3094 matches found
CVE-2018-9285
MainAnalysisContent.asp in /apply.cgi on ASUS RT-AC66U, RT-AC68U, RT-AC86U, RT-AC88U, RT-AC1900, RT-AC2900, and RT-AC3100 devices before 3.0.0.4.38410007; RT-N18U devices before 3.0.0.4.382.39935; RT-AC87U and RT-AC3200 devices before 3.0.0.4.382.50010; and RT-AC5300 devices before...
CVE-2018-9285
CVE-2018-9285 describes an OS command injection in Main_Analysis_Content.asp via /apply.cgi on ASUS routers (RT-AC66U/RT-AC68U/RT-AC86U/RT-AC88U/RT-AC1900/RT-AC2900/RT-AC3100; RT-N18U; RT-AC87U/RT-AC3200; RT-AC5300). The vulnerability occurs before firmware versions 3.0.0.4.384_10007, 3.0.0.4.382...
ASUS RT-N14UHP 'flag' parameter cross-site scripting vulnerability
The ASUS RT-N14UHP is a wireless router device from ASUS. A cross-site scripting vulnerability exists in the 'flag' parameter in ASUS RT-N14UHP devices prior to version 3.0.0.4.380.8015. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...
CVE-2017-12590
ASUS RT-N14UHP devices before 3.0.0.4.380.8015 have a reflected XSS vulnerability in the "flag" parameter...
Cross site scripting
ASUS RT-N14UHP devices before 3.0.0.4.380.8015 have a reflected XSS vulnerability in the "flag" parameter...
CVE-2017-12590
ASUS RT-N14UHP devices before 3.0.0.4.380.8015 have a reflected XSS vulnerability in the "flag" parameter...
CVE-2017-12590
Summary: CVE-2017-12590 affects ASUS RT-N14UHP routers. A reflected Cross-Site Scripting (XSS) flaw exists in the "flag" parameter of the web interface, exploitable via crafted input. Affected product version range is before 3.0.0.4.380.8015 . The root cause is a lack of proper input handling lea...
CVE-2017-12590
ASUS RT-N14UHP devices before 3.0.0.4.380.8015 have a reflected XSS vulnerability in the "flag" parameter...
topchocs.com XSS vulnerability
Open Bug Bounty ID: OBB-579548 Description| Value ---|--- Affected Website:| topchocs.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Asus asuswrt Plaintext Password Storage Vulnerability
ASUSWRT, the unified firmware used by ASUS in its latest routers, is a web-based graphical user interface for ASUS routers. A plaintext password storage vulnerability exists in Asus asuswrt version 3.0.0.4.380.7743 and earlier. Passwords are stored in plaintext in the nvram in the HTTPd server. A...
Asus asuswrt Buffer Overflow Vulnerability
ASUSWRT, the unified firmware used by ASUS in its latest routers, is a web-based graphical user interface for ASUS routers. Multiple buffer overflow vulnerabilities exist in the HTTPd server in Asus asuswrt versions 3.0.0.4.376.X and earlier. An attacker can exploit this vulnerability to remotely...
CVE-2017-15653
Improper administrator IP validation after his login in the HTTPd server in all current versions = 3.0.0.4.380.7743 of Asus asuswrt allows an unauthorized user to execute any action knowing administrator session token by using a specific User-Agent string...
CVE-2017-15654
Highly predictable session tokens in the HTTPd server in all current versions = 3.0.0.4.380.7743 of Asus asuswrt allow gaining administrative router access...
CVE-2017-15656
Password are stored in plaintext in nvram in the HTTPd server in all current versions = 3.0.0.4.380.7743 of Asus asuswrt...
CVE-2017-15656
Password are stored in plaintext in nvram in the HTTPd server in all current versions = 3.0.0.4.380.7743 of Asus asuswrt...
CVE-2017-15655
Multiple buffer overflow vulnerabilities exist in the HTTPd server in Asus asuswrt version =3.0.0.4.376.X. All have been fixed in version 3.0.0.4.378, but this vulnerability was not previously disclosed. Some end-of-life routers have this version as the newest and thus are vulnerable at this time...
Design/Logic Flaw
Highly predictable session tokens in the HTTPd server in all current versions = 3.0.0.4.380.7743 of Asus asuswrt allow gaining administrative router access...
CVE-2017-15654
Highly predictable session tokens in the HTTPd server in all current versions = 3.0.0.4.380.7743 of Asus asuswrt allow gaining administrative router access...
CVE-2017-15655
CVE-2017-15655 affects the AsusWRT HTTPd server in Asus routers with firmware versions up to 3.0.0.4.376.X. The vulnerability is a buffer overflow in the HTTPd service that can lead to remote code execution with administrator privileges when an administrator visits certain pages. All vulnerable i...