ASUS DSL-N10S Elevation of Privilege Vulnerability

ASUS DSL-N10S is a wireless router product from ASUS. A privilege extraction vulnerability exists in ASUS DSL-N10S version V2.1.16APAC. An attacker can exploit this vulnerability to gain privileges and perform administrative operations...

CVE-2017-12591

ASUS DSL-N10S V2.1.16APAC devices have reflected and stored cross site scripting, as demonstrated by the snmpSysName parameter...

CVE-2017-12593

ASUS DSL-N10S V2.1.16APAC devices allow CSRF...

CVE-2017-12591

ASUS DSL-N10S V2.1.16APAC devices have reflected and stored cross site scripting, as demonstrated by the snmpSysName parameter...

CVE-2017-12593

ASUS DSL-N10S V2.1.16APAC devices allow CSRF...

CVE-2017-12592

ASUS DSL-N10S V2.1.16APAC devices have a privilege escalation vulnerability. A normal user can escalate its privilege and perform administrative actions. There is no mapping of users with their privileges...

CVE-2017-12592

ASUS DSL-N10S V2.1.16APAC devices have a privilege escalation vulnerability. A normal user can escalate its privilege and perform administrative actions. There is no mapping of users with their privileges...

Cross site scripting

ASUS DSL-N10S V2.1.16APAC devices have reflected and stored cross site scripting, as demonstrated by the snmpSysName parameter...

Cross site request forgery (csrf)

ASUS DSL-N10S V2.1.16APAC devices allow CSRF...

Privilege escalation

ASUS DSL-N10S V2.1.16APAC devices have a privilege escalation vulnerability. A normal user can escalate its privilege and perform administrative actions. There is no mapping of users with their privileges...

CVE-2017-12593

Affected product : ASUS DSL-N10S V2.1.16_APAC. Vulnerability : Cross‑Site Request Forgery (CSRF) in the device. Root cause/condition : Exploitation to induce unauthorized operations by a remote attacker. Impact : Confidentiality/Integrity/Availability implications described as high in CVSS metric...

CVE-2017-12591

CVE-2017-12591 affects ASUS DSL-N10S V2.1.16_APAC. The vulnerability is a cross‑site scripting (XSS) flaw in the snmpSysName parameter, allowing reflected and stored XSS on the device. Root cause: improper handling of the snmpSysName input. Impact is described as XSS with low to medium overall se...

CVE-2017-12592

ASUS DSL-N10S V2.1.16APAC devices have a privilege escalation vulnerability. A normal user can escalate its privilege and perform administrative actions. There is no mapping of users with their privileges...

CVE-2017-12593

ASUS DSL-N10S V2.1.16APAC devices allow CSRF...

CVE-2017-12592

The vulnerability CVE-2017-12592 affects ASUS DSL-N10S devices (V2.1.16_APAC). Affected component is the device’s privilege model, where there is no mapping of users to privileges, enabling a normal user to escalate privileges and perform administrative actions. The root cause per the CNVD entry ...

DLink DSL-2640B - Unauthenticated Remote DNS Change Exploit

shell !/bin/bash D-Link ADSL DSL-2640B GE1.07 Unauthenticated Remote DNS Change Exploit Copyright 2017 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Description: The vulnerability exist in the web interface, which is accessible without authentication. Onc...

DLink DSL-2640U - Unauthenticated DNS Change Exploit

shell !/bin/bash D-Link ADSL DSL-2640U IM1.00 Unauthenticated Remote DNS Change Exploit Copyright 2017 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Description: The vulnerability exist in the web interface, which is accessible without authentication. Onc...

D-Link ADSL DSL-2640B SEA_1.01 Unauthenticated Remote DNS Changer

!/bin/bash D-Link ADSL DSL-2640B SEA1.01 Unauthenticated Remote DNS Change Exploit Copyright 2017 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Description: The vulnerability exist in the web interface, which is accessible without authentication. Once...

D-Link DSL-2640B DNS Change Vulnerability

The D-Link DSL-2640B is a router device. A security vulnerability exists in the D-Link DSL-2640B. The vulnerability exists in the web interface and can be exploited by an attacker to access sites and devices on vulnerable systems, redirecting to a malicious site...

DLink DSL-2640B - Unauthenticated Remote DNS Change Exploit

Exploit for hardware platform in category web applications !/bin/bash D-Link ADSL DSL-2640B GE1.07 Unauthenticated Remote DNS Change Exploit Copyright 2017 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Description: The vulnerability exist in the web...