CVE-2017-12593

ASUS DSL-N10S V2.1.16APAC devices allow CSRF...

CVE-2017-12592

ASUS DSL-N10S V2.1.16APAC devices have a privilege escalation vulnerability. A normal user can escalate its privilege and perform administrative actions. There is no mapping of users with their privileges...

CVE-2017-12592

ASUS DSL-N10S V2.1.16APAC devices have a privilege escalation vulnerability. A normal user can escalate its privilege and perform administrative actions. There is no mapping of users with their privileges...

Cross site scripting

ASUS DSL-N10S V2.1.16APAC devices have reflected and stored cross site scripting, as demonstrated by the snmpSysName parameter...

Cross site request forgery (csrf)

ASUS DSL-N10S V2.1.16APAC devices allow CSRF...

Privilege escalation

ASUS DSL-N10S V2.1.16APAC devices have a privilege escalation vulnerability. A normal user can escalate its privilege and perform administrative actions. There is no mapping of users with their privileges...

CVE-2017-12592

ASUS DSL-N10S V2.1.16APAC devices have a privilege escalation vulnerability. A normal user can escalate its privilege and perform administrative actions. There is no mapping of users with their privileges...

CVE-2017-12593

ASUS DSL-N10S V2.1.16APAC devices allow CSRF...

CVE-2017-12593

Affected product : ASUS DSL-N10S V2.1.16_APAC. Vulnerability : Cross‑Site Request Forgery (CSRF) in the device. Root cause/condition : Exploitation to induce unauthorized operations by a remote attacker. Impact : Confidentiality/Integrity/Availability implications described as high in CVSS metric...

CVE-2017-12591

CVE-2017-12591 affects ASUS DSL-N10S V2.1.16_APAC. The vulnerability is a cross‑site scripting (XSS) flaw in the snmpSysName parameter, allowing reflected and stored XSS on the device. Root cause: improper handling of the snmpSysName input. Impact is described as XSS with low to medium overall se...

CVE-2017-12592

The vulnerability CVE-2017-12592 affects ASUS DSL-N10S devices (V2.1.16_APAC). Affected component is the device’s privilege model, where there is no mapping of users to privileges, enabling a normal user to escalate privileges and perform administrative actions. The root cause per the CNVD entry ...

DLink DSL-2640U - Unauthenticated DNS Change Exploit

shell !/bin/bash D-Link ADSL DSL-2640U IM1.00 Unauthenticated Remote DNS Change Exploit Copyright 2017 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Description: The vulnerability exist in the web interface, which is accessible without authentication. Onc...

DLink DSL-2640B - Unauthenticated Remote DNS Change Exploit

shell !/bin/bash D-Link ADSL DSL-2640B GE1.07 Unauthenticated Remote DNS Change Exploit Copyright 2017 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Description: The vulnerability exist in the web interface, which is accessible without authentication. Onc...

D-Link ADSL DSL-2640B SEA_1.01 Unauthenticated Remote DNS Changer

!/bin/bash D-Link ADSL DSL-2640B SEA1.01 Unauthenticated Remote DNS Change Exploit Copyright 2017 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Description: The vulnerability exist in the web interface, which is accessible without authentication. Once...

D-Link DSL-2640B DNS Change Vulnerability

The D-Link DSL-2640B is a router device. A security vulnerability exists in the D-Link DSL-2640B. The vulnerability exists in the web interface and can be exploited by an attacker to access sites and devices on vulnerable systems, redirecting to a malicious site...

DLink DSL-2640B - Unauthenticated Remote DNS Change Exploit

Exploit for hardware platform in category web applications !/bin/bash D-Link ADSL DSL-2640B GE1.07 Unauthenticated Remote DNS Change Exploit Copyright 2017 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Description: The vulnerability exist in the web...

D-Link DSL-2640B ADSL Router - 'dnscfg' Remote DNS Change

!/bin/bash D-Link ADSL DSL-2640B GE1.07 Unauthenticated Remote DNS Change Exploit Copyright 2017 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Description: The vulnerability exist in the web interface, which is accessible without authentication. Once...

D-Link ADSL DSL-2640U IM_1.00 Unauthenticated Remote DNS Changer

!/bin/bash D-Link ADSL DSL-2640U IM1.00 Unauthenticated Remote DNS Change Exploit Copyright 2017 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Description: The vulnerability exist in the web interface, which is accessible without authentication. Once...

D-Link DSL-2640U - DNS Change

D-Link DSL-2640U - DNS Change !/bin/bash D-Link ADSL DSL-2640U IM1.00 Unauthenticated Remote DNS Change Exploit Copyright 2017 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Description: The vulnerability exist in the web interface, which is accessible...

DNSControl - Synchronize your DNS to multiple providers from a simple DSL

DNSControl is a system for maintaining DNS zones. It has two parts: a domain specific language DSL for describing DNS zones plus software that processes the DSL and pushes the resulting zones to DNS providers such as Route53, CloudFlare, and Gandi. It can talk to Microsoft ActiveDirectory and it...