Design/Logic Flaw

DIGISOL DG-BR4000NG devices have XSS via the SSID it is validated only on the client side...

CVE-2018-12705

DIGISOL DG-BR4000NG devices have XSS via the SSID it is validated only on the client side...

CVE-2018-12705

DIGISOL DG-BR4000NG devices have XSS via the SSID it is validated only on the client side...

CVE-2018-12705

The affected device is DIGISOL DG-BR4000NG wireless router. It has a Cross-Site Scripting (XSS) vulnerability in its management interface that is triggered by the SSID value, with input validation performed only on the client side. The flaw allows injection of arbitrary scripts via the SSID field...

CVE-2018-10252

An issue was discovered on Actiontec WCB6200Q before 1.1.10.20a devices. The admin login session cookie is insecurely generated making admin session hijacking possible. When an admin logs in, a session cookie is generated using the time of day rounded to 10ms. Since the web server returns its...

CVE-2018-10252

An issue was discovered on Actiontec WCB6200Q before 1.1.10.20a devices. The admin login session cookie is insecurely generated making admin session hijacking possible. When an admin logs in, a session cookie is generated using the time of day rounded to 10ms. Since the web server returns its...

Design/Logic Flaw

Coship RT3052 4.0.0.48 devices allow XSS via a crafted SSID field on the "Wireless Setting - Basic" screen...

CVE-2018-8772

CVE-2018-8772 : Coship RT3052 wireless router (version 4.0.0.48) is affected by a cross-site scripting (XSS) vulnerability that can be triggered by a crafted SSID in the Wireless Setting – Basic page. Multiple connected sources confirm the vulnerability exists in the router’s web interface and al...

HackerOne: h1-202 leaderboard photo discloses local wifi password

Summary: the h1-202 event took several photos for the event that rotate on the public leaderboard. One of these photos disclosed the local wifi SSID and Password. Description: SSID: HackerOne Password: █████████ Steps To Reproduce 1. Look at the photo attached Remediation Have your staff...

Coship RT3052 Wireless Router - Persistent Cross-Site Scripting

Coship RT3052 Wireless Router - Persistent Cross-Site Scripting Exploit Title: Coship RT3052 Wireless Router - Persistent Cross Site Scripting XSS Date: 2018-03-18 Exploit Author: Sayan Chatterjee Vendor Homepage: http://en.coship.com/ Category: Hardware Wifi Router Version: 4.0.0.48 Tested on:...

Design/Logic Flaw

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, there is an obsolete set/reset ssid hotlist API...

D-Link DIR-600M Wireless - Cross-Site Scripting

D-Link DIR-600M Wireless - Cross-Site Scripting Exploit Title: D-Link DIR-600M Wireless - Persistent Cross Site Scripting Date: 11.02.2018 Vendor Homepage: http://www.dlink.co.in Hardware Link: http://www.dlink.co.in/products/?pid=DIR-600M Category: Hardware Exploit Author: Prasenjit Kanti Paul...

D-Link DIR-600M Wireless Cross Site Scripting

Exploit Title: D-Link DIR-600M Wireless - Persistent Cross Site Scripting Date: 11.02.2018 Vendor Homepage: http://www.dlink.co.in Hardware Link: http://www.dlink.co.in/products/?pid=DIR-600M Category: Hardware Exploit Author: Prasenjit Kanti Paul Web: http://hack2rule.wordpress.com/ Hardware...

Cross site scripting

Cross Site Scripting XSS exists on the D-Link DIR-600M C1 3.01 via the SSID or the name of a user account...

PiDense - Monitor Illegal Wireless Network Activities (Fake Access Points)

Monitor illegal wireless network activities. Similar SSID broadcasts Same SSID broadcasts Calculates unencrypted wireless networks density Watches SSID broadcasts at the blacklist. Capabilities Now Calculates Unencrypted wireless network density Finds same ssid, different encryption Working...

Code injection

Vivo modems allow remote attackers to obtain sensitive information by reading the index.cgi?page=wifi HTML source code, as demonstrated by ssid and pskwepkey fields...

CVE-2017-14953

HikVision Wi-Fi IP cameras, when used in a wired configuration, allow physically proximate attackers to trigger association with an arbitrary access point by leveraging a default SSID with no WiFi encryption or authentication. NOTE: Vendor states that this is not a vulnerability, but more an...

Design/Logic Flaw

DISPUTED HikVision Wi-Fi IP cameras, when used in a wired configuration, allow physically proximate attackers to trigger association with an arbitrary access point by leveraging a default SSID with no WiFi encryption or authentication. NOTE: Vendor states that this is not a vulnerability, but mor...

CVE-2017-14953

HikVision Wi-Fi IP cameras, when used in a wired configuration, allow physically proximate attackers to trigger association with an arbitrary access point by leveraging a default SSID with no WiFi encryption or authentication. NOTE: Vendor states that this is not a vulnerability, but more an...

CVE-2017-14953

CVE-2017-14953 affects Hikvision Wi‑Fi IP cameras (example: DS-2CD2432F-IW) used in wired configurations. The vulnerability arises from a default unencrypted, unauthenticated SSID (e.g., “davinci”) enabling physically proximate attackers to force association with an arbitrary access point, potent...