ASUS WRT-AC66U 3.x - Cross Site Scripting Vulnerability

Document Title: =============== ASUS WRT-AC66U 3.x - Cross Site Scripting Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1993 Release Date: ============= 2018-06-26 Vulnerability Laboratory ID VL-ID: ====================================...

Netkids

Children today are completely at home in the digital space. They use digital diaries and textbooks at school, communicate via instant messaging, play games on mobile devices not to mention PCs and consoles, and create mini masterpieces on tablets and laptops. This total immersion in the digital...

21 grams of mobile pro-link assistant app has a logical design flaw

21g cell phone pro-connection assistant APP is a software that comes with 21g cell phone for helping children to operate their mom and dad's cell phone remotely, so that children can connect with their mom and dad's cell phone at any time in the easiest way. A logical design vulnerability exists ...

VTech DigiGo 83.60630 Broken TLS Certificate Validation

------------------------------------------------------------------------ Broken TLS certificate validation in VTech DigiGo browser ------------------------------------------------------------------------ Sipke Mellema, September 2017...

HouseProxy - HTTP proxy focused on block phishing URL's

Protect your parents from phishing, HTTP proxy focused on block phishing URL's Install git clone https://github.com/mthbernardes/HouseProxy.git cd HouseProxy/ pip install -r requeriments.txt Config Edit etc/HouseProxy.conf to change de default user and password Create a entry in your DNS to...

Popular ‘Circle with Disney’ Parental Control System Riddled With 23 Vulnerabilities

The makers of the popular parental control system called Circle with Disney patched 23 vulnerabilities over the weekend. The bugs ran the gamut from memory corruption and denial of service, to SSL validation vulnerabilities and impact all devices managed on a network. Circle with Disney is a $90...

Circle with Disney Apid Use-Between-Reallocs Information Disclosure Vulnerability

Summary An exploitable information disclosure vulnerability exists in the apid daemon of the Circle with Disney running firmware 2.0.1. A specially crafted set of packets can make the Disney Circle dump strings from an internal database into an HTTP response. An attacker needs network connectivit...

ESET Parental Control - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application ESET Parental Control published at the 'play' market has multiple vulnerabilities...

Norton Family parental control - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Norton Family parental control published at the 'play' market has multiple vulnerabilities...

GENEXIS devices with DRGOS remote code execution vulnerability

GENEXIS devices with DRGOS is an operating system for use in home network gateways from the Dutch company GENEXIS. A security vulnerability exists in the Parental control panel in GENEXIS devices with DRGOS versions prior to 1.14.1. A remote attacker can exploit the vulnerability with the help of...

Code injection

The Parental Control panel in Genexis devices with DRGOS before 1.14.1 allows remote authenticated users to execute arbitrary CLI commands via the 1 starthour, 2 startminute, 3 endhour, 4 endminute, or 5 hostname parameter...

CVE-2015-3441

The Parental Control panel in Genexis devices with DRGOS before 1.14.1 allows remote authenticated users to execute arbitrary CLI commands via the 1 starthour, 2 startminute, 3 endhour, 4 endminute, or 5 hostname parameter...

CVE-2015-3441

Genexis DRGOS devices prior to version 1.14.1 are affected by a remote code execution flaw in the Parental Control panel. An authenticated remote attacker can exploit this by supplying values to (start_hour, start_minute, end_hour, end_minute, or hostname) to execute arbitrary CLI commands. The v...

Screen Time Parental Control - Dangerous filesystem permissions, MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Screen Time Parental Control published at the 'play' market has multiple vulnerabilities...

Kids Place - Parental Control - Customized SSL, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Kids Place - Parental Control published at the 'play' market has multiple vulnerabilities...

The core area of URL filtering vulnerability affects Samsung Note 3, The Galaxy S6(CVE-2 0 1 6-2 0 3 6)-vulnerability warning-the black bar safety net

A Samsung Note 3, The Galaxy S6 phone Bug-the kernel area of the URL filter will appear what problem? Author: Roberto Paleari @rpaleari and Aristide Fattori @joystickID: CVE-2 0 1 6-2 0 3 6 notification date: 20/10/2 0 1 5 release date: 20/01/2 0 1 6 in the study of the Samsung Android kernel, we...

Windows Spy Keylogger - Software to Log Keystrokes in Stealth Mode for 32-bit/64-bit processes on Windows XP/Vista/7/8/10

Windows Spy Keylogger is the free software to help you covertly monitor all activities on your computer. It intercepts everything that is typed on keyboard and stores into one log file which you can view it anytime later. You can track logins , passwords , emails , chats and all other secret thin...

D-Link DSL-500B Gen 2 - Parental Control Configuration Panel Persistent Cross-Site Scripting

!/usr/bin/perl Date dd-mm-aaaa: 13-02-2015 Exploit for D-Link DSL-500B G2 Cross Site Scripting XSS Injection Stored in todmngr.tod Developed by Mauricio Corrêa XLabs Information Security WebSite: www.xlabs.com.br CAUTION! This exploit disables some features of the modem, forcing the administrator...

TP-Link TL-WR740N v4 Router (FW-Ver. 3.16.6 Build 130529 Rel.47286n) - Command Execution

Exploit for hardware platform in category web applications Vulnerability description: The domain name parameters of the "Parental Control" and "Access Control" features of the TP-Link TL-WR740N v4 FW-Ver. 3.16.6 Build 130529 Rel.47286n router are prone to arbitrary shell command execution as root...

TP-Link TL-WR740N v4 Router (FW-Ver. 3.16.6 Build 130529 Rel.47286n) - Command Execution

TP-Link TL-WR740N v4 Router FW-Ver. 3.16.6 Build 130529 Rel.47286n - Command Execution Exploit Title: TP-Link TL-WR740N v4 router FW-Ver. 3.16.6 Build 130529 Rel.47286n arbitrary shell command execution Date: 08/03/2014 Exploit Author: Christoph Kuhl Vendor Homepage: http://www.tp-link.com Softwa...