CVE-2013-4659

Buffer overflow in Broadcom ACSD allows remote attackers to execute arbitrary code via a long string to TCP port 5916. This component is used on routers of multiple vendors including ASUS RT-AC66U and TRENDnet TEW-812DRU...

CVE-2013-4659

Buffer overflow in Broadcom ACSD allows remote attackers to execute arbitrary code via a long string to TCP port 5916. This component is used on routers of multiple vendors including ASUS RT-AC66U and TRENDnet TEW-812DRU...

CVE-2013-4659

CVE-2013-4659 describes a buffer overflow in Broadcom ACSD (Wireless service) that allows remote code execution via a long string sent to TCP port 5916. Affected devices include ASUS RT-AC66U and other routers using Broadcom ACSD; multiple buffer overflow vectors have been reported. Public refere...

Trendnet TV-IP 410WN camera command execution vulnerability

No description provided by source...

Reverse router firmware of sensitive information leaked Part2-vulnerability warning-the black bar safety net

Previous articledescribes in detail the various unpacking the router firmware tools. Unpacking after you get the firmware file. The next step is to analyze the files looking for vulnerabilities. This time the goal of the analysis is a Trendnet Router, the analysis of the vulnerability is a remote...

Realtek SDK Miniigd UPnP SOAP Command Execution Exploit

Exploit for linux platform in category remote exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Realtek SDK Miniigd UPnP SOAP Command Execution', 'Description' = %q Differen...

Realtek SDK - Miniigd UPnP SOAP Command Execution (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Realtek SDK Miniigd UPnP SOAP Command Execution', 'Description' = %q Different devices using the Realtek SDK with the miniigd daemon...

Realtek SDK Miniigd UPnP SOAP Command Execution

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Realtek SDK Miniigd UPnP SOAP Command Execution', 'Description' = %q Different devices using the Realtek SDK with the miniigd daemon...

VulnCheck KEV: CVE-2015-1187

The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to perform remote code execution...

KCodes NetUSB Vulnerability Details Surface

The Department of Homeland Security-sponsored CERT at Carnegie Mellon University today issued an alert warning of a serious vulnerability in KCode NetUSB, which is integrated into products sold by a number of networking vendors. KCodes NetUSB is a Linux kernel module that enables several users on...

Realtek SDK Miniigd UPnP SOAP Command Execution

Different devices using the Realtek SDK with the miniigd daemon are vulnerable to OS command injection in the UPnP SOAP interface. Since it is a blind OS command injection vulnerability, there is no output for the executed command. This module has been tested successfully on a Trendnet TEW-731BR...

Routers Vulnerable to Critical Remote Code Execution Vulnerability

A zero day vulnerability in popular household routers from D-Link and Trendnet could be exploited by attackers to run arbitrary code on devices. The flaw, which can be exploited without authentication, is present in version 1.3 of Realtek’s SDK, which figures into some brands of routers, accordin...

D-Link/TRENDnet NCC Service Command Injection Exploit

This Metasploit module exploits a remote command injection vulnerability on several routers. The vulnerability exists in the ncc service, while handling ping commands. This Metasploit module has been tested on a DIR-626L emulated environment only. Several D-Link and TRENDnet devices are reported ...

Dlink IP Camera Authenticated Arbitrary Command Execution - Ver2 (CVE-2013-1599)

A code execution vulnerability has been reported in multiple D-Link and TRENDnet IP cameras. The vulnerability is due to a flaw in /var/www/cgi-bin/rtpd.cgi where inputs are not properly sanitized in the query string before being executed. A remote attacker can execute arbitrary commands with a...

D-Link and TRENDnet routers vulnerabilities

CSRF, authentication bypass...

D-Link and TRENDnet 'ncc2' service - multiple vulnerabilities

D-Link and TRENDnet 'ncc2' service - multiple vulnerabilities Discovered by: ---- Peter Adkins [email protected] Access: ---- Local network; unauthenticated access. Remote network; unauthenticated access. Remote network; 'drive-by' via CSRF. Tracking and identifiers: ---- CVE - Mitre...

D-Link/TRENDnet NCC Service Command Injection

This module exploits a remote command injection vulnerability on several routers. The vulnerability exists in the ncc service, while handling ping commands. This module has been tested on a DIR-626L emulated environment. Several D-Link and TRENDnet devices are reported as affected, including:...

D-Link and TRENDnet 'ncc2' service - multiple Vulnerabilities

Multiple D-Link and TRENDnet devices suffer from cross site request forgery and unauthenticated access vulnerabilities. Various proof of concepts included. D-Link and TRENDnet 'ncc2' service - multiple vulnerabilities Discovered by: ---- Peter Adkins Access: ---- Local network; unauthenticated...

D-Link Routers Haunted by Remote Command Injection Bug

Some D-Link routers contain a vulnerability that leaves them open to remote attacks that can give an attacker root access, allow DNS hijacking and other attacks. The vulnerability affects affects a number of D-Link’s home routers and the key details of the flaw have been made public by one of the...

Multiple vulnerabilities in 'ncc/ncc2' Service in multiple D-Link and TRENDnet routers

The D-Link DIR-820L is an enterprise-class wireless router.TRENDnet TEW-731BR is a wireless router. Multiple vulnerabilities in the 'ncc/ncc2' Service in multiple D-Link and TRENDnet routers allow attackers to exploit this vulnerability to gain root access to the device, hijack DNS settings or...