Asus Unauthenticated LAN Remote Command Execution Exploit

Exploit for hardware platform in category remote exploits Vulnerabilities Summary The following advisory describes two 2 vulnerabilities found in AsusWRT Version 3.0.0.4.380.7743. The combination of the vulnerabilities leads to LAN remote command execution on any Asus router. AsusWRT is “THE...

asus.com XSS vulnerability

Vulnerable URL: http://www.asus.com/zentalk/tw/search.php?mod="...

asus.com XSS vulnerability

Vulnerable URL: http://www.asus.com/zentalk/tw/plugin.php?id=studybestanswer="...

asus.com XSS vulnerability

Vulnerable URL: http://www.asus.com/zentalk/tw/home.php?mod="prompt/OPENBUGBOUNTY/...

asus.com XSS vulnerability

Vulnerable URL: http://www.asus.com/zentalk/tw/misc.php?mod=tag=2030ehvpt"...

asus.com XSS vulnerability

Vulnerable URL: http://www.asus.com/microsite/2013/MB/goldrushpromotion/AllEntries.aspx?p=100"onmouseover=prompt"xssposed"//b==v Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 22:49 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...