Directory traversal

On FiberHome routers, Directory Traversal exists in /cgi-bin/webproc via the getpage parameter in conjunction with a crafted var:page value...

CVE-2017-15647

On FiberHome routers, Directory Traversal exists in /cgi-bin/webproc via the getpage parameter in conjunction with a crafted var:page value...

CVE-2017-15647

On FiberHome routers, Directory Traversal exists in /cgi-bin/webproc via the getpage parameter in conjunction with a crafted var:page value...

Gongjin Electronics BE126 WIFI repeater Arbitrary File Read Vulnerability

Gongjin Electronics BE126 WIFI repeater is a wireless internet repeater from Gongjin Electronics China. A security vulnerability exists in Gongjin Electronics BE126 WIFI repeater version 1.0. The vulnerability can be exploited to read the entire file system with a specially crafted 'getpage'...

Arbitrary file deletion

There is LFD local file disclosure on BE126 WIFI repeater 1.0 devices that allows attackers to read the entire filesystem on the device via a crafted getpage parameter...

Zyxel P-660HW-61 Firmware 3.40(PE.11)C0 Router - Local File Inclusion

Zyxel P-660HW-61 Firmware 3.40PE.11C0 Router - Local File Inclusion Exploit Title: Zyxel P-660HW-61 3.40PE.11C0 - Local File Inclusion Date: 2-05-2017 Exploit Author: ReverseBrain Contact: https://www.twitter.com/ReverseBrain Vendor Homepage: https://www.zyxel.com Software Link:...

D-Link DVG-N5402SP Cross Site Scripting

DLink Multiple Cross Site Scripting Vulnerabilities Vendor : www.dlink.com Product Model: DVG­N5402SP Published: 02/22/2016 Discovered by vesp3r [email protected] Advisory Timeline ----------------- 02/05/2016 - Vendor notified No response Vulnerability ------------- Reflected Cross Site...

CVE-2014-2962

Absolute path traversal vulnerability in the webproc cgi module on the Belkin N150 F9K1009 v1 router with firmware before 1.00.08 allows remote attackers to read arbitrary files via a full pathname in the getpage parameter...

Path traversal

Absolute path traversal vulnerability in the webproc cgi module on the Belkin N150 F9K1009 v1 router with firmware before 1.00.08 allows remote attackers to read arbitrary files via a full pathname in the getpage parameter...

CVE-2006-5607

Directory traversal vulnerability in /cgi-bin/webcm in INCA IM-204 allows remote attackers to read arbitrary files via a "/./." modified dot dot sequences in the getpage parameter...