Roteador Wireless Intelbras WRN150 - Cross-Site Scripting Vulnerability

Exploit for hardware platform in category web applications Exploit Title: XSS persistent on intelbras router with firmware WRN 250 Date: 07/09/2017 Exploit Author: Elber Tavares Vendor Homepage: http://intelbras.com.br/ Version: Intelbras Wireless N 150Mbps - WRN 240 Tested on: kali linux, window...

PT-2017-7900 · D Link · D-Link Dir-600

Name of the Vulnerable Software and Affected Versions: D-Link DIR-600L routers rev. Ax with firmware prior to FW1.17.B01 Description: A session fixation issue allows remote attackers to hijack web sessions. The exact vectors used for the attack are not specified. Recommendations: For D-Link...

WSR-300HP vulnerable to arbitrary code execution

Overview WSR-300HP provided by BUFFALO INC. contains an arbitrary code execution vulnerability. WSR-300HP provided by BUFFALO INC. is a wireless LAN router. WSR-300HP contains an arbitrary code execution vulnerability. Impact By executing a specially crafted request prepared by a remote attacker,...

Technicolor TC7337 Stored Cross-Site Scripting Vulnerability

Technicolor TC7337 routers is a wireless router from Technicolor France. A cross-site scripting vulnerability exists in the Technicolor TC7337 router version 08.89.17.20.00. A remote attacker can exploit this vulnerability to cause DNS pollution and steal router credentials...

Teltonika RUT9XX Router Arbitrary Command Execution Vulnerability

Teltonika RUT9XX routers also known as LuCI is a router product from the Lithuanian company Teltonika. A security vulnerability exists in the administration interface of Teltonika RUT9XX routers with firmware version 00.03.265 and earlier. The vulnerability can be exploited by a remote attacker t...

Beetel BCM96338 Router DNS Change Vulnerability

The Beetel BCM96338 is a router. A DNS change vulnerability exists in the Beetel BCM96338 router. An attacker can exploit the vulnerability to access sites and devices on vulnerable systems, redirecting to malicious sites...

D-Link DSL-2640B DNS Change Vulnerability

The D-Link DSL-2640B is a router device. A security vulnerability exists in the D-Link DSL-2640B. The vulnerability exists in the web interface and can be exploited by an attacker to access sites and devices on vulnerable systems, redirecting to a malicious site...

Ghost to reproduce: part of the WiMAX routing device to authenticate the existence of the bypass and back door vulnerability-vulnerability warning-the black bar safety net

The SEC's security personnel in some of the WiMAX router on found a vulnerability, this vulnerability allows an attacker to change the router administrator password, and then get on the vulnerabilities of the device control. Worse, if an attacker took control of these contains a vulnerability in...

CVE-2017-9542

D-Link DIR-615 Wireless N 300 Router allows authentication bypass via a modified POST request to login.cgi. This issue occurs because it fails to validate the password field. Successful exploitation of this issue allows an attacker to take control of the affected device...

CVE-2017-9139

There is a stack-based buffer overflow on some Tenda routers FH1202/F1202/F1200: versions before 1.2.0.20. Crafted POST requests to an unspecified URL result in DoS, interrupting the HTTP service used to login to the web UI of a router for 1 to 2 seconds...

Cisco CVR100W Wireless-N VPN Router Security Restriction Bypass Vulnerability

The CISCO CVR100W is a combination of wired/wireless network connectivity, VPN, firewall and many other features. A security vulnerability exists in the Remote Management Access Control List feature of the Cisco CVR100W Wireless-N VPN Router, where an unauthenticated remote attacker bypasses the...

WN-G300R3 OS Command Injection Vulnerability

The WN-G300R3 is a wireless LAN router device from I-O DATA DEVICE. The WN-G300R3 suffers from an OS command injection vulnerability that can be exploited by an attacker to execute arbitrary OS commands on the product...

WN-G300R3 Stack Buffer Overflow Vulnerability

The WN-G300R3 is a wireless LAN router device from I-O DATA DEVICE. The WN-G300R3 suffers from a stack buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary OS commands on the product...

WN-G300R3 vulnerable to stack based buffer overflow

Overview WN-G300R3 provided by I-O DATA DEVICE, INC. contain a stack based buffer overflow vulnerability. Taizoh Tsukamoto of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership...

The vulnerability of Huawei AR3200 router’s micro-programming software allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of Huawei AR3200 router’s micro-programming software exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code using a specially crafted network packet...

D-Link DIR-600M Rev. Cx Cross-Site Request Forgery Vulnerability

The D-Link DIR-600M Rev. Cx is a wireless router product from AUO. A cross-site request forgery vulnerability exists in the D-Link DIR-600M Rev. Cx. It allows remote attackers to construct malicious URIs, trick users into parsing them, and can perform malicious operations in the context of the...

D-Link DWR-932B router vulnerable (CNVD-2017-01664)

D-Link DWR-932B router is a wireless router product from AUO D-Link. A security vulnerability exists in the D-Link DWR-932B router using firmware version 02.02eu. An attacker could exploit the vulnerability to bypass security restrictions...

D-Link DIR-600M - Cross-Site Request Forgery

Exploit Title:D-link wireless router DIR-600M – Cross-Site Request Forgery CSRF vulnerability Google Dork:N/A Date: 07/02/2017 Exploit Author:Ajay S. Kulal www.twitter.com/ajaykulal Vendor Homepage:dlink.com Software Link:N/A Version:Hardware version: C1 Firmware version: 3.03 Tested on:All...

D-Link DWR-932B Command Injection Vulnerability

The D-Link DWR-932B is a popular router device. An input validation vulnerability exists in the D-Link DWR-932B, which allows remote attackers to exploit the vulnerability to submit a special request and execute arbitrary commands...

NETGEAR WNR2000v5 router authentication bypass vulnerability

The NETGEAR WNR2000v5 router is a popular router device. An authentication bypass vulnerability exists in the NETGEAR WNR2000v5 router. An attacker can use this vulnerability to bypass the authentication mechanism and perform unauthorized operations...