4392 matches found
CVE-2016-7806
I-O DATA DEVICE WFS-SR01 firmware version 1.10 and earlier allow remote attackers to execute arbitrary OS commands via unspecified vectors...
CVE-2016-7830
Sony PCS-XG100, PCS-XG100S, PCS-XG100C, PCS-XG77, PCS-XG77S, PCS-XG77C devices with firmware versions prior to Ver.1.51 and PCS-XC1 devices with firmware version prior to Ver.1.22 allow an attacker on the same network segment to bypass authentication to perform administrative operations via...
CVE-2016-7825
Directory traversal vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to read arbitrary files via specially crafted commands...
Sophos Cyberoam Cross Site Scripting
Title: ==== Sophos Cyberoam Cross-site scripting XSS vulnerability Credit: ====== Name: Bhadresh Patel Date: ==== 25/05/2017 dd/mm/yyyy Vendor: ====== More than 100 million users in 150 countries rely on Sophos to offer end-to-end protection against complex threats and data loss. Sophos is...
CVE-2017-8838
XSS via syncid exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2380hw6580hw2710hw31350hw22500-7.0.1-build2093. The affected script is cgi-bin/HASync/hasync.cgi...
Path traversal
Arbitrary file deletion exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2380hw6580hw2710hw31350hw22500-7.0.1-build2093. The attack methodology is absolute path traversal in cgi-bin/MANGA/firmwareprocess.cgi via the upfile.path parameter...
EnGenius EnShare IoT Gigabit Cloud Service 1.4.11 - Remote Code Execution Exploit
Exploit for hardware platform in category web applications !/usr/bin/env python coding: utf8 EnGenius EnShare IoT Gigabit Cloud Service 1.4.11 Root Remote Code Execution Vendor: EnGenius Technologies Inc. Product web page: https://www.engeniustech.com Affected version: ESR300 1.4.9, 1.4.7, 1.4.2,...
Advantech MESR901 Detection
Detection of Advantech MESR901 Industrial Modbus Copper Ethernet to Serial Gateway. The script sends a connection request to the server and attempts to detect Advantech MESR901 Modbus Gateway devices and to extract its firmware version. SPDX-FileCopyrightText: 2017 Greenbone AG Some text...
CVE-2017-9243
Aries QWR-1104 Wireless-N Router with Firmware Version WRC.253.2.0913 has XSS on the Wireless Site Survey page, exploitable with the name of an access point...
Tenda FH1202/F1202 and F1200 Router Stack Buffer Overflow Vulnerability
The Tenda FH1202, F1202 and F1200 are all wireless router products from Tenda China. A stack buffer overflow vulnerability exists in the Tenda FH1202, F1202, and F1200 routers using firmware versions prior to 1.2.0.20. An attacker can exploit this vulnerability by sending a specially crafted POST...
CVE-2017-2161
FlashAirTM SDHC Memory Card SD-WE Series V3.00.02 and earlier and FlashAirTM SDHC Memory Card SD-WD/WC Series V2.00.04 and earlier allows authenticated attackers to bypass access restrictions to obtain unauthorized image data via unspecified vectors...
DLink DIR-600M Wireless N 150 - Authentication Bypass Vulnerability
Exploit for hardware platform in category web applications Exploit Title: D-Link DIR-600M Wireless N 150 Login Page Bypass Date: 19-05-2017 Software Link: http://www.dlink.co.in/products/?pid=DIR-600M Exploit Author: Touhid M.Shaikh Vendor : www.dlink.com Contact : http://twitter.com/touhidshaikh...
D-Link DIR-600M Wireless N 150 Authentication Bypass
Exploit Title: D-Link DIR-600M Wireless N 150 Login Page Bypass Date: 19-05-2017 Software Link: http://www.dlink.co.in/products/?pid=DIR-600M Exploit Author: Touhid M.Shaikh Vendor : www.dlink.com Contact : http://twitter.com/touhidshaikh22 Version: Hardware version: C1 Firmware version: 3.04...
Moxa AWK-3131A Wireless Access Point HTTP Denial of Service Vulnerability
Moxa AWK-3131A Wireless Access Point is a wireless switch from Moxa, China.Web Application is one of the web application modules. An HTTP denial of service vulnerability exists in the Web Application feature of the Moxa AWK-3131A Wireless Access Point with firmware version 1.1. An attacker can...
NETGEAR ProSAFE Devices Detection (SNMP)
This script performs SNMP based detection of NETGEAR ProSAFE devices. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Code injection
A potential security vulnerability has been identified with HP Integrated Lights-Out 4 iLO 4 firmware version 2.11 and later, but prior to version 2.30. The vulnerability could be exploited remotely resulting in Denial of Service DoS. Note this was originally published in 2015 however the CVE ent...
ASUS RT-AC * and RT-N * Information Disclosure Vulnerability
ASUS RT-AC and RT-N are two router products. An information disclosure vulnerability exists in ASUS RT-AC and RT-N firmware prior to 3.0.0.4.380.7378. An attacker can exploit the vulnerability to obtain sensitive information...
Rockwell Automation Stratix 5900
CVSS v3 10.0 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Rockwell Automation Equipment: Stratix 5900 Vulnerabilities: Improper Input Validation, Resource Management Errors, Improper Authentication, Path Traversal . REPOSTED INFORMATION This advisory was originally posted t...
CVE-2017-6620
A vulnerability in the remote management access control list ACL feature of the Cisco CVR100W Wireless-N VPN Router could allow an unauthenticated, remote attacker to bypass the remote management ACL. The vulnerability is due to incorrect implementation of the ACL decision made during the ingress...