10241 matches found
Ubiquiti Inc.: Remote Code Execution at http://tw.corp.ubnt.com
The researcher found a Command Injection in tw.corp.ubnt.com. While hunting i came across a host of Ubiquiti Networks tw.corp.ubnt.com , when i browsed to http://tw.corp.ubnt.com there was Dir listing enabled which contained various sensitive information. This was reported to Ubiquiti Team. Howev...
DEBIAN-CVE-2017-2299
Versions of the puppetlabs-apache module prior to 1.11.1 and 2.1.0 make it very easy to accidentally misconfigure TLS trust. If you specify the sslca parameter but do not specify the sslcertsdir parameter, a default will be provided for the sslcertsdir that will trust certificates from any of the...
PT-2017-15335
Name of the Vulnerable Software and Affected Versions puppetlabs-apache versions prior to 1.11.1 puppetlabs-apache versions prior to 2.1.0 Description The issue makes it easy to accidentally misconfigure TLS trust. If the ssl ca parameter is specified but the ssl certs dir parameter is not, a...
D-Link DIR-850L REV.A and REV.B DHCP Client Remote Code Execution Vulnerability
D-Link DIR-850L REV.A and REV.B are both wireless router products from AUO D-Link.DHCP client is one of the DHCP clients. A security vulnerability exists in the DHCP client on D-Link DIR-850L REV.A and REV.B devices using firmware FW114WWb07h2abbeta1 and earlier and firmware FW208WWb02 and earlie...
D-Link DIR-850L REV.B Password Disclosure Vulnerability
The D-Link DIR-850L REV.B is a wireless router from AUO D-Link. A security vulnerability exists in the D-Link NPAPI extension used in D-Link DIR-850L REV.B devices with firmware FW208WWb02 and prior versions. An attacker could exploit the vulnerability to retrieve the administrator password...
D-Link DIR-850L REV.A and REV.B Man-in-the-Middle Attack Vulnerability
The D-Link DIR-850L REV.A and REV.B are both wireless router products from AUO D-Link. The security vulnerability in the D-Link NPAPI extension used in D-Link DIR-850L REV.A devices with firmware FW114WWb07h2abbeta1 and earlier and REV.B devices with firmware FW208WWb02 and earlier stems from the...
D-Link DIR-850L REV.B Privilege Acquisition Vulnerability (CNVD-2017-31792)
The D-Link DIR-850L REV.B is a wireless router from AUO D-Link. A security vulnerability exists in the registersend.php file in D-Link DIR-850L REV.B devices using firmware FW208WWb02 and prior versions, which stems from the program failing to require authentication. An attacker could exploit the...
D-Link DIR-850L REV.A Cross-Site Scripting Vulnerability (CNVD-2017-31794)
The D-Link DIR-850L REV.A is a wireless router from AUO D-Link. A cross-site scripting vulnerability exists in the D-Link DIR-850L REV.A using firmware version FW114WWb07h2abbeta1 and earlier. A remote attacker can exploit the vulnerability to steal authentication cookies by sending the 'action'...
D-Link DIR-850L REV.A and REV.B Information Disclosure Vulnerability
The D-Link DIR-850L REV.A and REV.B are both wireless router products from AUO D-Link. A security vulnerability exists in D-Link DIR-850L REV.A and REV.B devices using firmware FW114WWb07h2abbeta1 and prior versions and REV.B with firmware FW208WWb02 and prior versions. An attacker can exploit th...
D-Link DIR-850L REV.A and REV.B Password Retrieval Vulnerability
The D-Link DIR-850L REV.A and REV.B are both wireless router products from AUO D-Link. A security vulnerability exists in D-Link DIR-850L REV.A and REV.B devices using firmware FW114WWb07h2abbeta1 and prior versions and REV.B with firmware FW208WWb02 and prior versions. An attacker could exploit...
D-Link DIR-850L REV.A and REV.B Password Disclosure Vulnerability
The D-Link DIR-850L REV.A and REV.B are both wireless router products from AUO D-Link. A security vulnerability exists in D-Link DIR-850L REV.A and REV.B devices using firmware FW114WWb07h2abbeta1 and prior versions and REV.B with firmware FW208WWb02 and prior versions. An attacker can exploit th...
D-Link DIR-850L Information Disclosure Vulnerability
The D-Link DIR-850L is a wireless router from AUO D-Link. A security vulnerability exists in the NPAPI extension in the D-Link DIR-850L using FW114WWb07h2abbeta1 and earlier versions, which stems from the program failing to properly validate certificates. A remote attacker could exploit the...
D-Link DIR Router Missing Authentication Check
The remote D-Link DIR router does not enforce authentication when a remote user requests registersend.php. An attacker can use this weakness to recover the administrator password. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid103219; scriptversion"1.5";...
CVE-2017-14429
The DHCP client on D-Link DIR-850L REV. A with firmware through FW114WWb07h2abbeta1 and REV. B with firmware through FW208WWb02 devices allows unauthenticated remote code execution as root because /etc/services/INET/inetipv4.php mishandles shell metacharacters, affecting generated files such as...
CVE-2017-14415
D-Link DIR-850L REV. A with firmware through FW114WWb07h2abbeta1 devices have XSS in the action parameter to htdocs/web/sitesurvey.php...
CVE-2017-14421
D-Link DIR-850L REV. B with firmware through FW208WWb02 devices have a hardcoded password of wrgac25dlink.2013guidir850l for the Alphanetworks account upon device reset, which allows remote attackers to obtain root access via a TELNET session...
CVE-2017-14417
registersend.php on D-Link DIR-850L REV. B with firmware through FW208WWb02 devices does not require authentication, which can result in unintended enrollment in mydlink Cloud Services...
Authentication flaw
registersend.php on D-Link DIR-850L REV. B with firmware through FW208WWb02 devices does not require authentication, which can result in unintended enrollment in mydlink Cloud Services...
Hardcoded credentials
D-Link DIR-850L REV. B with firmware through FW208WWb02 devices have a hardcoded password of wrgac25dlink.2013guidir850l for the Alphanetworks account upon device reset, which allows remote attackers to obtain root access via a TELNET session...