DIGISOL DG-HR1400 Wireless Router - Cross-Site Request Forgery

DIGISOL DG-HR1400 Wireless Router - Cross-Site Request Forgery Digisol Router CSRF Exploit - Indrajith A.N history.pushState'', '', '/' input type="hidden" name="basicrates" value...

DIGISOL DG-HR1400 Wireless Router - Cross-Site Request Forgery Vulnerability

Exploit for hardware platform in category web applications Digisol Router CSRF Exploit - Indrajith A.N history.pushState'', '', '/' input type="hidden" na...

D-Link DIR-600M - Cross-Site Request Forgery

D-Link DIR-600M - Cross-Site Request Forgery Exploit Title:D-link wireless router DIR-600M – Cross-Site Request Forgery CSRF vulnerability Google Dork:N/A Date: 07/02/2017 Exploit Author:Ajay S. Kulal www.twitter.com/ajaykulal Vendor Homepage:dlink.com Software Link:N/A Version:Hardware version: ...

TM RG4332 2.7.0 Arbitrary File Disclosure

Exploit Title: TM RG4332 Wireless Router Traversal Arbitrary File Read Date: 27/01/2017 Exploit Author: Saeid Atabaki Version: RG4332V2.7.0 Tested on: RG4332 with minihttp 1.19 = 1 ============================================================= GET...

TM RG4332 Wireless Router Arbitrary File Disclosure Vulnerability

The RG4332 is a wireless router. An arbitrary file disclosure vulnerability exists in the web page of the TM RG4332 Wireless Router, which can be exploited by an attacker to obtain sensitive information because the program fails to adequately validate user-supplied input...

TM RG4332 Wireless Router - Arbitrary File Disclosure

TM RG4332 Wireless Router - Arbitrary File Disclosure Exploit Title: TM RG4332 Wireless Router Traversal Arbitrary File Read Date: 27/01/2017 Exploit Author: Saeid Atabaki Version: RG4332V2.7.0 Tested on: RG4332 with minihttp 1.19 = 1 =============================================================...

CG-WLR300NX vulnerable to cross-site request forgery

Overview CG-WLR300NX provided by Corega Inc is a wireless LAN router. CG-WLR300NX contains a cross-site request forgery vulnerability CWE-352. Satoshi Ogawa of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information...

Eir D1000 Wireless Router - WAN Side Remote Command Injection (Metasploit)

=begin Exploit Title: Eir D1000 Wireless Router - WAN Side Remote Command Injection Date: 7th November 2016 Exploit Author: Kenzo Website: https://devicereversing.wordpress.com Tested on Firmware version: 2.00AADU.520150909 Type: Webapps Platform: Hardware Description =========== By sending certa...

ASUS RT-N10E Cross-Site Scripting Vulnerability

ASUS RT-N10E Wireless Router is a wireless router device developed by ASUS. A cross-site scripting vulnerability exists in ASUS RT-N10E. An attacker can exploit the vulnerability to launch a cross-site scripting attack...

Security Advisory - Two Vulnerabilities in Huawei WS331a

Huawei WS331a is a Mini Wireless route. There is a Cross-site request forgery CSRF vulnerability in the management interface of WS331a products, an unauthenticated attacker could exploit this vulnerability to perform a CSRF attack. Successful exploit could allow the attacker to submit special...

Belkin F9K1122v1 'fmmgmt.c' Buffer Overflow Vulnerability

Belkin F9K1122v1 is wireless dual band router product. A buffer overflow vulnerability exists in the Belkin F9K1122v1 version 1.00.30 'fmmgmt.c'. The vulnerability allows attackers to cause a buffer overflow via cross-site request forgery...

PLC Wireless Router GPN2.4P21-C-CN File Disclosure

Exploit Title: PLC Wireless Router GPN2.4P21-C-CN Authorised Arbitrary File Disclosure Date: 28/08/2016 Exploit Author: Rahul Raz Affected Model : GPN2.4P21-C-CNFrimware- W2001EN-00 Vendor: ChinaMobile Tested on: Ubuntu Linux GET...

Cisco EPC3928 Denial of Service Vulnerability (CNVD-2016-04559)

Cisco EPC3928 is a wireless router product from Cisco USA. A security vulnerability exists in the goform/WClientMACList on the Cisco EPC3928. A remote attacker can exploit this vulnerability to cause a denial of service device crash with the help of a long 'hsortWireless' parameter...

Corega CG-WLBARAGM Denial of Service Vulnerability

The Corega CG-WLBARGL is a wireless LAN router from Corega Japan. A denial of service vulnerability exists in Corega CG-WLBARAGM. A remote attacker can exploit this vulnerability to cause a denial of service reboot...

Corega CG-WLBARGL Command Injection Vulnerability

The Corega CG-WLBARGL is a wireless LAN router from Corega Japan. A command injection vulnerability exists in Corega CG-WLBARGL. An attacker can exploit this vulnerability to execute arbitrary commands...

Cisco RV110W/RV130W/RV215W Router Remote Code Execution Vulnerability

The Cisco RV130W Wireless-N is a multifunction VPN router; the Cisco RV110W/RV215W is a router that combines wired/wireless network connectivity, VPN, and firewall features. A remote code execution vulnerability exists in the Cisco RV110W/RV130W/RV215W routers, which can be exploited by an attack...

Usable Privacy Box: UpriBox

The upribox software is used to create Raspberry Pi images to turn your Raspberry Pi into a privacy-enhancing Wireless router. See the official Raspberry Pi documentation for pointers on how to install the upribox image on the SD card. Upon the first boot the SSH/VPN keys are automatically...

Directory Traversal Vulnerability in TL-WDR5600 Wireless Router

TL-WDR5600 is a wireless router product. A column directory vulnerability exists in the TL-WDR5600 wireless router. The vulnerability allows an attacker to view files in the current directory...

WN-GDN/R3 Series does not limit authentication attempts

Overview WN-GDN/R3 Series provided by I-O DATA DEVICE, INC. does not limit authentication attempts. WN-GDN/R3 series provided by I-O DATA DEVICE, INC. is a wireless LAN router. WPS functionality in WN-GDN/R3 Series does not limit PIN authentication attempts, making it susceptible to brute force...

HELP NetCommWireless HSPA 3G10WVE Security Bypass Vulnerability

HELP NetCommWireless HSPA 3G10WVE is a wireless router product from HELP UAE. The HELP NetCommWireless HSPA 3G10WVE suffers from an authentication bypass vulnerability that allows remote attackers to submit a special request for unauthorized access to the device...