299 matches found
PT-2020-6815 · Linux +8 · Linux Kernel +8
Name of the Vulnerable Software and Affected Versions: Linux kernel versions through 5.10.4 Description: The issue is related to the mwifiex cmd 802 11 ad hoc start function in the Linux kernel's Marvell driver, which is vulnerable to a buffer overflow due to a lack of input size validation. This...
CVE-2020-0454
In callCallbackForRequest of ConnectivityService.java, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure of the current SSID with User execution privileges needed. User interaction is not needed for exploitation.Product:...
CVE-2020-27980
Genexis Platinum-4410 P4410-V2-1.28 devices allow stored XSS in the WLAN SSID parameter. This could allow an attacker to perform malicious actions in which the XSS popup will affect all privileged users...
CVE-2020-10269
One of the wireless interfaces within MiR100, MiR200 and possibly according to the vendor other MiR fleet vehicles comes pre-configured in WiFi Master Access Point mode. Credentials to such wireless Access Point default to well known and widely spread SSID MiRRXXXX and passwords omitted. This...
DEBIAN-CVE-2006-7246
NetworkManager 0.9.x does not pin a certificate's subject to an ESSID when 802.11X authentication is used...
kernel: buffer overflow in cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c
A vulnerability was found in the Linux kernel's generic WiFi ESSID handling implementation. The flaw allows a system to join a wireless network where the ESSID is longer than the maximum length of 32 characters, which can cause the system to crash or execute code...
CVE-2017-18483
ANNKE SP1 HD wireless camera 3.4.1.1604071109 devices allow XSS via a crafted SSID...
CVE-2019-12195
TP-Link TL-WR840N v5 00000005 devices allow XSS via the network name. The attacker must log into the router by breaking the password and going to the admin login page by THC-HYDRA to get the network name. With an XSS payload, the network name changed automatically and the internet connection was...
CVE-2019-12195
TP-Link TL-WR840N v5 00000005 devices allow XSS via the network name. The attacker must log into the router by breaking the password and going to the admin login page by THC-HYDRA to get the network name. With an XSS payload, the network name changed automatically and the internet connection was...
CVE-2019-12195
TP-Link TL-WR840N v5 00000005 devices allow XSS via the network name. The attacker must log into the router by breaking the password and going to the admin login page by THC-HYDRA to get the network name. With an XSS payload, the network name changed automatically and the internet connection was...
TP-LINK TL-WR840N v5 00000005 - Cross-Site Scripting
TP-LINK TL-WR840N v5 00000005 - Cross-Site Scripting Exploit Title: TL-WR840N v5 00000005 Date: 5/10/2019 Exploit Author: purnendu ghosh Vendor Homepage: https://www.tp-link.com/ Software Link: https://www.amazon.in/TP-LINK-TL-WR840N-300Mbps-Wireless-External/dp/B01A0G1J7Q Category: Hardware...
Orange Livebox Information Disclosure Vulnerability
Orange Livebox is an ADSL Asymmetric Digital Subscriber Line modem. A security vulnerability exists in Orange Livebox version 00.96.320S. A remote attacker can exploit the vulnerability by sending a GET request to the /getgetnetworkconf.cgi URI to obtain the SSID and WI-FI password of the device...
Windows NetBIOS / SMB Remote Host Report Tag
Either SMB or NetBIOS was used to determine the the device's hostname. Note that this plugin creates a tag for the host but does not itself generate a report. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid118730; scriptversion"1.6";...
Intelbras NPLUG Cross-Site Scripting Vulnerability
Intelbras NPLUG is a wireless relay device from Intelbras Poland. A cross-site scripting vulnerability exists in Intelbras NPLUG version 1.0.0.14. The vulnerability can be exploited by remote attackers to inject arbitrary web script or HTML via a specially crafted SSID...
CVE-2018-17337
Intelbras NPLUG 1.0.0.14 devices have XSS via a crafted SSID that is received via a network broadcast...
CVE-2018-10569
An issue was discovered in Edimax EW-7438RPn Mini v2 before version 1.26. There is XSS in an SSID field...
Tenda D152 ADSL Cross-Site Scripting Vulnerability
Tenda D152 ADSL is a wireless router product from Tenda China. A security vulnerability exists in the Tenda D152 ADSL. The vulnerability can be exploited by remote attackers to inject arbitrary web script or HTML via a specially crafted SSID...
CVE-2016-5638 Netgear WNDR4500 running firmware version V1.0.1.40_1.0.6877 reveals some sensitive information such as 2.4GHz & 5GHz Wireless Network Name (SSID) and Network Key (Password) in clear text
There are few web pages associated with the genie app on the Netgear WNDR4500 running firmware version V1.0.1.401.0.6877. Genie app adds some capabilities over the Web GUI and can be accessed even when you are away from home. A remote attacker can access genieping.htm or genieping2.htm or...
Coship RT3052 Cross-Site Scripting Vulnerability
Coship RT3052 is a wireless router product from Coship, China. A cross-site scripting vulnerability exists in the Coship RT3052 version 4.0.0.48. The vulnerability can be exploited by remote attackers to inject arbitrary web script or HTML via a specially crafted SSID field on the Wireless Settin...