1452 matches found
CVE-2016-6154
The authentication applet in Watchguard Fireware 11.11 Operating System has reflected XSS this can also cause an open redirect...
CVE-2016-6154
The authentication applet in Watchguard Fireware 11.11 Operating System has reflected XSS this can also cause an open redirect...
Open redirect
The authentication applet in Watchguard Fireware 11.11 Operating System has reflected XSS this can also cause an open redirect...
CVE-2016-6154
The CVE-2016-6154 entry concerns Watchguard Fireware 11.11 OS, where the authentication applet is vulnerable to reflected XSS and can cause an open redirect. Multiple sources (NVD, CNVD, CVE listings) corroborate this, noting the vulnerability in the authentication component without providing exp...
CVE-2016-6154
The authentication applet in Watchguard Fireware 11.11 Operating System has reflected XSS this can also cause an open redirect...
CVE-2016-6154: Improper Neutralization of Input During Web Page Generation
The authentication applet in Watchguard Fireware 11.11 Operating System has reflected XSS this can also cause an open redirect...
WAFW00F v1.0.0 - Detect All The Web Application Firewall!
WAFW00F identifies and fingerprints Web Application Firewall WAF products. How does it work? To do its magic, WAFW00F does the following: Sends a normal HTTP request and analyses the response; this identifies a number of WAF solutions. If that is not successful, it sends a number of potentially...
The vulnerability of Watchguard’s wireless access points’ microprogramming software lies in the lack of sufficient file loading restrictions, allowing attackers to execute arbitrary commands.
The vulnerability of the microprogrammed software of Watchguard wireless access points relates to insufficient restrictions on file downloads. Exploiting this vulnerability allows a malicious actor operating remotely to execute arbitrary commands...
Watchguard AP100/AP102/AP200 1.2.9.15 Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Watchguard AP Backdoor Shell', 'Description' = 'Watchguard AP's have a backdoor account with known credentials. This can be used to gain a valid...
Watchguard AP100 AP102 AP200 1.2.9.15 - Remote Code Execution Exploit
Exploit for linux platform in category web applications This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Watchguard AP Backdoor Shell', 'Description' = 'Watchguard AP's have a backdoor account...
Watchguard AP100 AP102 AP200 1.2.9.15 - Remote Code Execution (Metasploit)
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Watchguard AP Backdoor Shell', 'Description' = 'Watchguard AP's have a backdoor account with known credentials. This can be used to gain a valid...
Watchguard AP100 AP102 AP200 1.2.9.15 - Remote Code Execution (Metasploit)
Watchguard AP100 AP102 AP200 1.2.9.15 - Remote Code Execution Metasploit This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Watchguard AP Backdoor Shell', 'Description' = 'Watchguard AP's have a...
WatchGuard AP100, AP102 and AP200 Security Bypass Vulnerabilities
The WatchGuard AP100, AP102 and AP200 are all different series of indoor wireless access point devices from WatchGuard USA. A security vulnerability exists in the WatchGuard AP100, AP102, and AP200, AP300 that stems from the program failing to properly validate the 'old password' field in the...
WatchGuard AP100, AP102 and AP200 Hardcoded Credentials Vulnerability
The WatchGuard AP100, AP102 and AP200 are all different series of indoor wireless access point devices from WatchGuard USA. A security vulnerability exists in the WatchGuard AP100, AP102, and AP200 using firmware versions prior to 1.2.9.15 that stems from the program's use of hard-coded...
WatchGuard AP100, AP102 and AP200 Authentication Vulnerabilities
The WatchGuard AP100, AP102 and AP200 are all different series of indoor wireless access point devices from WatchGuard USA. A security vulnerability exists in the WatchGuard AP100, AP102, and AP200 using firmware versions prior to 1.2.9.15, which stems from a failure of the local Access Point Web...
Watchguard Hard-Coded Credentials / Failed Controls
Introduction ============ Multiple vulnerabilities can be chained together in a number of WatchGuard AP products which result in pre-authenticated remote code execution. The vendor has produced a knowledge-base article1 and announcement2 regarding these issues. ZX Security would like to commend t...
CVE-2018-10578
An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15, and AP300 devices with firmware before 2.0.0.10. Incorrect validation of the "old password" field in the change password form allows an attacker to bypass validation of this field...
CVE-2018-10578
An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15, and AP300 devices with firmware before 2.0.0.10. Incorrect validation of the "old password" field in the change password form allows an attacker to bypass validation of this field...
Unrestricted file upload
An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15, and AP300 devices with firmware before 2.0.0.10. File upload functionality allows any users authenticated on the web interface to upload files containing code to the web root, allowing these files...
CVE-2018-10577
An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15, and AP300 devices with firmware before 2.0.0.10. File upload functionality allows any users authenticated on the web interface to upload files containing code to the web root, allowing these files...