Extracting-User-credentials-For-Web-portal-and-WiFi-AP-For-Hathway-Router-CVE-2024-44815-

通过SPI闪存提取Hathway路由器用户凭据-CVE-2024-44815 漏洞描述： 在对路由器固件进行安全评估时，观察到Web门户和Wi-Fi接入点的路由器登录凭据均以明文形式存储在SPI闪存中。攻击者可以提取登录凭据并加以滥用。 产品厂商：Hathway 受影响产品：CM5100-511 受影响版本：4.1.1.24 漏洞评分 V3.1：6.8 中危 AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:H 概念验证： 1. 打开路由器电源，使用Nmap工具进行初步网络侦察。 2. 拆解路由器，按下图所示找到UART连接。...

Sensitive-Information-disclosure-via-SPI-flash-firmware-for-Hathway-router-CVE-2024-46383

通过Hathway路由器SPI闪存固件泄露敏感信息-CVE-2024-46383 漏洞描述： 在对路由器固件进行安全评估时，发现与连接到路由器的设备（如手机、笔记本电脑、平板电脑）相关的敏感信息以明文形式存储，攻击者可以利用这些信息。 产品厂商：Hathway 受影响产品：CM5100-511 受影响版本：4.1.1.24 漏洞评分V3.1：5.2 中危 AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N 概念验证（PoC）： 1. 给路由器通电，使用Nmap工具进行初步网络侦察。 2. 拆开路由器，按下图所示找到UART连接。...

EUVD-2023-56435

Malicious code in bioql PyPI...

EUVD-2023-56426

Malicious code in bioql PyPI...

EUVD-2023-56420

Malicious code in bioql PyPI...

EUVD-2023-56436

Malicious code in bioql PyPI...

EUVD-2023-56438

Malicious code in bioql PyPI...

EUVD-2023-56432

Malicious code in bioql PyPI...

EUVD-2023-56433

Malicious code in bioql PyPI...

EUVD-2023-56421

Malicious code in bioql PyPI...

EUVD-2023-56430

Malicious code in bioql PyPI...

EUVD-2023-56418

Malicious code in bioql PyPI...

CVE-2024-44815

Vulnerability in Hathway Skyworth Router CM5100 v.4.1.1.24 allows a physically proximate attacker to obtain user credentials via SPI flash Firmware W25Q64JV...

CVE-2023-51721

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Time Server 2 parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at the web...

CVE-2023-51725

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Contact Email Address parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at the...

CVE-2023-51724

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the URL parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at the web interface of...

CVE-2023-51722

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Time Server 3 parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at the web...

CVE-2023-51739

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Device Name parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at the web...

CVE-2018-20398

Skyworth CM5100 V1.1.0, CM5100-440 V1.2.1, CM5100-511 4.1.0.14, CM5100-GHD00 V1.2.2, and CM5100.g2 4.1.0.17 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests...

Skyworth Router CM5100 安全漏洞

Skyworth Router CM5100 is a single-band router with N300 speed from Skyworth China. A security vulnerability exists in the Skyworth Router CM5100 version 4.1.1.24, which originates from storing sensitive information about USB and Wifi connected devices in plaintext...