Lucene search
+L

8 matches found

Vulnrichment
Vulnrichment
•added 2026/10/07 2:13 a.m.•13 views

CVE-2026-14911

Improper Neutralization of Input During Web Page Generation “Cross-site Scripting” in ASUS router modules allows a remote attacker to read DOM information, modify router settings, and cause a denial-of-service condition when an authenticated user visits a crafted URL.Refer to the ' Security Updat...

9.3CVSS6AI score0.00319EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/07 2:13 a.m.•54 views

CVE-2026-14911

A Cross-site Scripting (XSS) vulnerability exists in ASUS router modules due to the improper neutralization of input during web page generation. A remote attacker can exploit this flaw by tricking an authenticated user into visiting a crafted URL. Successful exploitation may allow the attacker to...

9.3CVSS6AI score0.00319EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/07 2:13 a.m.•23 views

EUVD-2026-94159

Improper Neutralization of Input During Web Page Generation “Cross-site Scripting” in ASUS router modules allows a remote attacker to read DOM information, modify router settings, and cause a denial-of-service condition when an authenticated user visits a crafted URL.Refer to the ' Security Updat...

9.3CVSS6AI score0.00319EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/07 12:00 a.m.•11 views

CVE-2026-14911: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation “Cross-site Scripting” in ASUS router modules allows a remote attacker to read DOM information, modify router settings, and cause a denial-of-service condition when an authenticated user visits a crafted URL.Refer to the ' Security Updat...

9.3CVSS6AI score0.00319EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/07 12:00 a.m.•18 views

PT-2026-107385

Improper Neutralization of Input During Web Page Generation “Cross-site Scripting” in ASUS router modules allows a remote attacker to read DOM information, modify router settings, and cause a denial-of-service condition when an authenticated user visits a crafted URL.Refer to the ' Security Updat...

9.3CVSS6AI score0.00319EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/02/11 12:00 a.m.•43 views

CVE-2025-65128

A missing authentication mechanism in the web management API components of Shenzhen Zhibotong Electronics ZBT WE2001 23.09.27 allows unauthenticated attackers on the local network to modify router and network configurations. By invoking operations whose names end with "nocommit" and supplying the...

0.00282EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/04/26 12:00 a.m.•23 views

CVE-2024-28325

Asus RT-N12+ B1 router stores credentials in cleartext, which could allow local attackers to obtain unauthorized access and modify router settings...

6.7AI score0.00146EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/04/26 12:00 a.m.•42 views

ASUS RT-N12 security vulnerabilities

ASUS RT-N12 is a router from Asus China. A security vulnerability exists in the ASUS RT-N12 that originates from storing credentials in clear text, which could allow a local attacker to gain unauthorized access and modify router settings...

6.1CVSS6.7AI score0.00146EPSS
SaveExploits0References3
Rows per page
Query Builder