EUVD-2018-20381

Malware in sbrugna...

CVE-2019-6441

An issue was discovered on Shenzhen Coship RT3050 4.0.0.40, RT3052 4.0.0.48, RT7620 10.0.0.49, WM3300 5.0.0.54, and WM3300 5.0.0.55 devices. The password reset functionality of the router doesn't have backend validation for the current password and doesn't require any type of authentication. By...

CVE-2019-6441

CVE-2019-6441 affects Shenzhen Coship RT3050/RT3052/RT7620/WM3300 devices (firmware versions 4.0.0.40/4.0.0.48/10.0.0.49/5.0.0.54/5.0.0.55). The issue is an unauthenticated password reset function: the router’s password reset workflow does not validate the current password and requires no authent...

CVE-2019-6441: Improper Authentication

An issue was discovered on Shenzhen Coship RT3050 4.0.0.40, RT3052 4.0.0.48, RT7620 10.0.0.49, WM3300 5.0.0.54, and WM3300 5.0.0.55 devices. The password reset functionality of the router doesn't have backend validation for the current password and doesn't require any type of authentication. By...

Coship RT3052 Cross-Site Scripting Vulnerability

Coship RT3052 is a wireless router product from Coship, China. A cross-site scripting vulnerability exists in the Coship RT3052 version 4.0.0.48. The vulnerability can be exploited by remote attackers to inject arbitrary web script or HTML via a specially crafted SSID field on the Wireless Settin...

CVE-2018-8772

Coship RT3052 4.0.0.48 devices allow XSS via a crafted SSID field on the "Wireless Setting - Basic" screen...

Design/Logic Flaw

Coship RT3052 4.0.0.48 devices allow XSS via a crafted SSID field on the "Wireless Setting - Basic" screen...

CVE-2018-8772

Coship RT3052 4.0.0.48 devices allow XSS via a crafted SSID field on the "Wireless Setting - Basic" screen...

CVE-2018-8772

Coship RT3052 4.0.0.48 devices allow XSS via a crafted SSID field on the "Wireless Setting - Basic" screen...

CVE-2018-8772

CVE-2018-8772 : Coship RT3052 wireless router (version 4.0.0.48) is affected by a cross-site scripting (XSS) vulnerability that can be triggered by a crafted SSID in the Wireless Setting – Basic page. Multiple connected sources confirm the vulnerability exists in the router’s web interface and al...

CVE-2018-8772: Improper Neutralization of Input During Web Page Generation

Coship RT3052 4.0.0.48 devices allow XSS via a crafted SSID field on the "Wireless Setting - Basic" screen...

Coship RT3052 Wireless Router - Persistent Cross-Site Scripting

Coship RT3052 Wireless Router - Persistent Cross-Site Scripting Exploit Title: Coship RT3052 Wireless Router - Persistent Cross Site Scripting XSS Date: 2018-03-18 Exploit Author: Sayan Chatterjee Vendor Homepage: http://en.coship.com/ Category: Hardware Wifi Router Version: 4.0.0.48 Tested on:...

Coship RT3052 Wireless Router - Persistent Cross-Site Scripting

Exploit Title: Coship RT3052 Wireless Router - Persistent Cross Site Scripting XSS Date: 2018-03-18 Exploit Author: Sayan Chatterjee Vendor Homepage: http://en.coship.com/ Category: Hardware Wifi Router Version: 4.0.0.48 Tested on: Windows 10 CVE: CVE-2018-8772 Proof of Concept =================...