1447 matches found
CVE-2017-8877: Exposure of Sensitive Information to an Unauthorized Actor
ASUS RT-AC and RT-N devices with firmware through 3.0.0.4.380.7378 allow JSONP Information Disclosure such as the SSID...
PT-2017-18600
Name of the Vulnerable Software and Affected Versions ASUS RT-AC and RT-N devices with firmware prior to 3.0.0.4.380.7378 Description The issue allows remote authenticated users to discover the Wi-Fi password via the WPS info.xml file. Recommendations For ASUS RT-AC and RT-N devices with firmware...
PT-2017-16739
Name of the Vulnerable Software and Affected Versions ASUS RT-AC and RT-N devices with firmware prior to 3.0.0.4.380.7378 Description The issue affects the login page and save settings functionality, allowing for CSRF attacks. Recommendations For ASUS RT-AC and RT-N devices with firmware prior to...
CVE-2017-5891: Cross-Site Request Forgery (CSRF)
ASUS RT-AC and RT-N devices with firmware before 3.0.0.4.380.7378 have Login Page CSRF and Save Settings CSRF...
CVE-2017-5892: Exposure of Sensitive Information to an Unauthorized Actor
ASUS RT-AC and RT-N devices with firmware before 3.0.0.4.380.7378 allow JSONP Information Disclosure such as a network map...
PT-2017-16740
Name of the Vulnerable Software and Affected Versions ASUS RT-AC and RT-N devices with firmware prior to 3.0.0.4.380.7378 Description The issue allows JSONP information disclosure, which can include details such as a network map. Recommendations For ASUS RT-AC and RT-N devices with firmware prior...
CVE-2017-8878: Exposure of Sensitive Information to an Unauthorized Actor
ASUS RT-AC and RT-N devices with firmware before 3.0.0.4.380.7378 allow remote authenticated users to discover the Wi-Fi password via WPSinfo.xml...
PT-2017-18599
Name of the Vulnerable Software and Affected Versions ASUS RT-AC and RT-N devices with firmware through 3.0.0.4.380.7378 Description The issue allows for JSONP information disclosure, including sensitive details such as the SSID. Recommendations For ASUS RT-AC and RT-N devices with firmware throu...
Multiple Jensen of Scandinavia Air:Link Open Redirect Vulnerabilities
Air:Link 3G, Air:Link 5000AC, Air:Link 59300 are routers from Jensen of Scandinavia, Norway. An open redirect vulnerability exists in the handling of the 'submit-url' parameter on the /goform/ page of multiple Jensen of Scandinavia Air:Link products. An attacker can construct a malicious URI, tri...
londonmet.ac.uk XSS vulnerability
Open Bug Bounty ID: OBB-218756 Description| Value ---|--- Affected Website:| londonmet.ac.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
AC Browser - Certificates or keys found, External URLs, SD-card access vulnerabilities
HackApp vulnerability scanner discovered that application AC Browser published at the 'play' market has multiple vulnerabilities...
ac-montpellier.fr XSS vulnerability
Vulnerable URL: http://www.ac-montpellier.fr/recherche.php?recMot=' onload='confirm/OPENBUGBOUNTY/' x='==Simple Details: Description| Value ---|--- Patched:| Yes, at 24.01.2017 Latest check for patch:| 24.01.2017 10:53 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...
ac-paris.fr XSS vulnerability
Vulnerable URL: https://www.ac-paris.fr/serail/jcms/s2374182/ecole-elementaire-10-st-lambert?portal=%22%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E374182=%2Fserail%2Fdisplay.jsp%3Fid%3Ds2374211=front%2Flogin-jcms.jsp Details: Description| Value ---|--- Patched:| No Latest check for patch:...
Weak password vulnerability in MPSec-VPN3005S-AC model device
The MPSec-VPN3005S-AC model device is a security gateway developed by Maipu. A weak password vulnerability exists in the MPSec-VPN3005S-AC device. A weak password vulnerability exists in port 23 of the MPSec-VPN3005S-AC device, which can be exploited by an attacker to log in to the system and gai...
Ubiquiti UniFi AP AC Lite 5.2.7 Improper Access Control
Product: UniFi AP AC Lite Vendor: Ubiquiti Networks Inc. Internal reference: ? Bug ID Vulnerability type: Incorrect access control Vulnerable version: Unify 5.2.7 and possible other versions affected not tested Vulnerable component: Database Report confidence: yes Solution status: Not fixed by...
Code injection
Huawei AC6003, AC6005, AC6605, and ACU2 access controllers with software before V200R006C10SPC200 allows remote authenticated users to cause a denial of service device restart via crafted CAPWAP packets...
“AC”triggered“bloodshed”-vulnerability warning-the black bar safety net
This month Microsoft released 6-months security update, fixes a high risk vulnerability. It can affect from Windows 9 5 to Windows 10 all editions of theoperating system. The vulnerability by Tencent basaltic laboratory finding, and is named BadTunnel it. Thus, the great TK guru again and again...
Ubiquiti Network Gear Targeted By Worm
ISP equipment maker Ubiquiti Networks is fending off a stubborn worm targeting its networking equipment running outdated AirOS firmware. According to security experts, the worm is already being blamed for crippling networking gear in the Argentina, Brazil, Spain and the United States. Ubiquiti...
Maginon AC-800W - Native code usage, SD-card access vulnerabilities
HackApp vulnerability scanner discovered that application Maginon AC-800W published at the 'play' market has multiple vulnerabilities...