52 matches found
Access Control Error Vulnerability in Multiple Cisco Products
Cisco RV016 Multi-WAN VPN Router is a VPN Virtual Private Network router. RV042 Dual WAN VPN Router is a VPN Virtual Private Network router. The RV042G Dual Gigabit WAN VPN Router is a VPN Virtual Private Network router. An access control error vulnerability exists in the Cisco Small Business...
Denial of Service Vulnerability in RG-RSR20-14E Router
The RG-RSR20-14E is a multi-service router. A denial of service vulnerability exists in the RG-RSR20-14E router, which can be exploited by an attacker to reboot the router...
CVE-2019-19223
The CVE-2019-19223 issue affects the D-Link DSL-2680 router (EU firmware EU_1.03) where the web administration interface’s reboot.html endpoint is accessible without authentication. Root cause: Broken access control in the admin UI allows an unauthenticated user to trigger a reboot, impacting ava...
Tenda Wireless N150 Router 5.07.50 - Cross-Site Request Forgery (Reboot Router)
Tenda Wireless N150 Router 5.07.50 - Cross-Site Request Forgery Reboot Router Exploit Title: Tenda Wireless N150 Router 5.07.50 - Cross-Site Request Forgery Reboot Router Date: 2018-07-21 Exploit Author: Nathu Nandwani Website: http://nandtech.co CVE: CVE-2015-5996 Description: The router is...
CVE-2018-10070
A vulnerability in MikroTik Version 6.41.4 could allow an unauthenticated remote attacker to exhaust all available CPU and all available RAM by sending a crafted FTP request on port 21 that begins with many '\0' characters, preventing the affected router from accepting new FTP connections. The...
Design/Logic Flaw
A vulnerability in MikroTik Version 6.41.4 could allow an unauthenticated remote attacker to exhaust all available CPU and all available RAM by sending a crafted FTP request on port 21 that begins with many '\0' characters, preventing the affected router from accepting new FTP connections. The...
CVE-2018-10070
A vulnerability in MikroTik Version 6.41.4 could allow an unauthenticated remote attacker to exhaust all available CPU and all available RAM by sending a crafted FTP request on port 21 that begins with many '\0' characters, preventing the affected router from accepting new FTP connections. The...
CVE-2018-10070
A vulnerability in MikroTik Version 6.41.4 could allow an unauthenticated remote attacker to exhaust all available CPU and all available RAM by sending a crafted FTP request on port 21 that begins with many '\0' characters, preventing the affected router from accepting new FTP connections. The...
MikroTik 6.41.4 Denial Of Service
Title: MikroTik 6.41.4 Denial of service FTP daemon crash CVE: CVE-2018-10070 CWE: CWE-400 Exploit Author: Hosein Askari FarazPajohan Vendor HomePage: https://mikrotik.com/ Version : 6.41.4 Released 2018-Apr-05 | All Version Date: 13-05-2018 Category: Network Appliance Description: A vulnerabilit...
MikroTik 6.41.4 - FTP daemon Denial of Service PoC
MikroTik 6.41.4 - FTP daemon Denial of Service PoC Title: MikroTik 6.41.4 Denial of service FTP daemon crash CVE: CVE-2018-10070 CWE: CWE-400 Exploit Author: Hosein Askari FarazPajohan Vendor HomePage: https://mikrotik.com/ Version : 6.41.4 Released 2018-Apr-05 | All Version Date: 13-05-2018...
MikroTik 6.41.4 - FTP daemon Denial of Service (PoC)
Title: MikroTik 6.41.4 Denial of service FTP daemon crash CVE: CVE-2018-10070 CWE: CWE-400 Exploit Author: Hosein Askari FarazPajohan Vendor HomePage: https://mikrotik.com/ Version : 6.41.4 Released 2018-Apr-05 | All Version Date: 13-05-2018 Category: Network Appliance Description: A vulnerabilit...
Vonage VDV-23 115 Denial of Service Vulnerability
The Vonage VDV-23 115 is a routing repeater from Vonage USA. A security vulnerability exists in the Vonage VDV-23 115 version 3.2.11-0.9.40. An attacker can exploit this vulnerability to cause a router reboot by sending a loginPassword and/or loginUsername field with a long string to goform/login...
CVE-2017-7404
On the D-Link DIR-615 before v20.12PTb04, if a victim logged in to the Router's Web Interface visits a malicious site from another Browser tab, the malicious site then can send requests to the victim's Router without knowing the credentials CSRF. An attacker can host a page that sends a POST...
Huawei Flybox B660 - Cross-Site Request Forgery Vulnerability
Exploit for hardware platform in category web applications Document Title: =============== Huawei Flybox B660 - POST Reboot CSRF Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2025 Release Date: ============= 2017-01-10 Vulnerability...
The vulnerability of the Cisco IOS operating system, which allows a malicious actor to trigger a service failure
Cisco IOS software contains a vulnerability that, when exploited, can cause the error ID CSCtj30155 and trigger a router reboot by sending specially crafted ICMPv6 packets via Multiprotocol Label Switching MPLS...
The vulnerability of the Cisco IOS operating system, which allows a malicious actor to trigger a service failure
Cisco IOS software contains numerous vulnerabilities in the implementation of Network Meeting Directory Lightweight Directory Access Protocol, LDAP, Session Initiation Protocol, and H.323 protocols. When these vulnerabilities are exploited, a CSCtd10712 error can be triggered, resulting in a rout...
D-Link DWR-113 Cross Site Request Forgery
Exploit Title: Dlink DWR-113 Rev. Ax - CSRF causing Denial of Service Google dork : N/A Exploit Author: Blessen Thomas Date : 29/07/14 Vendor Homepage : http://www.dlink.com/ Software Link : N/A Firmware version: v2.02 2013-03-13 Tested on : Windows 7 CVE : CVE-2014-3136 Type of Application : Web...
Beetel TC1-450 Airtel Wireless Router - Multiple CSRF Vulnerabilities
No description provided by source. Exploit Title: Beetel TC1-450 Airtel Wireless Router - Multiple CSRF Vulnerabilities Date: 12/13/2013 Author: SaMaN @samanL33T Vendor Homepage:http://www.beetel.in/node/10139 Category: Hardware/Wireless Router Firmware Version: TM4-0Q-020 and below Tested on:...
Pirelli Discus DRG A125g - Remote Change WiFi Password Vulnerability
Exploit for hardware platform in category web applications http://10.0.0.2/wladv.wl?wlSsidIdx=0&wlHide=0&wlAuthMode=psk2&wlAuth=0&wlWep=disabled&wlWpaPsk=PASSWORDHERE&wlWpaGtkRekey=0&wlKeyBit=1&wlPreauth=1&wlWpa=tkip info: where the parameter wlWpaPsk=PASSWORDHERE is where we will enter the...
Gigaset SE461 WiMAX router Remote Denial of Service Vulns
No description provided by source. / / / / / / / / / / / / / // / / / / / / / / / // / / / // // / / / / / // ///// // // // Helith - 0815 -------------------------------------------------------------------------------- Author : Benkei Date : 2008-02-08 Vendor : Siemens Affected product : Gigaset...