D-Link DIR-815 Buffer Overflow / Command Injection Vulnerabilities

D-Link DIR-815 suffers from buffer overflow and command injection vulnerabilities. Title: DIR-815 Buffer overflows and Command injection in authentication and HNAP functionalities Vendors contacted: William Brown , Patrick Cline email protected CVE: None Note: All these security issues have been...

D-Link DIR-817LW Buffer Overflow / Command Injection Vulnerabilities

D-Link DIR-817LW suffers from buffer overflow and command injection vulnerabilities. Title: DIR-817LW Buffer overflows and Command injection in authentication and HNAP functionalities Vendors contacted: William Brown , Patrick Cline email protected CVE: None Note: All these security issues have...

D-Link DIR-818W - Multiple Vulnerabilities

Advisory Information Title: DIR-818W Buffer overflows and Command injection in authentication and HNAP functionalities Vendors contacted: William Brown , Patrick Cline [email protected] CVE: None Note: All these security issues have been discussed with the vendor and vendor indicated...

D-Link DIR-890L / DIR-890R Buffer Overflow Vulnerability

D-Link DIR-890L/R suffers from multiple buffer overflow vulnerabilities. Title: DIR-890L/R Buffer overflows in authentication and HNAP functionalities. Date published: July,17th, 2015 Vendors contacted: William Brown , Patrick Cline email protected CVE: None Note: All these security issues have...

D-Link DGL5500 - HNAP Buffer Overflow

Advisory Information Title: DGL5500 Un-Authenticated Buffer overflow in HNAP functionality Vendors contacted: William Brown , Patrick Cline [email protected] CVE: None Note: All these security issues have been discussed with the vendor and vendor indicated that they have fixed issues a...

D-Link DIR-866L - Multiple Buffer Overflow Vulnerabilities

Advisory Information Title: DIR-866L Buffer overflows in HNAP and send email functionalities Vendors contacted: William Brown , Patrick Cline [email protected] CVE: None Note: All these security issues have been discussed with the vendor and vendor indicated that they have fixed issues...

D-Link DIR-615 Buffer Overflow

Advisory Information Title: Dlink DIR-615 Authenticated Buffer overflow in Ping and Send email functionality Vendors contacted: William Brown , Patrick Cline [email protected] CVE: None Note: All these security issues have been discussed with the vendor and vendor indicated that they...

D-Link DIR-645 UPNP Buffer Overflow

Advisory Information Title: Dlink DIR-645 UPNP Buffer Overflow Vendors contacted: William Brown Dlink Release mode: Released CVE: None Note: All these security issues have been discussed with the vendor and vendor indicated that they have fixed issues as per the email communication. The vendor ha...

D-Link DIR-815 DIR-850L - SSDP Command Injection

D-Link DIR-815 DIR-850L - SSDP Command Injection Advisory Information Title: SSDP command injection using UDP for a lot of Dlink routers including DIR-815, DIR-850L Vendors contacted: William Brown Dlink Release mode: Released CVE: None Note: All these security issues have been discussed with the...

Netgear N300 Authentication Bypass Vulnerability

Netgear N300 routers suffer from an authentication bypass vulnerability that allows for complete compromise. COMPASS SECURITY ADVISORY http://www.csnc.ch/en/downloads/advisories.html Product: Netgear Router Firmware N3001.1.0.311.0.1.img and N300-1.1.0.281.0.1.img Vendor: NETGEAR CVE ID: requeste...

Edimax BR6228nS/BR6228nC - Multiple vulnerabilities

Exploit for hardware platform in category web applications Title: Edimax BR6228nS/BR6228nC - Multiple vulnerabilities Date: 01.09.15 Vendor: edimax.com Firmware version: 1.22 Author: Smash Contact: smash at devilteam.pl Few vulnerabilities found in Edimax BR6228nS/BR6228nC router firmware. 1/ Cro...

Edimax BR6228nS/BR6228nC - Multiple Vulnerabilities

Title: Edimax BR6228nS/BR6228nC - Multiple vulnerabilities Date: 01.09.15 Vendor: edimax.com Firmware version: 1.22 Author: Smash Contact: smash at devilteam.pl Few vulnerabilities found in Edimax BR6228nS/BR6228nC router firmware. 1/ Cross Site Scripting Request: POST /goform/formWizSetup HTTP/1...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Asus RT-N10+ D1 router with firmware 2.1.1.1.70 allow remote attackers to inject arbitrary web script or HTML via the flag parameter to 1 resultofgetchangedstatus.asp or 2 errorpage.htm...

DNS Hijack Flaw Found in D-Link Router

D-Link’s popular DSL2740R wireless router is vulnerable to domain name system DNS hijacking exploits that requiring no authentication to access its administrative interface. According to Todor Donev of the Bulgarian security firm Ethical Hacker, a number of other D-Link routers are affected by th...

Friends news router discovery DNS hijacking vulnerability-vulnerability warning-the black bar safety net

Security researchers have found that the Friends of the hearing at least one model of the router is found that the presence of DNS hijacking vulnerability that can be remotely change the DNS settings, hijack the traffic. Ethical hackerEthical Hackerresearch group of Todor Donev said, the...

Cross site scripting

Cross-site scripting XSS vulnerability in D-Link DAP-1360 router with firmware 2.5.4 and later allows remote attackers to inject arbitrary web script or HTML via the resbuf parameter to index.cgi when resconfigid is set to 41...

Wifiphisher Wi-Fi Hacking Tool Automates Wi-Fi Phishing

A new Wi-Fi attack tool has been made available on GitHub that automates phishing attacks over WPA networks, putting credentials and other supposedly secret data at risk. The tool, called wifiphisher, jams Wi-Fi access points with deauthentication packets and then mimics the target access point...

Event tracking: Belkin router Belkin router）0day overflow vulnerability analysis-vulnerability warning-the black bar safety net

Vulnerability summary Security researcher Marco Vaz in Belkin n750 the model router found a serious vulnerability that can allow an attacker on the victim's device to get Root access permissions i.e. administrator privileges, the vulnerability of the main attacks is the router's Web...

CVE-2014-2178

Cross-site request forgery CSRF vulnerability in the administrative web interface in the Cisco RV router firmware on RV220W devices, before 1.0.5.9 on RV120W devices, and before 1.0.4.14 on RV180 and RV180W devices allows remote attackers to hijack the authentication of administrators, aka Bug ID...

NETGEAR DGN2200 1.0.0.29_1.7.29_HotS - Stored XSS Vulnerability

No description provided by source. Exploit Title: Stored XSS Vulnerability in NETGEAR DGN2200 Web interface Date 30/04/2014 Exploit author: Dolev Farhi @f1nhack Vendor homepage: http://netgear.com Affected Firmware version: 1.0.0.291.7.29HotS Affected Hardware: NETGEAR DGN2200 Wireless ADSL Route...