Lucene search
+L

14051 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/27 12:00 a.m.•0 views

CVE-2021-27854: Authentication Bypass by Spoofing

Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using combinations of VLAN 0 headers, LLC/SNAP headers, and converting frames from Ethernet to Wifi and its reverse...

4.7CVSS5.6AI score0.00714EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/09/27 12:00 a.m.•25 views

多款Cisco产品安全漏洞

Cisco NX-OS Software and others are products of Cisco Corporation.Cisco NX-OS Software is a set of data center-grade operating system software used by switches.Cisco IOS is an operating system developed for its network devices.Cisco IOS XE Software is an operating system.Cisco IOS XE Software is...

4.7CVSS5.5AI score0.00688EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2022/09/27 12:00 a.m.•13 views

PT-2022-9876 · Ieee +1 · 802.2 +3

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue allows Layer 2 network filtering capabilities, such as IPv6 RA guard, to be bypassed. This can be achieved by using specific combinations of VLAN 0 headers, LLC/SNAP...

4.7CVSS4.5AI score0.00714EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2022/09/27 12:00 a.m.•13 views

PT-2022-9878 · Ieee +1 · 802.2 +3

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue allows Layer 2 network filtering capabilities, such as IPv6 RA guard, to be bypassed. This can be achieved by utilizing LLC/SNAP headers with...

4.7CVSS4.5AI score0.00688EPSS
SaveExploits0References7
Packet Storm
Packet Storm
•added 2022/09/26 12:00 a.m.•366 views

WiFi Mouse 1.8.3.4 Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Wifi Mouse RCE', 'Description' = %q The WiFi Mouse Mouse Server from Necta LLC contains an auth bypass as the authentication is completely...

9.8CVSS9.7AI score0.74016EPSS
SaveExploits6
zdt
zdt
•added 2022/09/26 12:00 a.m.•3550 views

WiFi Mouse 1.8.3.4 Remote Code Execution Exploit

The WiFi Mouse Mouse Server from Necta LLC contains an authentication bypass as the authentication is completely implemented entirely on the client side. By utilizing this vulnerability, is possible to open a program on the server cmd.exe in our case and type commands that will be executed as the...

9.8CVSS0.2AI score0.74016EPSS
SaveExploits6
OSV
OSV
•added 2022/09/23 3:15 p.m.•14 views

CVE-2022-40854

Tenda AC18 router contained a stack overflow vulnerability in /goform/fastsettingwifiset...

9.8CVSS5.8AI score0.01147EPSS
SaveExploits1References1
OSV
OSV
•added 2022/09/23 2:15 p.m.•13 views

CVE-2022-40865

Tenda AC15 and AC18 routers V15.03.05.19 contain heap overflow vulnerabilities in the function setSchedWifi with the request /goform/openSchedWifi/...

9.8CVSS5.8AI score0.01435EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/23 12:00 a.m.•1 views

CVE-2022-37235: Out-of-bounds Write

Netgear Nighthawk AC1900 Smart WiFi Dual Band Gigabit Router R7000-V1.0.11.13410.2.119 is vulnerable to Buffer Overflow via the wl binary in firmware. There is a stack overflow vulnerability caused by strncat...

9.8CVSS8.2AI score0.01202EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/09/23 12:00 a.m.•13 views

Tenda AC15 缓冲区错误漏洞

The Tenda AC15 is a wireless router from the Chinese company Tenda. A stack overflow vulnerability exists in Tenda AC15 router version V15.03.05.19, which originates from the list parameter of the fastsettingwifiset function that does not perform a size check on the input data, and can be exploit...

9.8CVSS8.3AI score0.01147EPSS
SaveExploits1References2
NVD
NVD
•added 2022/09/20 6:15 p.m.•30 views

CVE-2022-38956

An exploitable firmware downgrade vulnerability was discovered on the Netgear WPN824EXT WiFi Range Extender. An attacker can conduct a MITM attack to replace the user-uploaded firmware image with an original old firmware image. This affects Firmware 1.1.11.1.9 and earlier...

5.3CVSS0.00285EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2022/09/20 5:47 p.m.•47 views

CVE-2022-38955

An exploitable firmware modification vulnerability was discovered on the Netgear WPN824EXT WiFi Range Extender. An attacker can conduct a MITM attack to modify the user-uploaded firmware image and bypass the CRC check. A successful attack can either introduce a backdoor to the device or make the...

7.7AI score0.00354EPSS
SaveExploits0References2
CVE
CVE
•added 2022/09/20 5:46 p.m.•80 views

CVE-2022-38956

The CVE-2022-38956 issue affects Netgear WPN824EXT WiFi Range Extender, specifically firmware versions 1.1.1 through 1.1.9 and earlier. The root cause is lack of integrity checks in the firmware update path, enabling a MITM attacker to downgrade the firmware by replacing the user-uploaded image w...

5.3CVSS5.2AI score0.00285EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2022/09/20 12:00 a.m.•16 views

PT-2025-49696

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue within the ath11k module related to handling disconnected Wi-Fi peers. Specifically, a failure log occurs when attempting to find a peer with an ID of ...

7.1CVSS6.5AI score0.00326EPSS
SaveExploits0
NVD
NVD
•added 2022/09/19 5:15 p.m.•46 views

CVE-2022-3218

Due to a reliance on client-side authentication, the WiFi Mouse Mouse Server from Necta LLC's authentication mechanism is trivially bypassed, which can result in remote code execution...

9.8CVSS0.74016EPSS
SaveExploits6References5
OSV
OSV
•added 2022/09/19 5:15 p.m.•16 views

CVE-2022-3218

Due to a reliance on client-side authentication, the WiFi Mouse Mouse Server from Necta LLC's authentication mechanism is trivially bypassed, which can result in remote code execution...

9.8CVSS6.1AI score0.74016EPSS
SaveExploits6References5
Prion
Prion
•added 2022/09/19 5:15 p.m.•33 views

Remote code execution

Due to a reliance on client-side authentication, the WiFi Mouse Mouse Server from Necta LLC's authentication mechanism is trivially bypassed, which can result in remote code execution...

7.5CVSS9.8AI score0.74016EPSS
SaveExploits6References5Affected Software1
Cvelist
Cvelist
•added 2022/09/19 4:50 p.m.•62 views

CVE-2022-3218 Necta WiFi Mouse (Mouse Server) client-side authentication bypass

Due to a reliance on client-side authentication, the WiFi Mouse Mouse Server from Necta LLC's authentication mechanism is trivially bypassed, which can result in remote code execution...

10AI score0.74016EPSS
SaveExploits6References5
CVE
CVE
•added 2022/09/19 4:50 p.m.•571 views

CVE-2022-3218

CVE-2022-3218 concerns the WiFi Mouse (Mouse Server) from Necta LLC, where authentication is implemented entirely on the client side, enabling a bypass that can lead to remote code execution. Multiple connected sources provide concrete details: (1) NVD/NVDC notes a client-side auth bypass allowin...

9.8CVSS9.8AI score0.74016EPSS
SaveExploits6References5Affected Software1
OSV
OSV
•added 2022/09/19 3:15 p.m.•15 views

CVE-2022-40076

Tenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: fromSetWifiGusetBasic...

7.5CVSS5.8AI score0.00986EPSS
SaveExploits1References1
Rows per page
Query Builder