ASUS Memory Mapping Driver (ASMMAP/ASMMAP64) - Physical Memory Read/Write

/ Source: http://rol.im/asux/ ASUS Memory Mapping Driver ASMMAP/ASMMAP64: Physical Memory Read/Write PoC by slipstream/RoL - https://twitter.com/TheWack0lian - http://rol.im/chat/ The ASUS "Generic Function Service" includes a couple of drivers, ASMMAP.sys / ASMMAP64.sys, the version resources...

ASUS wireless routers design vulnerability

wireless routers are router products from ASUS. ASUS wireless routers has a design flaw that lacks an administrator autologout feature. An attacker was able to obtain an administrator session...

ASUS LiveOcean(Live wallpaper) - External URLs vulnerabilities

HackApp vulnerability scanner discovered that application ASUS LiveOceanLive wallpaper published at the 'play' market has multiple vulnerabilities...

ASUS LiveWater(Live wallpaper) - Exported components, External URLs, WebView JavaScript enabled vulnerabilities

HackApp vulnerability scanner discovered that application ASUS LiveWaterLive wallpaper published at the 'play' market has multiple vulnerabilities...

ASUS AiCam - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application ASUS AiCam published at the 'play' market has multiple vulnerabilities...

ASUS ZenWatch Wellness - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application ASUS ZenWatch Wellness published at the 'play' market has multiple vulnerabilities...

MyASUS - ASUS support - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application MyASUS - ASUS support published at the 'play' market has multiple vulnerabilities...

Asus Faces 20 years of Audits Over Poor Wi-Fi Router Security

Currently, Asus is undergoing through a troublesome situation after a lawsuit had been filed by the US Federal Trade Commission FTC regarding its Router Insecurity. On Tuesday, FTC settled charges with Asus, where the hardware manufacturing company agrees to: Undergo Independent Security Audits...

FTC And Asus Settle Over Router Security

The U.S. Federal Trade Commission announced a settlement with ASUSTeK Computer over sloppy security settings tied to its routers that left the personal data of 12,900 consumers’ publicly available. On Tuesday, the Taiwanese electronics company agreed to 20 years of periodic security audits along...

ASUS RT-N56U HTML Injection Vulnerability

ASUS RT-N56U is a wireless router product from ASUS. The ASUS RT-N56U suffers from an HTML injection vulnerability, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive information or hijack user sessions when...

FTC Shares Security Tips for ASUS Wireless Routers

The Federal Trade Commission FTC has provided network security tips for vulnerable ASUS-branded wireless routers. Major security flaws in these routers may have exposed customers' sensitive information to malicious actors. FTC urges consumers to download the latest security updates for their...

ASUS RT-N56U 3.0.0.4.374_239 Cross Site Scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Exploit Title: ASUS RT-N56U Persistent XSS Date: 2/2/2016 Exploit Author: @GraphX Vendor Homepage: http://asus.com/ Version: 3.0.0.4.374239 1 Description: It is possible for an authenticated attacker to bypass input sanitation in the username input...

ASUS Japan WL-330NUL Device Cross-Site Scripting Vulnerability

The ASUS Japan WL-330NUL is a portable wireless LAN router from ASUS. The ASUS Japan WL-330NUL suffers from a cross-site scripting vulnerability that can be exploited by remote attackers to inject malicious script or HTML code, which can be used to obtain sensitive information or hijack user...

CVE-2015-7789

ASUS Japan WL-330NUL devices with firmware before 3.0.0.42 allow remote attackers to cause a denial of service via unspecified vectors...

CVE-2015-7790

Cross-site scripting XSS vulnerability on ASUS Japan WL-330NUL devices with firmware before 3.0.0.42 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-7788

ASUS Japan WL-330NUL devices with firmware before 3.0.0.42 allow remote attackers to execute arbitrary commands via unspecified vectors...

CVE-2015-7787

ASUS Japan WL-330NUL devices with firmware before 3.0.0.42 allow remote attackers to discover the WPA2-PSK passphrase via unspecified vectors...

Design/Logic Flaw

ASUS Japan WL-330NUL devices with firmware before 3.0.0.42 allow remote attackers to cause a denial of service via unspecified vectors...

Code injection

ASUS Japan WL-330NUL devices with firmware before 3.0.0.42 allow remote attackers to discover the WPA2-PSK passphrase via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability on ASUS Japan WL-330NUL devices with firmware before 3.0.0.42 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...