CVE-2023-35803

IQ Engine before 10.6r2 on Extreme Network AP devices has a Buffer Overflow...

CVE-2023-35803

IQ Engine before 10.6r2 on Extreme Network AP devices has a Buffer Overflow...

CVE-2023-35803

CVE-2023-35803 affects Extreme Networks IQ Engine on AP devices (pre-10.6r2). The root cause is a buffer overflow in the ah_acsd service, which can be exploited by a remote attacker to achieve arbitrary code execution with root privileges, over the network (no user interaction required per ZDI ad...

CVE-2023-35803

IQ Engine before 10.6r2 on Extreme Network AP devices has a Buffer Overflow...

CVE-2023-35803: Buffer Copy without Checking Size of Input

IQ Engine before 10.6r2 on Extreme Network AP devices has a Buffer Overflow...

CVE-2023-35803

IQ Engine before 10.6r2 on Extreme Network AP devices has a Buffer Overflow...

Race condition

A vulnerability in the networking component of Cisco access point AP software could allow an unauthenticated, remote attacker to cause a temporary disruption of service. This vulnerability is due to overuse of AP resources. An attacker could exploit this vulnerability by connecting to an AP on an...

CVE-2023-20176

CVE-2023-20176 affects Cisco access point (AP) software networking component. Vulnerability allows unauthenticated, remote DoS by a wireless client sending a high rate of traffic, risking DTLS session teardown. Reported impact: temporary service disruption with high availability impact. Connected...

WiFi-Pineapple-MK7_REST-Client - WiFi Hacking Workflow With WiFi Pineapple Mark VII API

PINEAPPLE MARK VII REST CLIENT The leading rogue access point and WiFi pentest toolkit for close access operations. Passive and active attacks analyze vulnerable and misconfigured devices. https://hak5.org/collections/sale/products/wifi-pineapple Author :: TW-D Version :: 1.3.7 Copyright ::...

CVE-2023-36499

Netgear XR300 v1.0.3.78 was discovered to contain multiple buffer overflows via the wlassid and wlgssid parameters at genieapwifichange.cgi...

CVE-2023-36499

Netgear XR300 v1.0.3.78 was discovered to contain multiple buffer overflows via the wlassid and wlgssid parameters at genieapwifichange.cgi...

PT-2023-25594 · NetGear · Netgear Xr300

Name of the Vulnerable Software and Affected Versions: Netgear XR300 version 1.0.3.78 Description: The issue concerns multiple buffer overflows that can be triggered via the wla ssid and wlg ssid parameters at the "genie ap wifi change.cgi" endpoint. Recommendations: For Netgear XR300 version...

PT-2023-26412

Name of the Vulnerable Software and Affected Versions Netgear R6900P version 1.3.3.154 Description The issue is related to multiple buffer overflows that can occur via the wla ssid and wlg ssid parameters at the "ia ap setting.cgi" endpoint. Recommendations For Netgear R6900P version 1.3.3.154, a...

Moxa AWK-3131A Web Application asqc.asp Information Disclosure (CVE-2016-8722)

An exploitable Information Disclosure vulnerability exists in the Web Application functionality of Moxa AWK-3131A Series Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client. Retrieving a specific URL without authentication can reveal sensitive information to an attacker. This plugin only work...

Moxa Web Application Nonce Reuse Vulnerability (CVE-2016-8712)

An exploitable nonce reuse vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless AP running firmware 1.1. The device uses one nonce for all session authentication requests and only changes the nonce if the web application has been idle for 300 seconds. This plugin...

CVE-2023-3743

Ap Page Builder, in versions lower than 1.7.8.2, could allow a remote attacker to send a specially crafted SQL query to the productoneimg parameter to retrieve the information stored in the database...

Design/Logic Flaw

Ap Page Builder, in versions lower than 1.7.8.2, could allow a remote attacker to send a specially crafted SQL query to the productoneimg parameter to retrieve the information stored in the database...

CVE-2023-3743 SQL injection vulnerability in LeoTheme's Ap Page Builder

Ap Page Builder, in versions lower than 1.7.8.2, could allow a remote attacker to send a specially crafted SQL query to the productoneimg parameter to retrieve the information stored in the database...

CVE-2023-3743 SQL injection vulnerability in LeoTheme's Ap Page Builder

Ap Page Builder, in versions lower than 1.7.8.2, could allow a remote attacker to send a specially crafted SQL query to the productoneimg parameter to retrieve the information stored in the database...

CVE-2023-3743

Summary: CVE-2023-3743 affects LeoTheme’s Ap Page Builder for Prestashop, with versions prior to 1.7.8.2 vulnerable to a SQL injection via the product_one_img parameter, allowing a remote attacker to retrieve data from the database. The root cause is improper handling of user-supplied input in th...