus Dpcproxy Buffer Overflow
No description provided by source. $Id: asusdpcproxyoverflow.rb 9583 2010-06-22 19:11:05Z todb $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms...
Asus RT56U 3.0.0.4.360 - Remote Command Injection
No description provided by source...
CVE-2014-2925
Cross-site scripting XSS vulnerability in AdvancedWirelessContent.asp in ASUS RT-AC68U and other RT series routers with firmware before 3.0.0.4.374.5047 allows remote attackers to inject arbitrary web script or HTML via the currentpage parameter to apply.cgi...
CVE-2013-5948
The Network Analysis tab MainAnalysisContent.asp in the ASUS RT-AC68U and other RT series routers with firmware before 3.0.0.4.374.5047 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the Target field destIP parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in AdvancedWirelessContent.asp in ASUS RT-AC68U and other RT series routers with firmware before 3.0.0.4.374.5047 allows remote attackers to inject arbitrary web script or HTML via the currentpage parameter to apply.cgi...
Code injection
AdvancedSystemContent.asp in the ASUS RT series routers with firmware before 3.0.0.4.374.5517, when an administrator session is active, allows remote authenticated users to obtain the administrator user name and password by reading the source code...
Code injection
The Network Analysis tab MainAnalysisContent.asp in the ASUS RT-AC68U and other RT series routers with firmware before 3.0.0.4.374.5047 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the Target field destIP parameter...
CVE-2014-2925
CVE-2014-2925 is an XSS vulnerability in ASUS RT-AC68U and other RT-series routers, exploitable via the current_page parameter to apply.cgi in Advanced_Wireless_Content.asp on firmware prior to 3.0.0.4.374.5047. Affected devices accept remote script/HTML injection without authentication, with pot...
CVE-2014-2719
The CVE affects ASUS RT series routers with firmware prior to 3.0.0.4.374.5517. The vulnerability arises in Advanced_System_Content.asp: when an administrator session is active, remote authenticated users can read the page source to obtain the administrator username and password. Impact is creden...
CVE-2014-2719
AdvancedSystemContent.asp in the ASUS RT series routers with firmware before 3.0.0.4.374.5517, when an administrator session is active, allows remote authenticated users to obtain the administrator user name and password by reading the source code...
CVE-2013-5948
The Network Analysis tab MainAnalysisContent.asp in the ASUS RT-AC68U and other RT series routers with firmware before 3.0.0.4.374.5047 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the Target field destIP parameter...
CVE-2014-2925
Cross-site scripting XSS vulnerability in AdvancedWirelessContent.asp in ASUS RT-AC68U and other RT series routers with firmware before 3.0.0.4.374.5047 allows remote attackers to inject arbitrary web script or HTML via the currentpage parameter to apply.cgi...
CVE-2013-5948
CVE-2013-5948 documents concrete details: Affected devices are ASUS RT-AC68U and other RT-series routers with firmware before 3.0.0.4.374.5047. The issue resides in the Network Analysis tab (Main_Analysis_Content.asp), where remote authenticated users can cause arbitrary commands to run via shell...
PT-2014-4959
Name of the Vulnerable Software and Affected Versions ASUS RT-AC68U and other RT series routers versions prior to 3.0.0.4.374.5047 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the current page parameter to "apply.cgi"...
CVE-2014-2925: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in AdvancedWirelessContent.asp in ASUS RT-AC68U and other RT series routers with firmware before 3.0.0.4.374.5047 allows remote attackers to inject arbitrary web script or HTML via the currentpage parameter to apply.cgi...
CVE-2014-2719: Exposure of Sensitive Information to an Unauthorized Actor
AdvancedSystemContent.asp in the ASUS RT series routers with firmware before 3.0.0.4.374.5517, when an administrator session is active, allows remote authenticated users to obtain the administrator user name and password by reading the source code...