236 matches found
ASUS-AiCloud-RCE
Origasus A Go program compiled with origasus.go, written for examining endpoints that can be associated with ASUS AiCloud / AsusWRT within the scope of authorized security testing or defense analysis e.g., your own device, a pentest lab environment. Important: The use of such software against...
AsusWRT Lan RCE
Module exploits multiple vulnerabilities to achieve remote code execution in AsusWRT firmware. The HTTP server contains vulnerability that allows bypass authentication via POST requests. Combining this with another vulnerability in the VPN configuration upload functionality allows setting NVRAM...
VulnCheck KEV: CVE-2018-5999
An issue was discovered in AsusWRT before 3.0.0.4.38410007. In the handlerequest function in router/httpd/httpd.c, processing of POST requests continues even if authentication fails...
VulnCheck KEV: CVE-2018-6000
An issue was discovered in AsusWRT before 3.0.0.4.38410007. The dovpnuploadpost function in router/httpd/web.c in vpnupload.cgi provides functionality for setting NVRAM configuration values, which allows attackers to set the admin password and launch an SSH daemon or enable infosvr command mode,...
CVE-2018-18320
An issue was discovered in the Merlin.PHP component 0.6.6 for Asuswrt-Merlin devices. An attacker can execute arbitrary commands because exec.php has a popen call. NOTE: the vendor indicates that Merlin.PHP is designed only for use on a trusted intranet network, and intentionally allows remote co...
CVE-2018-18319
An issue was discovered in the Merlin.PHP component 0.6.6 for Asuswrt-Merlin devices. An attacker can execute arbitrary commands because api.php has an eval call, as demonstrated by the /6/api.php?function=command=remote='ls' URI. NOTE: the vendor indicates that Merlin.PHP is designed only for us...
EUVD-2021-26568
Malware in sbrugna...
EUVD-2017-7106
Malware in sbrugna...
EUVD-2017-2974
Malware in sbrugna...
EUVD-2017-2973
Malware in sbrugna...
EUVD-2017-7105
Malware in sbrugna...
EUVD-2017-7107
Malware in sbrugna...
EUVD-2018-12894
Malware in sbrugna...
EUVD-2018-20485
Malware in sbrugna...
EUVD-2018-20486
Malware in sbrugna...
EUVD-2017-7104
Malware in sbrugna...
EUVD-2018-12893
Malware in sbrugna...
EUVD-2018-12891
Malware in sbrugna...