zynos-attacker

IMPORTANT : These scripts are intended for educational purposes only. Description : With these scripts you can attack ZynOS routers and modify/extract anything you want on the target router from extracting ISP username and password to injecting rogue DNS servers IPs...

EUVD-2007-1580

Malware in sbrugna...

EUVD-2004-1678

Malware in sbrugna...

ZynOS rom-0 Flaw Scanner

!/usr/bin/perl ZynOS rom-0 Flaw Scanner Copyright 2021 c Todor Donev https://donev.eu/ $ perl zynosscanner ZynOS rom-0 Flaw Scanner zynosscanner --targets= --threads=10 --redirects=7 --help --targets | Specify the list with addresses that you want to scan. --dump | Dump rom-0 file for each target...

P-660HW NBG-418N PMG5318 ZyNOS Privilege Escalation

The vulnerability of the P-660HW, NBG-418N, PMG5318 router microprogramming software and the ZyNOS operating system is related to the default use of a standard password for the administrator account. Exploiting this vulnerability can allow an attacker, operating remotely, to gain administrator...

CVE-2015-6017

Multiple cross-site scripting XSS vulnerabilities in Forms/rpAuth1 on ZyXEL P-660HW-T1 2 devices with ZyNOS firmware 3.40AXH.0 allow remote attackers to inject arbitrary web script or HTML via the 1 LoginPassword or 2 hiddenPassword parameter...

CVE-2015-6016

ZyXEL P-660HW-T1 2 devices with ZyNOS firmware 3.40AXH.0, PMG5318-B20A devices with firmware 1.00AANC0b5, and NBG-418N devices have a default password of 1234 for the admin account, which allows remote attackers to obtain administrative access via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Forms/rpAuth1 on ZyXEL P-660HW-T1 2 devices with ZyNOS firmware 3.40AXH.0 allow remote attackers to inject arbitrary web script or HTML via the 1 LoginPassword or 2 hiddenPassword parameter...

CVE-2015-6016

CVE-2015-6016 affects ZyXEL routers: P-660HW-T1 v2 with ZyNOS 3.40(AXH.0), PMG5318-B20A (firmware 1.00AANC0b5), and NBG-418N, where the admin account uses a default password of 1234 . This enables remoting attackers to obtain administrative access via unspecified vectors. The connected sources co...

CVE-2015-6017

CVE-2015-6017 refers to multiple cross-site scripting (XSS) vulnerabilities in the ZyXEL P-660HW-T1 v2 router running ZyNOS firmware 3.40(AXH.0). The issue resides in the web form at /Forms/rpAuth_1, where an attacker can craft requests that inject arbitrary script or HTML via the LoginPassword o...

CVE-2015-6017

Multiple cross-site scripting XSS vulnerabilities in Forms/rpAuth1 on ZyXEL P-660HW-T1 2 devices with ZyNOS firmware 3.40AXH.0 allow remote attackers to inject arbitrary web script or HTML via the 1 LoginPassword or 2 hiddenPassword parameter...

CVE-2015-6016: Undefined Security Weakness

ZyXEL P-660HW-T1 2 devices with ZyNOS firmware 3.40AXH.0, PMG5318-B20A devices with firmware 1.00AANC0b5, and NBG-418N devices have a default password of 1234 for the admin account, which allows remote attackers to obtain administrative access via unspecified vectors...

PT-2015-2964

Name of the Vulnerable Software and Affected Versions ZyXEL P-660HW-T1 versions 3.40AXH.0 ZyXEL PMG5318-B20A versions 1.00AANC0b5 ZyXEL NBG-418N affected versions not specified Description The issue is related to the use of a default password for the administrator account in the firmware of certa...

CVE-2015-6017: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Forms/rpAuth1 on ZyXEL P-660HW-T1 2 devices with ZyNOS firmware 3.40AXH.0 allow remote attackers to inject arbitrary web script or HTML via the 1 LoginPassword or 2 hiddenPassword parameter...

ZyXEL P-660HW-T1 Cross-Site Scripting Vulnerability

Zyxel P-660HW-T1 is a wireless router product from ZyXEL Technology. A cross-site scripting vulnerability exists in the 'LoginPassword' and 'hiddenPassword' parameters in the /Forms/rpAuth1 page of the ZyXEL P-660HW-T1 v2 using ZyNOS version V3.40 AXH.0 firmware. ' parameters in the /Forms/rpAuth...

DNS Hijack Flaw Found in D-Link Router

D-Link’s popular DSL2740R wireless router is vulnerable to domain name system DNS hijacking exploits that requiring no authentication to access its administrative interface. According to Todor Donev of the Bulgarian security firm Ethical Hacker, a number of other D-Link routers are affected by th...

Friends news router discovery DNS hijacking vulnerability-vulnerability warning-the black bar safety net

Security researchers have found that the Friends of the hearing at least one model of the router is found that the presence of DNS hijacking vulnerability that can be remotely change the DNS settings, hijack the traffic. Ethical hackerEthical Hackerresearch group of Todor Donev said, the...

Immunity Canvas: CVE_2014_9222

Name| CVE20149222 ---|--- CVE| CVE-2014-9222 Exploit Pack| CANVAS Description| CVE-2014-9222 Misfortune Cookie Notes| CVE Name: CVE-2014-9222 VENDOR: Alegro Notes: This module exploits the arbitrary memory overwrite vulnerability in RomPager embedded web-server, which was originally introduced by...

XSS and CSRF vulnerabilities in Zyxel P660RT2 EE

Hello 3APA3A! These are Cross-Site Scripting and Cross-Site Request Forgery vulnerabilities in Zyxel P660RT2 EE ADSL Router. ------------------------- Affected products: ------------------------- Vulnerable is the next model: Zyxel P660RT2 EE. ZyNOS Firmware Version: V3.40 AXN.1. This model with...

BF and XSS vulnerabilities in Zyxel P660RT2 EE

Hello 3APA3A! These are Brute Force and Cross-Site Scripting vulnerabilities in Zyxel P660RT2 EE ADSL Router. ------------------------- Affected products: ------------------------- Vulnerable is the next model: Zyxel P660RT2 EE. ZyNOS Firmware Version: V3.40 AXN.1. This model with other firmware...