274 matches found
NETGEAR R7800 Buffer Overflow Vulnerability (CNVD-2020-23425)
The NETGEAR R7800 is a wireless router from NETGEAR. A buffer overflow vulnerability exists in the NETGEAR R7800 prior to version 1.0.2.52. The vulnerability originates when a network system or product performs an operation on memory without properly validating data boundaries, resulting in an...
NETGEAR XR500 and XR700 Injection Vulnerability
The NETGEAR XR700 and NETGEAR XR500 are both wireless routers from NETGEAR. An injection vulnerability exists in the NETGEAR XR500 prior to version 2.3.2.56 and the XR700 prior to version 1.0.1.20, which can be exploited by an attacker to cause the system or product to generate an error in the wa...
NETGEAR RBR50, RBS50 and RBK50 Cross-Site Scripting Vulnerabilities
The NETGEAR RBK50, among others, is a wireless router from NETGEAR. A cross-site scripting vulnerability exists in the NETGEAR RBR50 version prior to 2.3.5.30, RBS50 version prior to 2.3.5.30, and RBK50 version prior to 2.3.5.30, which stems from the lack of proper validation of client-side data ...
Cross-site scripting vulnerability in multiple NETGEAR products (CNVD-2020-24416)
The NETGEAR RBK50, among others, is a wireless router from NETGEAR. A cross-site scripting vulnerability exists in multiple NETGEAR products, which stems from a lack of proper validation of client data by a WEB application and can be exploited by an attacker to execute client-side code...
Cross-site scripting vulnerability in multiple NETGEAR products (CNVD-2020-27219)
The NETGEAR RBK50, among others, is a wireless router from NETGEAR. A cross-site scripting vulnerability exists in multiple NETGEAR products, which stems from a lack of proper validation of client data by a WEB application and can be exploited by an attacker to execute client-side code...
Command Execution Vulnerability in NETGEAR R6400v2
The NETGEAR R6400v2 is a smart WiFi router. The NETGEAR R6400v2 suffers from a command execution vulnerability. An attacker can exploit the vulnerability to execute commands and gain server privileges...
CVE-2019-17137
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR AC1200 R6220 Firmware version 1.1.0.86 Smart WiFi Router. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of path strings...
NETGEAR JNR1010 Access Control Error Vulnerability
The NETGEAR JNR1010 is a wireless router from NETGEAR. An Access Control Error vulnerability exists in the NETGEAR JNR1010 prior to version 1.0.0.32, which arises from a network system or product that does not properly restrict access to resources from unauthorized roles. No detailed vulnerabilit...
Netgear DGN2200 Information Disclosure
An information disclosure vulnerability exists in Netgear DGN2200 and DGND3700 routers. Successful exploitation could result in the disclosure of sensitive information...
Hacker Compromises Air Force Captain to Steal Sensitive Drone Info
A hacker has penetrated an Air Force captain’s computer to steal sensitive information about U.S. military drones and other state secrets, according to a cybersecurity firm’s investigation of dark web activities. On June 1, Recorded Future’s Insikt Group was monitoring underground criminal activi...
Hacker Sold Stolen U.S. Military Drone Documents On Dark Web For Just $200
You never know what you will find on the hidden Internet 'Dark Web.' Just about an hour ago we reported about someone selling remote access linked to security systems at a major International airport for $10. It has been reported that a hacker was found selling sensitive US Air Force documents on...
NETGEAR ADSL Router WNR500/WNR612v3/JNR1010/JNR2010 - Authenticated Remote File Disclosure Exploit
Exploit for hardware platform in category remote exploits !/bin/sh NETGEAR ADSL ROUTER Authenticated Remote File Disclosure Hardware Version: WNR500 / WNR612v3 / JNR1010 / JNR2010 Firmware Version: 1.0.7.2 / 1.0.0.9 / 1.0.0.32 / 1.0.0.20 Copyright 2016 c Todor Donev https://www.ethical-hacker.org...
Netgear Router Cross-Site Scripting Vulnerability
The NETGEAR Router is the router device. A cross-site scripting vulnerability exists in Netgear Router Firmware version 1.0.0.24. An attacker is able to steal a cookie to intercept the session of a logged in user...
Multiple Vulnerabilities in Netgear Router JNR1010
Netgear Router JNR1010 is a wireless router product. The Netgear Router JNR1010 is vulnerable to authentication bypass and improper session management. The developer frequently establishes authentication and session management schemes that are vulnerable in logout, password management, timeout, a...
Netgear 1.0.0.24 Bypass / Improper Session Management
Hi, Can you assign CVE id to this flaw? Details ================ Product Vendor: Netgear Netgear GPL: http://kb.netgear.com/app/answers/detail/aid/2649//netgear-open-source-code-for-programmers-gpl http://www.gnu.org/licenses/gpl.txt Bug Name: Broken Authentication & Improper Session Management i...
Netgear 1.0.0.24 Cross Site Request Forgery
Details ================ Product Vendor: Netgear Netgear GPL: http://kb.netgear.com/app/answers/detail/aid/2649//netgear-open-source-code-for-programmers-gpl http://www.gnu.org/licenses/gpl.txt Bug Name: Cross Site Request Forgery in Netgear Router JNR1010 Version 1.0.0.24 Software: Netgear Route...
Netgear G54/N150 WNR1000v3 Router安全绕过漏洞
No description provided by source...
Netgear G54/N150 WNR1000v3 Router Security Bypass Vulnerability
Netgear G54/N150 WNR1000v3 is a wireless router product. A security bypass vulnerability exists in the Netgear G54/N150 WNR1000v3, which allows remote attackers to bypass security restrictions and gain unauthorized access...
Authentication Bypass in Netgear Router Firmware N300_1.1.0.31_1.0.1.img and N300-1.1.0.28_1.0.1.img
COMPASS SECURITY ADVISORY http://www.csnc.ch/en/downloads/advisories.html Product: Netgear Router Firmware N3001.1.0.311.0.1.img and N300-1.1.0.281.0.1.img Vendor: NETGEAR CVE ID: requested Subject: Authentication Bypass Risk: High Effect: Remotely exploitable over LAN/WLAN Author: Daniel Haake...