EUVD-2016-2005

Malware in sbrugna...

EUVD-2016-2006

Malware in sbrugna...

EUVD-2016-2007

Malware in sbrugna...

CVE-2016-11014

NETGEAR JNR1010 devices before 1.0.0.32 have Incorrect Access Control because the ok value of the auth cookie is a special case...

CVE-2016-11015

NETGEAR JNR1010 devices before 1.0.0.32 allow cgi-bin/webproc CSRF via the :InternetGatewayDevice.XTWSZ-COMURLFilter.BlackList.1.URL parameter...

CVE-2016-11016

NETGEAR JNR1010 devices before 1.0.0.32 allow webproc?getpage= XSS...

Injection Vulnerability in Multiple NETGEAR Products (CNVD-2020-31241)

NETGEAR JNR1010 and others are products of NETGEAR, Inc.NETGEAR JNR1010 is a wireless router.NETGEAR D6200 is a wireless modem.NETGEAR WNR2020 is a wireless router.NETGEAR WNR2020 is a wireless router.NETGEAR WNR2020 is a wireless router.NETGEAR WNR2020 is a wireless router.NETGEAR WNR2020 is a...

Injection Vulnerability in Multiple NETGEAR Products (CNVD-2020-31242)

NETGEAR JNR1010 and others are products of NETGEAR, Inc.NETGEAR JNR1010 is a wireless router.NETGEAR D6200 is a wireless modem.NETGEAR WNR2020 is a wireless router.NETGEAR WNR2020 is a wireless router.NETGEAR WNR2020 is a wireless router.NETGEAR WNR2020 is a wireless router.NETGEAR WNR2020 is a...

NETGEAR JNR1010 Cross-Site Request Forgery Vulnerability

The NETGEAR JNR1010 is a wireless router from NETGEAR. A cross-site request forgery vulnerability exists in the NETGEAR JNR1010 prior to version 1.0.0.32. The vulnerability stems from a WEB application that does not adequately validate that a request is coming from a trusted user, and can be...

CVE-2016-11016

NETGEAR JNR1010 devices before 1.0.0.32 allow webproc?getpage= XSS...

CVE-2016-11015

NETGEAR JNR1010 devices before 1.0.0.32 allow cgi-bin/webproc CSRF via the :InternetGatewayDevice.XTWSZ-COMURLFilter.BlackList.1.URL parameter...

CVE-2016-11016

NETGEAR JNR1010 devices before 1.0.0.32 allow webproc?getpage= XSS...

CVE-2016-11014

NETGEAR JNR1010 devices before 1.0.0.32 have Incorrect Access Control because the ok value of the auth cookie is a special case...

Cross site scripting

NETGEAR JNR1010 devices before 1.0.0.32 allow webproc?getpage= XSS...

CVE-2016-11015

NETGEAR JNR1010 devices prior to firmware 1.0.0.32 are affected by a CSRF vulnerability in the web UI: cgi-bin/webproc can be invoked via the parameter :InternetGatewayDevice.X_TWSZ-COM_URL_Filter.BlackList.1.URL. The issue enables cross-site request forgery. Remediation: upgrade to firmware vers...

CVE-2016-11015

NETGEAR JNR1010 devices before 1.0.0.32 allow cgi-bin/webproc CSRF via the :InternetGatewayDevice.XTWSZ-COMURLFilter.BlackList.1.URL parameter...

CVE-2016-11016

NETGEAR JNR1010 devices before 1.0.0.32 allow webproc?getpage= XSS...

NETGEAR JNR1010 Cross-Site Scripting Vulnerability

The NETGEAR JNR1010 is a wireless router from NETGEAR. A cross-site scripting vulnerability exists in versions prior to NETGEAR JNR1010 1.0.0.32, which can be exploited by an attacker to execute client-side code...

PT-2019-7808

Name of the Vulnerable Software and Affected Versions NETGEAR JNR1010 devices versions prior to 1.0.0.32 Description The issue allows for CSRF via the :InternetGatewayDevice.X TWSZ-COM URL Filter.BlackList.1.URL parameter in the cgi-bin/webproc endpoint. Recommendations For versions prior to...

PT-2019-7809

Name of the Vulnerable Software and Affected Versions NETGEAR JNR1010 devices versions prior to 1.0.0.32 Description The issue allows for XSS attacks through the webproc?getpage= endpoint. Recommendations For versions prior to 1.0.0.32, update to version 1.0.0.32 or later to resolve the issue...