Command injection

An issue was discovered on the ASUS RT-N56U Wireless Router with Firmware 3.0.0.4.374979. When executing an "nmap -O" command that specifies an IP address of an affected device, one can crash the device's WAN connection, causing disconnection from the Internet, a Denial of Service DoS. The attack...

CVE-2017-5632

An issue was discovered on the ASUS RT-N56U Wireless Router with Firmware 3.0.0.4.374979. When executing an "nmap -O" command that specifies an IP address of an affected device, one can crash the device's WAN connection, causing disconnection from the Internet, a Denial of Service DoS. The attack...

CVE-2017-5632

An issue was discovered on the ASUS RT-N56U Wireless Router with Firmware 3.0.0.4.374979. When executing an "nmap -O" command that specifies an IP address of an affected device, one can crash the device's WAN connection, causing disconnection from the Internet, a Denial of Service DoS. The attack...

CVE-2017-5632

The CVE-2017-5632 entry affects the ASUS RT-N56U Wireless Router with firmware 3.0.0.4.374_979. The vulnerability allows a local attacker to crash the device’s WAN connection by executing an nmap -O command targeting the router’s IP, leading to a local-network–only Denial of Service. The availabl...

shop.asus.com Open Redirect vulnerability

Vulnerable URL: https://shop.asus.com/store/asusau/enAU/RedirectToLandingPage/pgm.95708900?landingpage=http%3A%2F%2Fwww.openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

ASUS RP-AC52 Access Point Command Injection Vulnerability

The ASUS RP-AC52 Access Point is a wireless access point from ASUS. A command injection vulnerability exists in the ASUS RP-AC52 Access Point using firmware version 1.0.1.1s. A remote attacker can exploit the vulnerability to execute arbitrary commands...

ASUS RP-AC52 Access Point Cross-Site Request Forgery Vulnerability

The ASUS RP-AC52 Access Point is a wireless access point from ASUS. A cross-site request forgery vulnerability exists in the ASUS RP-AC52 Access Point using firmware version 1.0.1.1s. A remote attacker can exploit this vulnerability to modify settings and take full control of the system...

ASUS RP-AC52 contains multiple vulnerabilities

Overview The ASUS RP-AC52 access point, firmware version 1.0.1.1s and possibly earlier, is vulnerable to cross-site request forgery and command injection. Description CWE-352:Cross-Site Request ForgeryCSRF- CVE-2016-6557 The RP-AC52 web interface does not sufficiently verify whether a valid reque...

ASLDRService ATK Hotkey 1.0.69.0 Privilege Escalation

---------------------------------------------------------------------------------------------------------- Exploit Title: ASLDRService ATK Hotkey- Privilege Escalation Unquoted Service Path Date: 13/10/2016 Exploit Author : Cyril Vallicari Vendor Homepage: www.asus.com Version: 1.0.69.0 Tested on...

ATKGFNEXSrv ATKGFNEX 1.0.11.1 - Unquoted Service Path Privilege Escalation

ATKGFNEXSrv ATKGFNEX 1.0.11.1 - Unquoted Service Path Privilege Escalation Exploit Title: ATKGFNEXSrv ATKGFNEX- Privilege Escalation Unquoted Service Path vulnerability Date: 13/10/2016 Exploit Author : Cyril Vallicari Vendor Homepage: www.asus.com Version: 1.0.11.1 Tested on: Windows 7 x64 SP1 b...

ATKGFNEXSrv ATKGFNEX 1.0.11.1 - Unquoted Service Path Privilege Escalation

Exploit for windows platform in category local exploits Exploit Title: ATKGFNEXSrv ATKGFNEX- Privilege Escalation Unquoted Service Path vulnerability Date: 13/10/2016 Exploit Author : Cyril Vallicari Vendor Homepage: www.asus.com Version: 1.0.11.1 Tested on: Windows 7 x64 SP1 but it should works ...

ASLDRService ATK Hotkey 1.0.69.0 - Unquoted Service Path Privilege Escalation

Exploit for windows platform in category local exploits ---------------------------------------------------------------------------------------------------------- Exploit Title: ASLDRService ATK Hotkey- Privilege Escalation Unquoted Service Path Date: 13/10/2016 Exploit Author : Cyril Vallicari...

InsOnSrv Asus InstantOn 2.3.1.1 - Unquoted Service Path Privilege Escalation

Exploit Title: InsOnSrv Asus InstantOn- Privilege Escalation Unquoted Service Path vulnerability Date: 13/10/2016 Exploit Author : Cyril Vallicari Vendor Homepage: www.asus.com Version: 2.3.1.1 Tested on: Windows 7 x64 SP1 but it should works on all windows version The application suffers from an...

InsOnSrv Asus InstantOn 2.3.1.1 - Unquoted Service Path Privilege Escalation

Exploit for windows platform in category local exploits Exploit Title: InsOnSrv Asus InstantOn- Privilege Escalation Unquoted Service Path vulnerability Date: 13/10/2016 Exploit Author : Cyril Vallicari Vendor Homepage: www.asus.com Version: 2.3.1.1 Tested on: Windows 7 x64 SP1 but it should work...

InsOnSrv Asus InstantOn 2.3.1.1 Privilege Escalation

Exploit Title: InsOnSrv Asus InstantOn- Privilege Escalation Unquoted Service Path vulnerability Date: 13/10/2016 Exploit Author : Cyril Vallicari Vendor Homepage: www.asus.com Version: 2.3.1.1 Tested on: Windows 7 x64 SP1 but it should works on all windows version The application suffers from an...

ASLDRService ATK Hotkey 1.0.69.0 - Unquoted Service Path Privilege Escalation

---------------------------------------------------------------------------------------------------------- Exploit Title: ASLDRService ATK Hotkey- Privilege Escalation Unquoted Service Path Date: 13/10/2016 Exploit Author : Cyril Vallicari Vendor Homepage: www.asus.com Version: 1.0.69.0 Tested on...

ATKGFNEXSrv ATKGFNEX 1.0.11.1 - Unquoted Service Path Privilege Escalation

Exploit Title: ATKGFNEXSrv ATKGFNEX- Privilege Escalation Unquoted Service Path vulnerability Date: 13/10/2016 Exploit Author : Cyril Vallicari Vendor Homepage: www.asus.com Version: 1.0.11.1 Tested on: Windows 7 x64 SP1 but it should works on all windows version The application suffers from an...

InsOnSrv Asus InstantOn 2.3.1.1 - Unquoted Service Path Privilege Escalation

InsOnSrv Asus InstantOn 2.3.1.1 - Unquoted Service Path Privilege Escalation Exploit Title: InsOnSrv Asus InstantOn- Privilege Escalation Unquoted Service Path vulnerability Date: 13/10/2016 Exploit Author : Cyril Vallicari Vendor Homepage: www.asus.com Version: 2.3.1.1 Tested on: Windows 7 x64 S...

asus.com XSS vulnerability

Vulnerable URL: http://www.asus.com/zentalk/tw/home.php/member.php?mod=loggingz9lte"alert'OPENBUGBOUNTY'...

asus.com XSS vulnerability

Vulnerable URL: http://www.asus.com/jp/support/Repair-Status-Result?RMANO=A=A=qw9xj%2522%253e%253cscript%253ealert%2528%252fOPENBUGBOUNTY%252f%2529%253c%252fscript%253e Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 11:23 GMT Vulnerability...