CVE-2017-10846

Wi-Fi STATION L-02F Software version V10b and earlier allows remote attackers to bypass access restrictions to obtain information on device settings via unspecified vectors...

vandam.com XSS vulnerability

Vulnerable URL: http://www.vandam.com/searchresults.php?find=cubasuresh" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 14.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2056302 VIP website status:| No Check vandam.com SSL...

bchc.be XSS vulnerability

Vulnerable URL: http://www.bchc.be/be/album.php?album=001%3C!%27/!%22/!%27/%22/--!%3E%3CInput/Type=Text%20AutoFocus%20/;%20OnFocus=confirmOPENBUGBOUNTY%20//%3E%3CSvg%3E=55 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 14.12.2017 Vulnerability type:| XSS Vulnerability...

D-Link DIR-850L REV.A and REV.B Man-in-the-Middle Attack Vulnerability

The D-Link DIR-850L REV.A and REV.B are both wireless router products from AUO D-Link. The security vulnerability in the D-Link NPAPI extension used in D-Link DIR-850L REV.A devices with firmware FW114WWb07h2abbeta1 and earlier and REV.B devices with firmware FW208WWb02 and earlier stems from the...

D-Link DIR-850L REV.B Password Disclosure Vulnerability

The D-Link DIR-850L REV.B is a wireless router from AUO D-Link. A security vulnerability exists in the D-Link NPAPI extension used in D-Link DIR-850L REV.B devices with firmware FW208WWb02 and prior versions. An attacker could exploit the vulnerability to retrieve the administrator password...

D-Link DIR-850L REV.A and REV.B Password Disclosure Vulnerability

The D-Link DIR-850L REV.A and REV.B are both wireless router products from AUO D-Link. A security vulnerability exists in D-Link DIR-850L REV.A and REV.B devices using firmware FW114WWb07h2abbeta1 and prior versions and REV.B with firmware FW208WWb02 and prior versions. An attacker can exploit th...

D-Link DIR-850L REV.A and REV.B Certificate Acquisition Vulnerability

The D-Link DIR-850L REV.A and REV.B are both wireless router products from AUO D-Link. A security vulnerability exists in D-Link DIR-850L REV.A and REV.B devices using firmware FW114WWb07h2abbeta1 and prior versions and REV.B with firmware FW208WWb02 and prior versions. An attacker could exploit...

Authentication flaw

registersend.php on D-Link DIR-850L REV. B with firmware through FW208WWb02 devices does not require authentication, which can result in unintended enrollment in mydlink Cloud Services...

CVE-2017-14417

D-Link DIR-850L REV. B devices (firmware up to FW208WWb02) are affected by CVE-2017-14417 due to register_send.php not requiring authentication, enabling unintended enrollment in mydlink Cloud Services. Root cause: missing auth on register_send.php. Impact: potential attacker could gain access or...

cheminent.fi XSS vulnerability

Vulnerable URL: http://www.cheminent.fi/index.php?display=main=search="=0=0 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 12.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 9445092 VIP website status:| No Check cheminent.fi SSL...

PT-2017-13461 · D Link · D-Link Dir-850L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-850L REV. B versions through FW208WWb02 Description: The issue concerns the register send.php file, which does not require authentication. This can lead to unintended enrollment in mydlink Cloud Services. Recommendations: For D-Lin...

PT-2017-13470 · D Link · D-Link Dir-850L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-850L REV. A versions through FW114WWb07 h2ab beta1 D-Link DIR-850L REV. B versions through FW208WWb02 Description: The issue concerns the permissions of the /var/etc/shadow file, also known as the /etc/shadow symlink target, which...

PT-2017-13472 · D Link · D-Link Dir-850L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-850L REV. A versions through FW114WWb07 h2ab beta1 D-Link DIR-850L REV. B versions through FW208WWb02 Description: The issue concerns the permissions of /var/run/hostapd files, which have 0666 permissions. Recommendations: For D-Li...

PT-2017-13474 · D Link · D-Link Dir-850L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-850L REV. A versions through FW114WWb07 h2ab beta1 D-Link DIR-850L REV. B versions through FW208WWb02 Description: The issue allows remote attackers to cause a denial of service, resulting in a daemon crash, via crafted LAN traffic...

NTT DOCOMO Wi-Fi STATION L-02F Software Access Privilege Vulnerability

NTT DOCOMO Wi-Fi STATION L-02F Software is a set of software used in routers from NTT DOCOMO Japan. A security vulnerability exists in NTT DOCOMO Wi-Fi STATION L-02F Software V10b and earlier versions. A remote attacker could exploit the vulnerability to bypass access restrictions and obtain devi...

PT-2017-13466 · D Link · D-Link Dir-850L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-850L REV. A versions through FW114WWb07 h2ab beta1 D-Link DIR-850L REV. B versions through FW208WWb02 Description: The issue concerns the use of a hardcoded private key in the /etc/stunnel.key file across different installations,...

moviescenter.xyz XSS vulnerability

Vulnerable URL: http://moviescenter.xyz/search/%22%3E%3Csvg%20onload%3Dalert%22OPENBUGBOUNTY%22%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 11.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 323448 VIP website status:| No Che...

meteonova.ua XSS vulnerability

Vulnerable URL: http://www.meteonova.ua/search/%22%3E%3Csvg%20onload%3Dalert%22OPENBUGBOUNTY%22%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 11.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 133438 VIP website status:| No Che...

dieloesung.jo2ko.de XSS vulnerability

Vulnerable URL: http://dieloesung.jo2ko.de/ Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check dieloesung.jo2ko.de SSL connection:| Grade: B Coordinated...

lacocottemijote.e-monsite.com XSS vulnerability

Vulnerable URL: http://lacocottemijote.e-monsite.com/medias/static/simpleviewer/web/svcore/full.html?bg=xss"=http://lacocottemijote.e-monsite.com/album/doxml/album=true=true=false=true=true=true=-1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 11.12.2017 Vulnerability...