EUVD-2016-2047

Malware in sbrugna...

EUVD-2021-7629

Malicious code in bioql PyPI...

CVE-2021-20172

All known versions of the Netgear Genie Installer for macOS contain a local privilege escalation vulnerability. The installer of the macOS version of Netgear Genie handles certain files in an insecure way. A malicious actor who has local access to the endpoint on which the software is going to be...

CVE-2021-20172

All known versions of the Netgear Genie Installer for macOS contain a local privilege escalation vulnerability. The installer of the macOS version of Netgear Genie handles certain files in an insecure way. A malicious actor who has local access to the endpoint on which the software is going to be...

CVE-2021-20172

All known versions of the Netgear Genie Installer for macOS contain a local privilege escalation vulnerability. The installer of the macOS version of Netgear Genie handles certain files in an insecure way. A malicious actor who has local access to the endpoint on which the software is going to be...

Privilege escalation

All known versions of the Netgear Genie Installer for macOS contain a local privilege escalation vulnerability. The installer of the macOS version of Netgear Genie handles certain files in an insecure way. A malicious actor who has local access to the endpoint on which the software is going to be...

CVE-2021-20172

All known versions of the Netgear Genie Installer for macOS contain a local privilege escalation vulnerability. The installer of the macOS version of Netgear Genie handles certain files in an insecure way. A malicious actor who has local access to the endpoint on which the software is going to be...

CVE-2021-20172

CVE-2021-20172 affects the macOS Netgear Genie Installer. All known versions handle certain files insecurely, enabling a local attacker with access to overwrite files and achieve root privilege escalation. Documentation here confirms the vulnerability and impact but provides no specific patch/ver...

PT-2021-13824

Name of the Vulnerable Software and Affected Versions: Netgear Genie Installer for macOS affected versions not specified Description: The Netgear Genie Installer for macOS contains a local privilege escalation issue due to insecure file handling. A malicious actor with local access to the endpoin...

Netgear genie 权限许可和访问控制问题漏洞

Netgear genie, a Netgear program that presents itself as a dashboard, is vulnerable to a permission and access control issue in Netgear Genie Installer for macOS, which stems from the fact that all known versions of Netgear Genie Installer contain a local elevation of privileges vulnerability. Th...

CVE-2021-20172: Incorrect Permission Assignment for Critical Resource

All known versions of the Netgear Genie Installer for macOS contain a local privilege escalation vulnerability. The installer of the macOS version of Netgear Genie handles certain files in an insecure way. A malicious actor who has local access to the endpoint on which the software is going to be...

Netgear Genie 2.4.64 Unquoted Service Path

Exploit Title: Netgear Genie 2.4.64 - Unquoted Service Path Exploit Author: Mert DAŞ Version: 2.4.64 Date: 23.10.2021 Vendor Homepage: https://www.netgear.com/ Tested on: Windows 10 C:\Users\Mertsc qc NETGEARGenieDaemon SC QueryServiceConfig SUCCESS SERVICENAME: NETGEARGenieDaemon TYPE : 10...

Netgear Genie 2.4.64 - Unquoted Service Path Vulnerability

Exploit Title: Netgear Genie 2.4.64 - Unquoted Service Path Exploit Author: Mert DAŞ Version: 2.4.64 Vendor Homepage: https://www.netgear.com/ Tested on: Windows 10 C:\Users\Mertsc qc NETGEARGenieDaemon SC QueryServiceConfig SUCCESS SERVICENAME: NETGEARGenieDaemon TYPE : 10 WIN32OWNPROCESS...

CVE-2016-11058

The NETGEAR genie application before 2.4.34 for Android is affected by mishandling of hard-coded API keys and session IDs...

CVE-2016-11058

The NETGEAR genie application before 2.4.34 for Android is affected by mishandling of hard-coded API keys and session IDs...

CVE-2016-11058: Insufficient Session Expiration

The NETGEAR genie application before 2.4.34 for Android is affected by mishandling of hard-coded API keys and session IDs...

PT-2020-7987

Name of the Vulnerable Software and Affected Versions: NETGEAR genie application version prior to 2.4.34 for Android Description: The issue concerns the mishandling of hard-coded API keys and session IDs. Recommendations: For versions prior to 2.4.34, update to version 2.4.34 or later to resolve...

CVE-2019-12510

In NETGEAR Nighthawk X10-R900 prior to 1.0.4.26, an attacker may bypass all authentication checks on the device's "NETGEAR Genie" SOAP API "/soap/serversa" by supplying a malicious X-Forwarded-For header of the device's LAN IP address 192.168.1.1 in every request. As a result, an attacker may...

CVE-2019-12510: Insufficient Verification of Data Authenticity

In NETGEAR Nighthawk X10-R900 prior to 1.0.4.26, an attacker may bypass all authentication checks on the device's "NETGEAR Genie" SOAP API "/soap/serversa" by supplying a malicious X-Forwarded-For header of the device's LAN IP address 192.168.1.1 in every request. As a result, an attacker may...

CVE-2019-12511: Improper Neutralization of Special Elements used in an OS Command

In NETGEAR Nighthawk X10-R9000 prior to 1.0.4.26, an attacker may execute arbitrary system commands as root by sending a specially-crafted MAC address to the "NETGEAR Genie" SOAP endpoint at AdvancedQoS:GetCurrentBandwidthByMAC. Although this requires QoS being enabled, advanced QoS being enabled...