The vulnerability of the microprogramming software in wireless access points for Moxa AWK-3131A industrial systems, related to hostname processing errors, allows attackers to escalate their privileges.

The vulnerability of the microprogrammed software in the wireless access point of Moxa AWK-3131A industrial systems is related to name handling errors. Exploiting this vulnerability can allow a malicious actor to gain increased privileges by sending specially crafted SNMP requests...

The vulnerability of the ServiceAgent component of the wireless access point software for Moxa AWK-3131A industrial systems allows a intruder to trigger a service failure.

The vulnerability of the ServiceAgent component in the wireless access point software for Moxa AWK-3131A industrial systems is related to a numerical overflow that causes an overflow of the stack-based buffer. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

Debian DLA-2114-1 : linux-4.9 security update

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. CVE-2018-13093, CVE-2018-13094 Wen Xu from SSLab at Gatech reported several NULL pointer dereference flaws that may be triggered when mounting and...

wifi-arsenal

This repository is an offensive tool for WiFi attacks. It is a collection of tools and scripts for various WiFi attacks, including denial of service, encryption attacks, WEP/WPA/WPA2 attacks, WPS attacks, and others. The repository includes tools for injection, rogue AP/fake AP/MITM, sniffing,...

The vulnerability of the microprogrammed wireless access point software for Moxa AWK-3121 lies in insufficient validation of arguments passed in commands, allowing attackers to execute arbitrary commands with root privileges.

The vulnerability of the microprogrammed wireless access point software for Moxa AWK-3121 lies in insufficient verification of the arguments passed in the command. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with root privileges, using a specially crafted...

CVE-2019-13321

This vulnerability allows network adjacent attackers to execute arbitrary code on affected installations of Xiaomi Browser Prior to 10.4.0. User interaction is required to exploit this vulnerability in that the target must connect to a malicious access point. The specific flaw exists within the...

BSA-2020-912

Security Advisory ID : BSA-2020-912 Component : Linux Kernel Revision : 1.0: Final An exploitable denial-of-service vulnerability exists in the Linux kernel prior to mainline 5.3. An attacker could exploit this vulnerability by triggering AP to send IAPP location updates for stations before the...

The vulnerability of Linux operating system kernels, related to insufficient input validation and improper implementation of functions, allows attackers to trigger service failures.

The vulnerability of Linux operating system kernels is related to insufficient validation of input data and incorrect implementation of functions. Exploiting this vulnerability can allow an attacker, working remotely, to cause service failures by sending location updates via the IAPP protocol,...

kernel: Heap overflow in mwifiex_uap_parse_tail_ies function in drivers/net/wireless/marvell/mwifiex/ie.c

A flaw was found in the mwifiex implementation in the Linux kernel. A system connecting to wireless access point could be manipulated by an attacker with advanced permissions on the access point into localized memory corruption or possibly privilege escalation...

Ruckus ZoneFlex R310 Cross-Site Scripting Vulnerability

The Ruckus ZoneFlex R310 is an indoor 802.11ac Wi-Fi access point. A cross-site scripting vulnerability exists in the Ruckus ZoneFlex R310 version 104.0.0.0.1347, which stems from a lack of proper validation of client data by the WEB application and can be exploited by an attacker to execute...

Fedora Update for hostapd FEDORA-2019-740834c559

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

VulnCheck KEV: CVE-2016-1555

Multiple NETGEAR Wireless Access Point devices allows unauthenticated web pages to pass form input directly to the command-line interface. Exploitation allows for arbitrary code execution...

CVE-2019-18842

A cross-site scripting XSS vulnerability in the configuration web interface of the Jinan USR IOT USR-WIFI232-S/T/G2/H Low Power WiFi Module with web version 1.2.2 allows attackers to leak credentials of the Wi-Fi access point the module is logged into, and the web interface login credentials, by...

CVE-2019-18842

A cross-site scripting XSS vulnerability in the configuration web interface of the Jinan USR IOT USR-WIFI232-S/T/G2/H Low Power WiFi Module with web version 1.2.2 allows attackers to leak credentials of the Wi-Fi access point the module is logged into, and the web interface login credentials, by...

Linux kernel denial of service vulnerability (CNVD-2020-02587)

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A denial of service vulnerability exists in Linux kernel versions prior to 5.3. An attacker can exploit this...

NETGEAR N300 WNR2000v5 Denial of Service (CVE-2019-5055)

A denial-of-service vulnerability exists in the Host Access Point Daemon on the NETGEAR N300 wireless router. The vulnerability is due invalid sequence SOAP request sent to the service can cause a null pointer dereference. An unauthenticated attacker can send a specially-crafted SOAP request to...

Buffer overflow vulnerability in multiple Huawei products (CNVD-2020-36734)

Huawei AP2000 and others are products of Huawei, China.Huawei AP2000 is a wireless access point device.Huawei IPS Module is an intrusion prevention system IPS module.NGFW Module is a next-generation firewall NGFW module. A buffer overflow vulnerability exists in multiple Huawei products. An...

hostapd Input Validation Error Vulnerability

hostapd is a user space daemon for access points and authentication servers. An input validation error vulnerability exists in 802.11w security state handling in hostapd version 2.6, which can be exploited by an attacker to cause a denial of service...

CVE-2019-14899

A vulnerability was discovered in Linux, FreeBSD, OpenBSD, MacOS, iOS, and Android that allows a malicious access point, or an adjacent user, to determine if a connected user is using a VPN, make positive inferences about the websites they are visiting, and determine the correct sequence and...

Linux Bug Opens Most VPNs to Hijacking

A vulnerability in most Linux distros has been uncovered that allows a network-adjacent attacker to hijack VPN connections and inject rogue data into the secure tunnels that victims are using to communicate with remote servers. According to researchers at University of New Mexico and Breakpointin...