Cross site scripting

Netis WF2419 V2.2.36123 devices allow XSS via the Description parameter on the Bandwidth Control Rule Settings page...

CVE-2018-5967

Netis WF2419 V2.2.36123 devices allow XSS via the Description parameter on the Bandwidth Control Rule Settings page...

CVE-2018-5967

Netis WF2419 V2.2.36123 devices allow XSS via the Description parameter on the Bandwidth Control Rule Settings page...

CVE-2018-5967

CVE-2018-5967 affects Netis WF2419 devices (v2.2.36123) where the Description field on the Bandwidth Control Rule Settings page is vulnerable to XSS. The root cause is inadequate filtering of user-supplied data in that Description parameter, allowing a remote attacker to inject script/HTML into t...

CVE-2018-5967

Netis WF2419 V2.2.36123 devices allow XSS via the Description parameter on the Bandwidth Control Rule Settings page...

netis WF2419 cross-site scripting vulnerability (CNVD-2018-03057)

Netis WF2419 is a wireless router product from China Tandan Network NETIS. A cross-site scripting vulnerability exists in the Netis WF2419 version 3.2.41381, which stems from the program's failure to adequately filter user-submitted data. The vulnerability can be exploited by a remote attacker to...

Netis WF2419 Cross-Site Scripting Vulnerability

Netis WF2419 is a wireless router product from China Tandan Network NETIS. A cross-site scripting vulnerability exists in the Netis WF2419 version 2.2.36123, which is caused by the program failing to adequately filter user-submitted data. The vulnerability can be exploited by a remote attacker to...

CVE-2018-6190

Netis WF2419 V3.2.41381 devices allow XSS via the Description field on the MAC Filtering page...

Cross site scripting

Netis WF2419 V3.2.41381 devices allow XSS via the Description field on the MAC Filtering page...

CVE-2018-6190

Netis WF2419 V3.2.41381 devices allow XSS via the Description field on the MAC Filtering page...

CVE-2018-6190

CVE-2018-6190 affects Netis WF2419 routers (version 3.2.41381). The vulnerability is HTML injection/XSS on the MAC Filtering page via the Description field, caused by insufficient input sanitization. Exploitation could allow attacker-supplied HTML/script to execute in the router’s web UI context,...

CVE-2018-6190

Netis WF2419 V3.2.41381 devices allow XSS via the Description field on the MAC Filtering page...

Netis-WF2419 3.2.41381 Cross Site Scripting

Exploit Title: Netis-WF2419 HTML Injection Date: 20/01/2018 Exploit Author: Sajibe Kanti Author Contact :https://twitter.com/@sajibekantibd Vendor Homepage: http://www.netis-systems.com/ Version: Netis-WF2419 , V3.2.41381 Tested on: Windows 10 HTML Injection in Netis-WF2419 Netis-WF2419 is prone ...

Netcore / Netis Routers - UDP Backdoor Exploit

Exploit for hardware platform in category remote exploits !/usr/bin/python -- coding: utf8 -- NETCORE / NETDIS UDP 53413 BACKDOOR https://netisscan.shadowserver.org/ http://blog.trendmicro.com/trendlabs-security-intelligence/netis-routers-leave-wide-open-backdoor/...

Netis-WF2419 HTML Injection

Exploit Title: Netis-WF2419 HTML Injection Date: 20/12/2017 Exploit Author: Sajibe Kanti Vendor Homepage: http://www.netis-systems.com/ Version: Netis-WF2419 , V2.2.36123 Tested on: Windows 8.1 HTML Injection in Netis-WF2419 Netis-WF2419 is prone to an HTML-injection vulnerability because it fail...

Netcore Netis Routers - UDP Backdoor Access

Netcore Netis Routers - UDP Backdoor Access !/usr/bin/python -- coding: utf8 -- NETCORE / NETDIS UDP 53413 BACKDOOR https://netisscan.shadowserver.org/ http://blog.trendmicro.com/trendlabs-security-intelligence/netis-routers-leave-wide-open-backdoor/ https://www.seebug.org/vuldb/ssvid-90227 impor...

Netcore / Netis Routers - UDP Backdoor Access

!/usr/bin/python -- coding: utf8 -- NETCORE / NETDIS UDP 53413 BACKDOOR https://netisscan.shadowserver.org/ http://blog.trendmicro.com/trendlabs-security-intelligence/netis-routers-leave-wide-open-backdoor/ https://www.seebug.org/vuldb/ssvid-90227 import socket import struct import logging...

Netis/Netcore Router Hard-Coded Backdoor

A backdoor in Netis/Netcore routers has been reported. The routers are protected by a single hard-coded password. The exploitation of this backdoor could compromise the network protected by the device...

Netcore / Netis 路由器后门

漏洞概要 2014 年 8 月末，由中国生产的一系列路由器（国内品牌名称为 Netcore ，国外品牌名称为 Netis ）被爆出含有一个严重的后门漏洞。攻击者可以通过此漏洞获取路由器 root 权限。 2014 年 12 月 28 日，微博上爆料 Netcore 的后门仍然存在（文章地址：http://www.weibo.com/p/1001603792736686871336）。 漏洞描述 Netcore 系列路由器在 /bin 目录下存在一个名为 igdmptd 的程序，此程序会监听 UDP 端口 53413 端口： 之后调用 operateloop...

netis RealTek Wireless Router ADSL Modem - Multiple Vulnerabilities

netis RealTek Wireless Router ADSL Modem - Multiple Vulnerabilities Exploit Title: netis RealTek wireless router / ADSL modem Multiple Vulnerabilities Discovered by: Karn Ganeshen Reported on: October 13, 2015 Vendor Response: Vulnerability? What's this? Vendor Homepage: www.netis-systems.com...