Belkin N150 Wireless Router F9K1009 v1 - Multiple Vulnerabilities

Full Disclosure: Exploit Title : Belkin N150 Wireless Home Router Multiple Vulnerabilities Exploit Author : Rahul Pratap Singh Date : 30/Nov/2015 Home Page Link : http://www.belkin.com Blog Url : 0x62626262.wordpress.com Linkedin : https://in.linkedin.com/in/rahulpratapsingh94 Status : Not Patche...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the D-Link DIR-816L Wireless Router with firmware before 2.06.B09BETA allow remote attackers to hijack the authentication of administrators for requests that 1 change the admin password, 2 change the network policy, or 3 possibly have...

CVE-2015-5999

CVE-2015-5999 affects D-Link DIR-816L wireless routers running firmware before 2.06.B09_BETA. The vulnerability is a CSRF flaw that can hijack administrator authentication to perform actions such as changing the admin password and network policy via crafted requests to hedwig.cgi and pigwidgeon.c...

CVE-2015-5999

Multiple cross-site request forgery CSRF vulnerabilities in the D-Link DIR-816L Wireless Router with firmware before 2.06.B09BETA allow remote attackers to hijack the authentication of administrators for requests that 1 change the admin password, 2 change the network policy, or 3 possibly have...

D-Link DIR-645 UPNP Buffer Overflow Vulnerability

D-Link DIR-645 suffers from a UPNP related buffer overflow vulnerability. Title: Dlink DIR-645 UPNP Buffer Overflow Vendors contacted: William Brown Dlink Release mode: Released CVE: None Note: All these security issues have been discussed with the vendor and vendor indicated that they have fixed...

D-Link DIR-816L Cross Site Request Forgery Vulnerability

D-Link DIR-816L suffers from a cross site request forgery vulnerability. Title: ==== D-link wireless router DIR-816L – Cross-Site Request Forgery CSRF vulnerability Credit: ====== Name: Bhadresh Patel Company/affiliation: HelpAG Website: www.helpag.com CVE: ===== CVE-2015-5999 Date: ==== 10-11-20...

D-Link DIR-880L - Multiple Buffer Overflow Vulnerabilities

D-Link DIR-880L - Multiple Buffer Overflow Vulnerabilities Advisory Information Title: DIR-880L Buffer overflows in authenticatio and HNAP functionalities. Vendors contacted: William Brown , Patrick Cline [email protected] CVE: None Note: All these security issues have been discussed...

D-Link DIR-818W Buffer Overflow / Command Injection Vulnerabilities

D-Link DIR-818W suffers from buffer overflow and command injection vulnerabilities. Title: DIR-818W Buffer overflows and Command injection in authentication and HNAP functionalities Vendors contacted: William Brown , Patrick Cline email protected CVE: None Note: All these security issues have bee...

D-Link DIR-817LW Buffer Overflow / Command Injection

Advisory Information Title: DIR-817LW Buffer overflows and Command injection in authentication and HNAP functionalities Vendors contacted: William Brown , Patrick Cline [email protected] CVE: None Note: All these security issues have been discussed with the vendor and vendor indicated...

D-Link DIR-818W Buffer Overflow / Command Injection

Advisory Information Title: DIR-818W Buffer overflows and Command injection in authentication and HNAP functionalities Vendors contacted: William Brown , Patrick Cline [email protected] CVE: None Note: All these security issues have been discussed with the vendor and vendor indicated...

D-Link DIR-645 - Multiple UPNP Vulnerabilities

D-Link DIR-645 - Multiple UPNP Vulnerabilities Advisory Information Title: Dlink DIR-645 UPNP Buffer Overflow Vendors contacted: William Brown Dlink Release mode: Released CVE: None Note: All these security issues have been discussed with the vendor and vendor indicated that they have fixed issue...

D-Link DIR-818W - Multiple Vulnerabilities

D-Link DIR-818W - Multiple Vulnerabilities Advisory Information Title: DIR-818W Buffer overflows and Command injection in authentication and HNAP functionalities Vendors contacted: William Brown , Patrick Cline [email protected] CVE: None Note: All these security issues have been...

D-Link DIR-645 UPNP Buffer Overflow

Advisory Information Title: Dlink DIR-645 UPNP Buffer Overflow Vendors contacted: William Brown Dlink Release mode: Released CVE: None Note: All these security issues have been discussed with the vendor and vendor indicated that they have fixed issues as per the email communication. The vendor ha...

D-Link DIR-816L Wireless Router - Cross-Site Request Forgery

---------------------------------------------------------------------------------------------- Title: ==== D-link wireless router DIR-816L – Cross-Site Request Forgery CSRF vulnerability Credit: ====== Name: Bhadresh Patel Company/affiliation: HelpAG Website: www.helpag.com CVE: ===== CVE-2015-59...

XSS and CSRF vulnerabilities in ASUS RT-G32

Hello 3APA3A! There are Cross-Site Scripting and Cross-Site Request Forgery vulnerabilities in ASUS Wireless Router RT-G32. ------------------------- Affected products: ------------------------- Vulnerable is the next model: ASUS RT-G32 with different versions of firmware. I checked in ASUS RT-G3...

netis RealTek Wireless Router ADSL Modem - Multiple Vulnerabilities

netis RealTek Wireless Router ADSL Modem - Multiple Vulnerabilities Exploit Title: netis RealTek wireless router / ADSL modem Multiple Vulnerabilities Discovered by: Karn Ganeshen Reported on: October 13, 2015 Vendor Response: Vulnerability? What's this? Vendor Homepage: www.netis-systems.com...

netis RealTek Wireless Router / ADSL Modem - Multiple Vulnerabilities

Exploit for hardware platform in category web applications Exploit Title: netis RealTek wireless router / ADSL modem Multiple Vulnerabilities Discovered by: Karn Ganeshen Reported on: October 13, 2015 Vendor Response: Vulnerability? What's this? Vendor Homepage: www.netis-systems.com Version...

Belkin N600 DB Wireless Dual Band N+ Security Bypass Vulnerability

Belkin N600 DB Wireless Dual Band N+ is a wireless dual band router product from Belkin USA. The Belkin N600 DB Wireless Dual Band N+ has a security vulnerability that allows an attacker to intercept packets containing the 'LockStatus:1' and 'LoginSuccess:0' strings on the embedded server side of...

Belkin N600 DB Wireless Dual Band N+ Cross-Site Request Forgery Vulnerability

Belkin N600 DB Wireless Dual Band N+ is a wireless dual band router product from Belkin USA. The Belkin N600 DB Wireless Dual Band N+ suffers from a cross-site request forgery vulnerability that allows a remote attacker to construct a malicious URI, trick the user into parsing it, and perform...

Mediabridge Medialink Wireless-N Broadband Router MWN-WAPR300N Cross-Site Request Forgery Vulnerability

Mediabridge Medialink Wireless-N Broadband Router MWN-WAPR300N is a wireless broadband router product. A cross-site request forgery vulnerability exists in the Mediabridge Medialink Wireless-N Broadband Router MWN-WAPR300N, which allows remote attackers to construct malicious URIs, trick users in...