1352 matches found
Code injection
A certain router administration interface that includes Realtek APMIB 0.11f for Boa 0.94.14rc21 allows remote attackers to retrieve the configuration, including sensitive data usernames and passwords. This affects TOTOLINK A3002RU through 2.0.0, A702R through 2.1.3, N301RT through 2.1.6, N302R...
Denial of service
An exploitable denial-of-service vulnerability exists in the hostapd 2.6, where an attacker could trigger AP to send IAPP location updates for stations, before the required authentication process has completed. This could lead to different denial of service scenarios, either by causing CAM table...
CVE-2019-14896
A heap-based buffer overflow vulnerability was found in the Linux kernel, version kernel-2.6.32, in Marvell WiFi chip driver. A remote attacker could cause a denial of service system crash or, possibly execute arbitrary code, when the lbsibssjoinexisting function is called after a STA connects to...
CVE-2019-14896
A heap-based buffer overflow vulnerability was found in the Linux kernel, version kernel-2.6.32, in Marvell WiFi chip driver. A remote attacker could cause a denial of service system crash or, possibly execute arbitrary code, when the lbsibssjoinexisting function is called after a STA connects to...
ASUS RT-N10+ 2.0.3.4 CSRF / XSS / Command Execution Exploit
ASUS RT-N10+ with firmware version 2.0.3.4 suffers from cross site request forgery and cross site scripting vulnerabilities that can assist with achieving command execution. Exploit Title: XSS And CSRF to RCE in ASUS RT-N10 Repeater Mode Exploit Author: Matheus Vrech Vendor Homepage:...
CVE-2019-15260
A vulnerability in Cisco Aironet Access Points APs Software could allow an unauthenticated, remote attacker to gain unauthorized access to a targeted device with elevated privileges. The vulnerability is due to insufficient access control for certain URLs on an affected device. An attacker could...
SKA - Simple Karma Attack
SKA allows you to implement a very simple and fast karma attack. You can sniff probe requests to choice the fake AP name or, if you want, you could insert manually the name of the AP evil twin attack. When the target has connected to your WLAN you could active the HTTP redirection and perform a...
Zyxel Access Point Hardcoded Credentials (FTP)
Zyxel access points are using known hardcoded credentials. Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software...
CVE-2019-14335
An issue was discovered on D-Link 6600-AP and DWL-3600AP Ax 4.2.0.14 21/03/2019 devices. There is post-authenticated denial of service leading to the reboot of the AP via the admin.cgi?action=%s URI...
CVE-2019-14335
An issue was discovered on D-Link 6600-AP and DWL-3600AP Ax 4.2.0.14 21/03/2019 devices. There is post-authenticated denial of service leading to the reboot of the AP via the admin.cgi?action=%s URI...
CVE-2019-14335
The CVE-2019-14335 issue affects D-Link 6600-AP and DWL-3600AP devices (firmware 4.2.0.14 Ax) and describes a post-authenticated denial-of-service that can reboot the access point via the admin.cgi?action=%s URI. The connected sources corroborate a local, post-auth exploitation path affecting the...
CVE-2016-10861
Neet AirStream NAS1.1 devices allow CSRF attacks that cause the settings binary to change the AP name and password...
CVE-2016-10861
Neet AirStream NAS1.1 devices allow CSRF attacks that cause the settings binary to change the AP name and password...
Cross site request forgery (csrf)
Neet AirStream NAS1.1 devices allow CSRF attacks that cause the settings binary to change the AP name and password...
CVE-2016-10861
CVE-2016-10861 affects Neet AirStream NAS1.1 devices via CSRF in the settings binary that can change the AP name and password. This is documented across multiple feeds (NVD/NVD-derived entries and Red Hat). The vulnerability arises from CSRF, with impact described as the AP name/password being al...
CVE-2016-10861
Neet AirStream NAS1.1 devices allow CSRF attacks that cause the settings binary to change the AP name and password...
D-Link 6600-AP, DWL-3600AP and DWL-8610AP Information Disclosure Vulnerability
The D-Link 6600-AP, among others, is a wireless access point device from AUO D-Link of Taiwan, China. A security vulnerability exists in the D-Link 6600-AP, DWL-3600AP, and DWL-8610AP. An attacker could exploit the vulnerability to extract certificates and RSA private keys...
D-Link 6600-AP and DWL-3600AP SSH Weak Password Vulnerability
The D-Link 6600-AP and the DWL-3600AP are both wireless access point devices from AUO D-Link of Taiwan, China. A security vulnerability exists in the D-Link 6600-AP and DWL-3600AP. The vulnerability can be exploited by an attacker to brute-force break the SSH password...
D-Link 6600-AP and DWL-3600AP Buffer Overflow Vulnerability
The D-Link 6600-AP and the DWL-3600AP are both wireless access point devices from AUO D-Link of Taiwan, China. A buffer overflow vulnerability exists in the D-Link 6600-AP and DWL-3600AP. The vulnerability originates when a network system or product performs an operation on memory without properl...