CVE-2018-5721

Stack-based buffer overflow in the ejupdatevariables function in router/httpd/web.c on ASUS routers when using software from https://github.com/RMerl/asuswrt-merlin allows web authenticated attackers to execute code via a request that updates a setting. In ejupdatevariables, the length of the...

Stack overflow

Stack-based buffer overflow in the ejupdatevariables function in router/httpd/web.c on ASUS routers when using software from https://github.com/RMerl/asuswrt-merlin allows web authenticated attackers to execute code via a request that updates a setting. In ejupdatevariables, the length of the...

CVE-2018-5721

CVE-2018-5721 refers to a stack-based buffer overflow in the ej_update_variables function within router/httpd/web.c on ASUS routers (via software from github.com/RMerl/asuswrt-merlin). The vulnerability occurs because the length of the variable action_script is not checked, as long as the value i...

CVE-2018-5721

Stack-based buffer overflow in the ejupdatevariables function in router/httpd/web.c on ASUS routers when using software from https://github.com/RMerl/asuswrt-merlin allows web authenticated attackers to execute code via a request that updates a setting. In ejupdatevariables, the length of the...

Multiple vulnerabilities in all versions of ASUS routers

1 ASUSWRT 3.0.0.4.376 - multiple vulnerabilities in httpd server all versions of AsusWRT at the time of report to vendor, for previous 376 version see next section 1. Highly predictable session tokens The session token is generated for an authenticated user using stdlib rand function. The token...

advantage.asus.com XSS vulnerability

Open Bug Bounty ID: OBB-524737 Description| Value ---|--- Affected Website:| advantage.asus.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

uk.store.asus.com XSS vulnerability

Open Bug Bounty ID: OBB-524726 Description| Value ---|--- Affected Website:| uk.store.asus.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure...

stw.asus.com XSS vulnerability

Open Bug Bounty ID: OBB-487072 Description| Value ---|--- Affected Website:| stw.asus.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure based ...

Asus_DeleteOfflineClientOverflow

Vulnerability: Stack buffer overflow in httpd ------------------------------------------ Exploitation: Can control the $pc. Use together with a session hijack vulnerability or in a csrf attack, can remote code execution and then get a connectback shell. ------------------------------------------...

Asus_serviceTypeCopyOverflow

Tested product and firmware version: RT-N12HPB1 3.0.0.4.380.3479 coding=utf-8 ROUTERIP = '192.168.2.1' asus wireless router ip IP = '192.168.2.31' attacker ip INTERACE = 'eth0' attacker host network interface import time import socket import sys import os import threading import socketserver sc =...

ru.store.asus.com XSS vulnerability

Open Bug Bounty ID: OBB-441411 Description| Value ---|--- Affected Website:| ru.store.asus.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

sipfs.asus.com XSS vulnerability

Open Bug Bounty ID: OBB-328882 Description| Value ---|--- Affected Website:| sipfs.asus.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

eholiday.asus.com XSS vulnerability

Open Bug Bounty ID: OBB-327445 Description| Value ---|--- Affected Website:| eholiday.asus.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

am.eservice.asus.com XSS vulnerability

Vulnerable URL: https://am.eservice.asus.com/pf/Login1.jsp?penCaptcha=Verification%20code%20fails%3Csvg/onload=alert/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

sipfs.asus.com XSS vulnerability

Open Bug Bounty ID: OBB-327442 Description| Value ---|--- Affected Website:| sipfs.asus.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ru.store.asus.com XSS vulnerability

Vulnerable URL: https://ru.store.asus.com/index.php?route=product/search=%22%3E%3Csvg%20onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...

CyberLink LabelPrint Buffer Overflow

!/usr/bin/python Exploit Title: CyberLink LabelPrint =2.5 File Project Processing Unicode Stack Overflow Date: September 23, 2017 Exploit Author: f3ci Vendor Homepage: https://www.cyberlink.com/ Software Link:...

CyberLink LabelPrint < 2.5 - Buffer Overflow (SEH Unicode) Exploit

Exploit for windows platform in category local exploits !/usr/bin/python Exploit Title: CyberLink LabelPrint =2.5 File Project Processing Unicode Stack Overflow Date: September 23, 2017 Exploit Author: f3ci Vendor Homepage: https://www.cyberlink.com/ Software Link:...

CyberLink LabelPrint < 2.5 - Local Buffer Overflow (SEH Unicode)

!/usr/bin/python Exploit Title: CyberLink LabelPrint =2.5 File Project Processing Unicode Stack Overflow Date: September 23, 2017 Exploit Author: f3ci Vendor Homepage: https://www.cyberlink.com/ Software Link:...

CyberLink LabelPrint 2.5 - Local Buffer Overflow (SEH Unicode)

CyberLink LabelPrint 2.5 - Local Buffer Overflow SEH Unicode !/usr/bin/python Exploit Title: CyberLink LabelPrint =2.5 File Project Processing Unicode Stack Overflow Date: September 23, 2017 Exploit Author: f3ci Vendor Homepage: https://www.cyberlink.com/ Software Link:...