791 matches found
CVE-2019-15318: Improper Control of Generation of Code
The yikes-inc-easy-mailchimp-extender plugin before 6.5.3 for WordPress has code injection via the admin input field...
Edimax Wi-Fi Extender Cross-Site Request Forgery Vulnerability
Edimax Technology Wi-Fi Extender is a wireless signal extender from Edimax Technology of Taiwan, China. A cross-site request forgery vulnerability exists in the Edimax Wi-Fi Extender device. The vulnerability stems from a WEB application that does not adequately validate that a request is coming...
CVE-2016-10863
Edimax Wi-Fi Extender devices allow goform/formwlencryptvxd CSRF with resultant PSK key disclosure...
Cross site request forgery (csrf)
Edimax Wi-Fi Extender devices allow goform/formwlencryptvxd CSRF with resultant PSK key disclosure...
CVE-2016-10863
The CVE-2016-10863 entry concerns Edimax Wi‑Fi Extender devices affected by a CSRF vulnerability via the web endpoint goform/formwlencryptvxd, which can disclose the PSK key. The issue is rooted in a cross-site request forgery vulnerability in the device’s WEB application, enabling an attacker to...
CVE-2016-10863
Edimax Wi-Fi Extender devices allow goform/formwlencryptvxd CSRF with resultant PSK key disclosure...
PT-2019-7659
Name of the Vulnerable Software and Affected Versions Edimax Wi-Fi Extender devices affected versions not specified Description The issue allows for CSRF, potentially leading to PSK key disclosure through the goform/formwlencryptvxd endpoint. Recommendations At the moment, there is no information...
CVE-2016-10863: Cross-Site Request Forgery (CSRF)
Edimax Wi-Fi Extender devices allow goform/formwlencryptvxd CSRF with resultant PSK key disclosure...
CVE-2019-11535
Unsanitized user input in the web interface for Linksys WiFi extender products RE6400 and RE6300 through 1.2.04.022 allows for remote command execution. An attacker can access system OS configurations and commands that are not intended for use beyond the web UI...
CVE-2019-11535
Unsanitized user input in the web interface for Linksys WiFi extender products RE6400 and RE6300 through 1.2.04.022 allows for remote command execution. An attacker can access system OS configurations and commands that are not intended for use beyond the web UI...
Command injection
Unsanitized user input in the web interface for Linksys WiFi extender products RE6400 and RE6300 through 1.2.04.022 allows for remote command execution. An attacker can access system OS configurations and commands that are not intended for use beyond the web UI...
CVE-2019-11535
Unsanitized user input in the web interface for Linksys WiFi extender products RE6400 and RE6300 through 1.2.04.022 allows for remote command execution. An attacker can access system OS configurations and commands that are not intended for use beyond the web UI...
CVE-2019-11535
CVE-2019-11535 affects Linksys RE6300/RE6400 Wi‑Fi extenders (firmware up to 1.2.04.022). The vulnerability arises from unsanitized input in the web interface, enabling remote command execution and access to system OS configurations beyond the intended web UI. The connected Red Hat reference and ...
PT-2019-12359
Name of the Vulnerable Software and Affected Versions Linksys WiFi extender products RE6400 and RE6300 versions 1.2.04.022 and earlier Description The issue concerns unsanitized user input in the web interface, allowing for remote command execution. This enables an attacker to access system OS...
CVE-2019-11535: Improper Neutralization of Special Elements used in a Command
Unsanitized user input in the web interface for Linksys WiFi extender products RE6400 and RE6300 through 1.2.04.022 allows for remote command execution. An attacker can access system OS configurations and commands that are not intended for use beyond the web UI...
Admin Renamer Extender <= 3.2.1 - CSRF
CSRF leading to arbitrary username change...
TP-Link Wi-Fi extender remote code execution vulnerability analysis-vulnerability warning-the black bar safety net
WiFi extender can enlarge the WiFi signal, mainly used for large or multi-storey residential, and the router signal can not cover the family's case. The extender's principle is from the main router to get a WiFi signal, and broadcast channel other WiFi signal weak or no signal area. IBM X-Force...
TP-Link WiFi Extender Remote Code Execution (CVE-2019-7406)
A remote code execution vulnerability exists in TP-Link WiFi Extender. An unauthenticated remote attacker can exploit this issue by sending an HTTP request with a specially crafted HTTP header. Successful exploitation could result in execution of arbitrary code on the affected system...
