Design/Logic Flaw

The mDNS module in Huawei WLAN AC6005, AC6605, and ACU2 devices with software before V200R006C00SPC100 allows remote attackers to obtain sensitive information by leveraging failure to restrict processing of mDNS unicast queries to the link local network...

CVE-2015-6586

The mDNS module in Huawei WLAN AC6005, AC6605, and ACU2 devices with software before V200R006C00SPC100 allows remote attackers to obtain sensitive information by leveraging failure to restrict processing of mDNS unicast queries to the link local network...

ASUS RT-AC * and RT-N * Information Disclosure Vulnerability

ASUS RT-AC and RT-N are two router products. An information disclosure vulnerability exists in ASUS RT-AC and RT-N firmware prior to 3.0.0.4.380.7378. An attacker can exploit the vulnerability to obtain sensitive information...

Cross site request forgery (csrf)

ASUS RT-AC and RT-N devices with firmware before 3.0.0.4.380.7378 have Login Page CSRF and Save Settings CSRF...

Information disclosure

ASUS RT-AC and RT-N devices with firmware before 3.0.0.4.380.7378 allow JSONP Information Disclosure such as a network map...

Default credentials

ASUS RT-AC and RT-N devices with firmware before 3.0.0.4.380.7378 allow remote authenticated users to discover the Wi-Fi password via WPSinfo.xml...

CVE-2017-5892

ASUS RT-AC* and RT-N* routers with firmware older than 3.0.0.4.380.7378 expose a JSONP information-disclosure flaw that can reveal router data such as a network map. The vulnerability is covered by CVE-2017-5892. Most CSRF-related issues were fixed in firmware 3.0.0.4.380.7378; the JSONP informat...

CVE-2017-8878

This entry covers ASUS RT-AC* and RT-N* routers with firmware prior to 3.0.0.4.380.7378. It describes an information-disclosure vulnerability where remote authenticated users can obtain the Wi-Fi password via WPS_info.xml. Impact is partial confidentiality (password exposure) with no integrity or...

CVE-2017-8877

Consolidated risk: CVE-2017-8877 affects ASUS RT-AC* and RT-N* routers with firmware up to 3.0.0.4.380.7378. The connected CNVD entry and NVD description indicate an information-disclosure flaw in which JSONP responses can reveal sensitive data (notably the SSID). No explicit exploit details, aff...

CVE-2017-5891

ASUS RT-AC and RT-N devices with firmware before 3.0.0.4.380.7378 have Login Page CSRF and Save Settings CSRF...

CVE-2017-5891

CVE-2017-5891 covers CSRF vulnerabilities in ASUS RT-AC* and RT-N* routers prior to firmware 3.0.0.4.380.7378, enabling login and settings changes via the router’s web interface from an attacker-controlled site. Affected models include RT-AC55U/56R/56S/56U/66U/66R/66W/66U family, RT-AC68K/R/U var...

Multiple Jensen of Scandinavia Air:Link Open Redirect Vulnerabilities

Air:Link 3G, Air:Link 5000AC, Air:Link 59300 are routers from Jensen of Scandinavia, Norway. An open redirect vulnerability exists in the handling of the 'submit-url' parameter on the /goform/ page of multiple Jensen of Scandinavia Air:Link products. An attacker can construct a malicious URI, tri...

londonmet.ac.uk XSS vulnerability

Open Bug Bounty ID: OBB-218756 Description| Value ---|--- Affected Website:| londonmet.ac.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

AC Browser - Certificates or keys found, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application AC Browser published at the 'play' market has multiple vulnerabilities...

ac-montpellier.fr XSS vulnerability

Vulnerable URL: http://www.ac-montpellier.fr/recherche.php?recMot=' onload='confirm/OPENBUGBOUNTY/' x='==Simple Details: Description| Value ---|--- Patched:| Yes, at 24.01.2017 Latest check for patch:| 24.01.2017 10:53 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

ac-paris.fr XSS vulnerability

Vulnerable URL: https://www.ac-paris.fr/serail/jcms/s2374182/ecole-elementaire-10-st-lambert?portal=%22%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E374182=%2Fserail%2Fdisplay.jsp%3Fid%3Ds2374211=front%2Flogin-jcms.jsp Details: Description| Value ---|--- Patched:| No Latest check for patch:...

Weak password vulnerability in MPSec-VPN3005S-AC model device

The MPSec-VPN3005S-AC model device is a security gateway developed by Maipu. A weak password vulnerability exists in the MPSec-VPN3005S-AC device. A weak password vulnerability exists in port 23 of the MPSec-VPN3005S-AC device, which can be exploited by an attacker to log in to the system and gai...

Ubiquiti UniFi AP AC Lite 5.2.7 Improper Access Control

Product: UniFi AP AC Lite Vendor: Ubiquiti Networks Inc. Internal reference: ? Bug ID Vulnerability type: Incorrect access control Vulnerable version: Unify 5.2.7 and possible other versions affected not tested Vulnerable component: Database Report confidence: yes Solution status: Not fixed by...

Code injection

Huawei AC6003, AC6005, AC6605, and ACU2 access controllers with software before V200R006C10SPC200 allows remote authenticated users to cause a denial of service device restart via crafted CAPWAP packets...

“AC”triggered“bloodshed”-vulnerability warning-the black bar safety net

This month Microsoft released 6-months security update, fixes a high risk vulnerability. It can affect from Windows 9 5 to Windows 10 all editions of theoperating system. The vulnerability by Tencent basaltic laboratory finding, and is named BadTunnel it. Thus, the great TK guru again and again...