1144 matches found
Design/Logic Flaw
MitraStar GPT-2541GNAC HGU 1.00VNJ0b1 and DSL-100HN-T1 ES113WJY0b16 devices have a zyad1234 password for the zyad1234 account, which is equivalent to root and undocumented...
Design/Logic Flaw
MitraStar GPT-2541GNAC HGU 1.00VNJ0b1 and DSL-100HN-T1 ES113WJY0b16 devices allow remote authenticated users to obtain root access by specifying /bin/sh as the command to execute...
CVE-2017-16522
MitraStar GPT-2541GNAC HGU 1.00VNJ0b1 and DSL-100HN-T1 ES113WJY0b16 devices allow remote authenticated users to obtain root access by specifying /bin/sh as the command to execute...
CVE-2017-16523
MitraStar GPT-2541GNAC HGU 1.00VNJ0b1 and DSL-100HN-T1 ES113WJY0b16 devices have a zyad1234 password for the zyad1234 account, which is equivalent to root and undocumented...
CVE-2017-16523
The CVE-2017-16523 entry describes an elevation-of-privilege issue in MitraStar router models MitraStar GPT-2541GNAC (HGU) 1.00(VNJ0)b1 and DSL-100HN-T1 ES_113WJY0b16. A Zyad1234 account password zyad1234 is undocumented and effectively grants root-level access. This vulnerability originates from...
CVE-2017-16523
MitraStar GPT-2541GNAC HGU 1.00VNJ0b1 and DSL-100HN-T1 ES113WJY0b16 devices have a zyad1234 password for the zyad1234 account, which is equivalent to root and undocumented...
Cross site scripting
D-Link DSL-2740E 1.00BG20150720 devices are prone to persistent XSS attacks in the username and password fields: a remote unauthenticated user may craft logins and passwords with script tags in them. Because there is no sanitization in the input fields, an unaware logged-in administrator may be a...
CVE-2016-10699
D-Link DSL-2740E 1.00BG20150720 devices are prone to persistent XSS attacks in the username and password fields: a remote unauthenticated user may craft logins and passwords with script tags in them. Because there is no sanitization in the input fields, an unaware logged-in administrator may be a...
CVE-2016-10699
CVE-2016-10699 affects D-Link DSL-2740E, version 1.00_BG_20150720. The vulnerability is a persistent cross-site scripting (XSS) flaw in the username and password input fields due to lack of input sanitization. A remote unauthenticated user can craft logins and passwords containing script tags, po...
CVE-2016-10699
D-Link DSL-2740E 1.00BG20150720 devices are prone to persistent XSS attacks in the username and password fields: a remote unauthenticated user may craft logins and passwords with script tags in them. Because there is no sanitization in the input fields, an unaware logged-in administrator may be a...
PT-2017-7914 · D Link · D-Link Dsl-2740E
Name of the Vulnerable Software and Affected Versions: D-Link DSL-2740E version 1.00 BG 20150720 Description: The issue allows for persistent XSS attacks through the username and password fields. A remote unauthenticated user can craft logins and passwords with script tags, which can affect an...
Zyxel P-2812HNU-F1 DSL Router Command Injection Vulnerability
The Zyxel P-2812HNU-F1 DSL router suffers from a remote command injection vulnerability. Firmware versions V3.11TUE3 KPN and V3.11TUE8 KPN are affected. Zyxel P-2812HNU-F1 DSL router - command injection ================================================= The Zyxel P-2812 is common in the Netherland...
Zyxel P-2812HNU-F1 DSL Router Command Injection
Zyxel P-2812HNU-F1 DSL router - command injection ================================================= The Zyxel P-2812 is common in the Netherlands KPN/Telfort and Norway Telenor. The Dutch firmware is susceptible to authenticated command injection through qosqueueadd.cgi and the WebQueueInterface...
CVE-2015-7256
CVE-2015-7256 affects multiple ZyXEL devices (NWA1100-N/NH/NWA1121-NI/NWA1123-AC/NWA1123-NI, DSL CPEs, small business gateways, switches, etc.) where non-unique X.509 certificates and SSH host keys are used across devices. Root cause: embedded devices reuse certificates/keys, enabling impersonati...
ASUS DSL-N10S Cross-Site Request Forgery Vulnerability
ASUS DSL-N10S is a wireless router product from ASUS. A cross-site request forgery vulnerability exists in ASUS DSL-N10S version V2.1.16APAC. A remote attacker can exploit this vulnerability to perform unauthorized operations...
ASUS DSL-N10S Cross-Site Scripting Vulnerability
ASUS DSL-N10S is a wireless router product from ASUS. A cross-site scripting vulnerability exists in ASUS DSL-N10S version V2.1.16APAC. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...
ASUS DSL-N10S Elevation of Privilege Vulnerability
ASUS DSL-N10S is a wireless router product from ASUS. A privilege extraction vulnerability exists in ASUS DSL-N10S version V2.1.16APAC. An attacker can exploit this vulnerability to gain privileges and perform administrative operations...
CVE-2017-12591
ASUS DSL-N10S V2.1.16APAC devices have reflected and stored cross site scripting, as demonstrated by the snmpSysName parameter...