12226 matches found
NETGEAR ProSAFE Network Management System getNodesByTopologyMapSearch SQL Injection Vulnerability
NETGEAR ProSAFE Network Management System is a network management system. The NETGEAR ProSAFE Network Management System suffers from a SQL injection vulnerability that originates in the getNodesByTopologyMapSearch function, which can be exploited by an attacker to obtain sensitive information or...
NETGEAR ProSAFE Network Management System clearAlertByIds Function SQL Injection Vulnerability
NETGEAR ProSAFE Network Management System is a network management system. The NETGEAR ProSAFE Network Management System suffers from a SQL injection vulnerability that originates in the clearAlertByIds function and can be exploited by an attacker to obtain sensitive information or execute arbitra...
NETGEAR CAX30 Buffer Overflow Vulnerability
The NETGEAR CAX30 is a Nighthawk AX6 Series 6-Stream WiFi 6 Router from Netgear that supports DOCSIS 3.1 technology to deliver multi-gigabit Internet and wireless speeds for simultaneous use of smart devices in the home during peak times. The NETGEAR CAX30 suffers from a buffer overflow...
The vulnerability of the sso microprogramming software files of NETGEAR CAX30 allows a hacker to execute arbitrary code.
The vulnerability of NETGEAR CAX30 router microprogramming devices’ sso files relates to reading data beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code in the context of the root user...
NETGEAR ProSAFE Network Management System getNodesByTopologyMapSearch SQL Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Authentication is required to exploit this vulnerability. The specific flaw exists within the getNodesByTopologyMapSearch function. The issue results from t...
NETGEAR ProSAFE Network Management System clearAlertByIds SQL Injection Privilege Escalation Vulnerability
This vulnerability allows remote attackers to escalate privileges on affected installations of NETGEAR ProSAFE Network Management System. Authentication is required to exploit this vulnerability. The specific flaw exists within the clearAlertByIds function. The issue results from the lack of prop...
PT-2023-7597 · NetGear · Netgear Orbi Rbr750
Name of the Vulnerable Software and Affected Versions: Netgear Orbi RBR750 versions prior to V7.2.6.21 Description: The issue is related to a stack-based buffer overflow in the /usr/sbin/httpd process. It is also associated with the strlcpy function, which can cause a buffer overflow when handlin...
NETGEAR CAX30 SSO Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR CAX30 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the sso binary. The issue results from the lack of proper validation of...
PT-2023-7106 · NetGear · Netgear Cax30
Name of the Vulnerable Software and Affected Versions: NETGEAR CAX30 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR CAX30 routers. The specific flaw exists within the sso binary, resulting fr...
VulnCheck KEV: CVE-2017-18378
In NETGEAR ReadyNAS Surveillance before 1.4.3-17 x86 and before 1.1.4-7 ARM, $GET'uploaddir' is not escaped and is passed to system through $tmpuploaddir, leading to upgradehandle.php?cmd=writeuploaddir remote command execution...
VulnCheck KEV: CVE-2022-29383
NETGEAR ProSafe SSL VPN firmware FVS336Gv2 and FVS336Gv3 was discovered to contain a SQL injection vulnerability via USERDBDomains.Domainname at cgi-bin/platform.cgi...
The vulnerability of the web interface of Netgear WNDR3700 microprogramming software allows a hacker to trigger a service failure.
The vulnerability of the web interface of Netgear WNDR3700 router software lies in improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability of the web interface of Netgear WNDR3700 microprogramming software allows a hacker to trigger a service failure.
The vulnerability of the web interface of Netgear WNDR3700 router software lies in improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...
NETGEAR ProSAFE Network Management System Authentication Bypass (CVE-2023-38096)
Binary data netgearnmszdi-23-920.nbin...
NETGEAR R6400v2 Code Execution Vulnerability
The NETGEAR R6400v2 is a router from NETGEAR. A hardware device that connects two or more networks and acts as a gateway between networks. The NETGEAR R6400v2 suffers from a code execution vulnerability that stems from the program's failure to properly filter special elements that construct code...
The vulnerability of the httpd microprogramming system in Wi-Fi routers from NETGEAR R6400v2 allows a intruder to execute arbitrary code.
The vulnerability of the httpd microprogramming system in NETGEAR R6400v2 Wi-Fi routers lies in the fact that the execution of operations goes beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created malicious web page...
NETGEAR Orbi 760 SOAP API Authentication Bypass Vulnerability
The NETGEAR Orbi 760 is a router for NETGEAR's tri-band Wi-Fi Mesh system. The NETGEAR Orbi 760 suffers from an authentication bypass vulnerability for which no detailed vulnerability details have been provided...
Metasploit Weekly Wrap-Up
Pumpkin Spice Modules Here in the northern hemisphere, fall is on the way: leaves changing, the air growing crisp and cool, and some hackers changing the flavor of their caffeine. This release features a new exploit module targeting Apache NiFi as well as a new and improved library to interact wi...
