ASUS DSL-AC88U - Authentication Bypass

A vulnerability in the ASUS DSL-AC88U router permits unauthorized individuals to bypass authentication.When adding "/js/..%2f%2f" or "/images/..%2f%2e" to the requested URL, it will be recognized as passing the authentication.This vulnerability is part of a broader authentication bypass issue...

CVE-2025-3464-AsIO3-LPE

CVE-2025-3464-AsIO3-LPE CVE-2025-3464: Exploit de escalación local sin privilegios para AsIO3.sys de ASUS - Bypass de autenticación TOCTOU + Decremento de PreviousMode CVE-2025-3464: Escalación de Privilegios Local en AsIO3.sys Este exploit solo funciona en Windows 11 22H2 o anterior. Microsoft...

SmmExploit

SmmExploit Este es un informe y un exploit de CVE-2021-26943, la vulnerabilidad de escalada de privilegios local de kernel a SMM en el BIOS versión 303 del ASUS UX360CA. El problema se solucionó en la versión 304. Descripción del problema Resumen El BIOS versión 303 del UX360CA tiene 3 módulos...

asus-cmd

ASUS Router infosvr UDP Broadcast root Command Execution Several models of ASUS's routers include a service called infosvr that listens on UDP broadcast port 9999 on the LAN or WLAN interface. It's used by one of ASUS's tools to ease router configuration by automatically locating routers on the...

CVE-2023-35086-POC

CVE-2023-35086-POC July 25 2023, Altin tin-z, github.com/tin-z Breve descripción Los firmwares de los routers ASUS RT-AX56U V2 y RT-AC86U, con versiones iguales o inferiores a 3.0.0.4.38650460 y 3.0.0.438651529 respectivamente, tienen una vulnerabilidad de formato de cadena en la función detwan.c...

ASUS-SmartHome-Exploit

ASUS-SmartHome-Exploit IDs de CVE CVE-2019-11061 : Control de acceso roto en HG100 Productos afectados : ASUS SmartHome Gateway HG100 Versión de firmware Productos afectados : Aplicación ASUS SmartHome Android APP versión 3.0.45190701 Descripción Si el atacante está en la misma red interna que el...

CVE-2020-36109-POC

CVE-2020-36109-POC Feb 13 2021, Altin Thartori, github.com/tin-z Detalles de la vulnerabilidad El firmware del router ASUS RT-AX86U por debajo de la versión 9.0.0.4386 tiene un desbordamiento de búfer en la función blockingrequest.cgi del módulo httpd que puede causar ejecución de código cuando u...

asus-i005-cve-2026-43499

asus-i005-cve-2026-43499 Adaptation research of CVE-2026-43499 GhostLock on ASUS ROG Phone 5S ASUSI005. Conclusion: Vulnerability triggering and stack reclamation fully verified; the privilege escalation chain was not completed due to insufficient stack overwrite depth. Specifically: Stages 01.6...

CVE-2026-1880

CVE-2026-1880 https://github.com/user-attachments/assets/2602558f-abd8-4773-9094-64c32501dfed Vulnerabilidad TOCTOU de actualización de ASUS DriverHub que conduce a LPE Vulnerabilidad TOCTOU en el proceso de actualización de controladores de ASUS DriverHub que conduce a LPE Recursos técnicos...

CVE-2024-3912

¿Por qué? Lo publico porque Mirai es un grupo de gilipollas irritantes que no dejan de atacar mi honeypot con esto: no son el malware que estoy buscando. Lárguense, por favor. Aquí están su irritante IP de distribución de malware y su script de payload predeterminado...

CVE-2020-25478--ASUS-RT-AC87U-TFTP-is-vulnerable-to-Denial-of-Service-DoS-attack

ASUS-RT-AC87U-TFTP-is-vulnerable-to-Denial-of-Service-DoS-attack CVE-2020-25478 - El servicio TFTP de ASUS RT-AC87U es vulnerable a un ataque de Denegación de Servicio DoS 1. NOMBRE DE LOS PRODUCTOS AFECTADOS Y VERSIONES ASUS RT-AC87U 3.0.0.4.38251640 2. TIPO DE PROBLEMA Se relaciona principalmen...

CVE-2026-93495

Improper initialization in an ASUS certain motherboard allows an physically proximate user to read or write arbitrary memory by inserting a specially crafted device...

CVE-2026-14157

Use of an Externally Controlled Format String in the ASUS Router modules allow a remote authenticated user to execute arbitrary commands via a crafted file uploaded through the web management interface...

CVE-2026-13313

An Active Debug Code vulnerability in certain ASUS router models allows a remote authenticated user, via a crafted HTTP request, to bypass security mechanisms and enable the Telnet service, thereby executing arbitrary commands with root privileges and potentially affecting other devices connected...

CVE-2026-13313

An Active Debug Code vulnerability in certain ASUS router models allows a remote authenticated user, via a crafted HTTP request, to bypass security mechanisms and enable the Telnet service, thereby executing arbitrary commands with root privileges and potentially affecting other devices connected...

CVE-2026-13313

Certain ASUS router models are vulnerable to an Active Debug Code vulnerability. A remote authenticated user can send a crafted HTTP request to bypass security mechanisms and enable the Telnet service . This allows the attacker to execute arbitrary commands with root privileges , which could pote...

EUVD-2026-90454

An Active Debug Code vulnerability in certain ASUS router models allows a remote authenticated user, via a crafted HTTP request, to bypass security mechanisms and enable the Telnet service, thereby executing arbitrary commands with root privileges and potentially affecting other devices connected...

EUVD-2026-90453

Use of an Externally Controlled Format String in the ASUS Router modules allow a remote authenticated user to execute arbitrary commands via a crafted file uploaded through the web management interface...

CVE-2026-14157

Use of an Externally Controlled Format String in the ASUS Router modules allow a remote authenticated user to execute arbitrary commands via a crafted file uploaded through the web management interface...

CVE-2026-14157

A Use of an Externally Controlled Format String vulnerability exists in ASUS Router modules . A remote authenticated user can execute arbitrary commands by uploading a crafted file through the web management interface . No specific affected versions, root cause details, or remediation steps are p...