340 matches found
PT-2018-2660 · Linksys · Linksys E2500 +2
Name of the Vulnerable Software and Affected Versions: Linksys E1200 version 2.0.09 Linksys E2500 version 3.0.04 Description: An operating system command injection exists in the Linksys E-Series line of routers. Specially crafted entries to network configuration information can cause execution of...
PT-2018-2661 · Linksys · Linksys E2500 +1
Name of the Vulnerable Software and Affected Versions: Linksys E1200 versions 2.0.09 and earlier Linksys E2500 versions 3.0.04 and earlier Description: The issue exists due to improper filtering of data passed to and retrieved from NVRAM, allowing for OS command injection. Data entered into the...
The vulnerability of the apply.cgi component in ASUS’ microprogramming software for routers allows a hacker to execute arbitrary commands with root privileges.
The vulnerability of the apply.cgi component in ASUS router microprogramming systems exists due to the lack of measures taken to neutralize the special elements used in operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using the...
The vulnerability of the “/apply.cgi?/lang_check.html” component of the NETGEAR WNR2000v5 router’s embedded software allows a hacker to execute arbitrary code.
The vulnerability of the /apply.cgi?/langcheck.html component in NETGEAR WNR2000v5 router software is caused by buffer overflow. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using the “hiddenlangavi” parameter...
VulnCheck KEV: CVE-2016-10176
The NETGEAR WNR2000v5 router allows an administrator to perform sensitive actions by invoking the apply.cgi URL on the web server of the device. This special URL is handled by the embedded web server uhttpd and processed accordingly. The web server also contains another URL, applynoauth.cgi, that...
CVE-2017-10677
Cross-Site Request Forgery CSRF exists on Linksys EA4500 devices with Firmware Version before 2.1.41.164606, as demonstrated by a request to apply.cgi to disable SIP...
CVE-2017-10677: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF exists on Linksys EA4500 devices with Firmware Version before 2.1.41.164606, as demonstrated by a request to apply.cgi to disable SIP...
CVE-2016-10176
The NETGEAR WNR2000v5 router allows an administrator to perform sensitive actions by invoking the apply.cgi URL on the web server of the device. This special URL is handled by the embedded web server uhttpd and processed accordingly. The web server also contains another URL, applynoauth.cgi, that...
CVE-2016-10176
The NETGEAR WNR2000v5 router allows an administrator to perform sensitive actions by invoking the apply.cgi URL on the web server of the device. This special URL is handled by the embedded web server uhttpd and processed accordingly. The web server also contains another URL, applynoauth.cgi, that...
Remote code execution
The NETGEAR WNR2000v5 router allows an administrator to perform sensitive actions by invoking the apply.cgi URL on the web server of the device. This special URL is handled by the embedded web server uhttpd and processed accordingly. The web server also contains another URL, applynoauth.cgi, that...
CVE-2016-10176
The NETGEAR WNR2000v5 router allows an administrator to perform sensitive actions by invoking the apply.cgi URL on the web server of the device. This special URL is handled by the embedded web server uhttpd and processed accordingly. The web server also contains another URL, applynoauth.cgi, that...
CVE-2016-10176: Improper Input Validation
The NETGEAR WNR2000v5 router allows an administrator to perform sensitive actions by invoking the apply.cgi URL on the web server of the device. This special URL is handled by the embedded web server uhttpd and processed accordingly. The web server also contains another URL, applynoauth.cgi, that...
PT-2017-3172 · NetGear · Netgear Wnr2000V5 Router
Name of the Vulnerable Software and Affected Versions: NETGEAR WNR2000v5 Router affected versions not specified Description: The issue is caused by a buffer overflow in the hidden lang avi parameter when invoking the URL "/apply.cgi?/lang check.html". This can be exploited by an unauthenticated...
D-Link DIR-615 Open Redirection / Cross Site Scripting
Title: D-Link DIR-615 Multiple Vulnerabilities Date: 10-01-2017 Hardware Version: E3 Firmware Version: 5.10 Tested on: Windows 8 64-bit Exploit Author: Osanda Malith Jayathissa @OsandaMalith Original write-up:https://osandamalith.com/2017/01/04/d-link-dir-615-open-redirection-and-xss/ Overview...
D-Link DIR-615 - Multiple Vulnerabilities
Title: D-Link DIR-615 Multiple Vulnerabilities Date: 10-01-2017 Hardware Version: E3 Firmware Version: 5.10 Tested on: Windows 8 64-bit Exploit Author: Osanda Malith Jayathissa @OsandaMalith Original write-up:https://osandamalith.com/2017/01/04/d-link-dir-615-open-redirection-and-xss/ Overview...
D-Link DIR-615 - Multiple Vulnerabilities
D-Link DIR-615 - Multiple Vulnerabilities Title: D-Link DIR-615 Multiple Vulnerabilities Date: 10-01-2017 Hardware Version: E3 Firmware Version: 5.10 Tested on: Windows 8 64-bit Exploit Author: Osanda Malith Jayathissa @OsandaMalith Original...
D-Link DIR-615 'apply.cgi'绕过安全限制漏洞
No description provided by source. 构造url 访问路由器 http://192.168.0.1/apply.cgi?adminpassword=pwdpwd&adminpassword1=pwdpwd& admPass2=pwdpwd&remoteenable=1&remotehttpmanagementenable=1&remotehttp managementport=8080&remoteinboundfilter=AllowAll&remotehttpmanagement inboundfilter=AllowAll...
Linksys EA2700 apply.cgi 目录穿越
No description provided by source...
CVE-2013-3068
Cross-site request forgery CSRF vulnerability in apply.cgi in Linksys WRT310Nv2 2.0.0.1 allows remote attackers to hijack the authentication of administrators for requests that change passwords and modify remote management ports...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in apply.cgi in Linksys WRT310Nv2 2.0.0.1 allows remote attackers to hijack the authentication of administrators for requests that change passwords and modify remote management ports...