PT-2020-7951

Name of the Vulnerable Software and Affected Versions: NETGEAR Prosafe WC9500 version 5.1.0.17 NETGEAR Prosafe WC7600 version 5.1.0.17 NETGEAR Prosafe WC7520 version 2.5.0.35 Description: The issue allows a remote attacker to execute code with root privileges via shell metacharacters in the...

NETGEAR ProSAFE Devices Detection (Telnet)

Telnet based detection of NETGEAR ProSAFE devices. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

NETGEAR ProSAFE Device Detection Consolidation

Consolidation of NETGEAR ProSAFE device detections. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

NETGEAR ProSAFE Devices Detection (SNMP)

This script performs SNMP based detection of NETGEAR ProSAFE devices. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

NETGEAR ProSAFE Plus Configuration Utility vulnerable to improper access control

Overview ProSAFE Plus Configuration Utility provided by NETGEAR is a Windows application to configure and manage NETGEAR's ProSAFE Plus and Click Switches. An operator uses the utility to login and configure NETGEAR switches. When the utility is invoked, it starts listening on a certain port for...

Netgear ProSAFE NMS300 fileUpload.do Arbitrary File Upload (CVE-2016-1524; CVE-2016-1525)

An arbitrary file upload vulnerability exists in Netgear ProSafe NMS300. The vulnerability is due to inadequate access control and input validation error when accepting user uploaded files to fileUpload.do control. A remote unauthenticated attacker could exploit this vulnerability by sending...

NETGEAR ProSafe Network Management System 300 Arbitrary File Upload

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit4 'NETGEAR ProSafe Network Management System 300 Arbitrary File Upload', 'Description' = %q Netgear's ProSafe NMS300 is a network...

Netgear Pro NMS 300 Code Execution / File Download

Remote code execution / arbitrary file download in NETGEAR ProSafe Network Management System NMS300 Discovered by Pedro Ribeiro [email protected], Agile Information Security http://www.agileinfosec.co.uk/ ========================================================================== Disclosure:...

NETGEAR ProSAFE NMS300 security exploit guide-vulnerability warning-the black bar safety net

! A security researcher has released code that Netgear ProSAFE NMS300 network management system there are two entries available of serious security vulnerabilities. If you are using the Netgear ProSAFE NMS300 management system? If the answer is Yes, then you probably want to worry about--because...

NETGEAR ProSafe Network Management System 300 Authenticated File Download

Netgear's ProSafe NMS300 is a network management utility that runs on Windows systems. The application has a file download vulnerability that can be exploited by an authenticated remote attacker to download any file in the system. This module has been tested with versions 1.5.0.2, 1.4.0.17 and...

Netgear ProSafe Network Management System NMS300 - Multiple Vulnerabilities

Exploit for hardware platform in category web applications Remote code execution / arbitrary file download in NETGEAR ProSafe Network Management System NMS300 Discovered by Pedro Ribeiro email protected, Agile Information Security http://www.agileinfosec.co.uk/...

Netgear Prosafe multiple security vulnerabilities

Authentication bypass, privilege escalation...

Netgear Prosafe multiple security vulnerabilities

XSS, headers injection, SQL injection...

Netgear Prosafe VPN Firewalls - Multiple vulnerabilities

About Encripto AS ================= Encripto is a Norwegian company which provides specialized services within IT-security. Our core expertise is security testing, network security monitoring and training. Encripto is committed to information security. We do research to discover trends, new...

CVE-2014-4864

The NETGEAR ProSafe Plus Configuration Utility creates configuration backup files containing cleartext passwords, which might allow remote attackers to obtain sensitive information by reading a file...

CVE-2014-4864: Undefined Security Weakness

The NETGEAR ProSafe Plus Configuration Utility creates configuration backup files containing cleartext passwords, which might allow remote attackers to obtain sensitive information by reading a file...

PT-2014-6175

Name of the Vulnerable Software and Affected Versions NETGEAR ProSafe Plus Configuration Utility affected versions not specified Description The issue allows remote attackers to obtain sensitive information by reading a configuration backup file that contains cleartext passwords. Recommendations ...

Netgear ProSafe - Information Disclosure Vulnerability

No description provided by source...

Netgear ProSafe - Denial of Service Vulnerability

No description provided by source. !/usr/bin/python Netgear ProSafe - CVE-2013-4776 PoC written by Juan J. Guelfo @ Encripto AS [email protected] Copyright 2013 Encripto AS. All rights reserved. This software is licensed under the FreeBSD license. http://www.encripto.no/tools/license.php import sy...

CVE-2013-4776

NETGEAR ProSafe GS724Tv3 and GS716Tv2 with firmware 5.4.1.13 and earlier, GS748Tv4 5.4.1.14, and GS510TP 5.0.4.4 allows remote attackers to cause a denial of service reboot or crash via a crafted HTTP request to filesystem/...