TP-LINK TL-WR840N v5 00000005 - Cross-Site Scripting

TP-LINK TL-WR840N v5 00000005 - Cross-Site Scripting Exploit Title: TL-WR840N v5 00000005 Date: 5/10/2019 Exploit Author: purnendu ghosh Vendor Homepage: https://www.tp-link.com/ Software Link: https://www.amazon.in/TP-LINK-TL-WR840N-300Mbps-Wireless-External/dp/B01A0G1J7Q Category: Hardware...

Orange Livebox Information Disclosure Vulnerability

Orange Livebox is an ADSL Asymmetric Digital Subscriber Line modem. A security vulnerability exists in Orange Livebox version 00.96.320S. A remote attacker can exploit the vulnerability by sending a GET request to the /getgetnetworkconf.cgi URI to obtain the SSID and WI-FI password of the device...

Windows NetBIOS / SMB Remote Host Report Tag

Either SMB or NetBIOS was used to determine the the device's hostname. Note that this plugin creates a tag for the host but does not itself generate a report. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid118730; scriptversion"1.6";...

Intelbras NPLUG Cross-Site Scripting Vulnerability

Intelbras NPLUG is a wireless relay device from Intelbras Poland. A cross-site scripting vulnerability exists in Intelbras NPLUG version 1.0.0.14. The vulnerability can be exploited by remote attackers to inject arbitrary web script or HTML via a specially crafted SSID...

CVE-2018-17337

Intelbras NPLUG 1.0.0.14 devices have XSS via a crafted SSID that is received via a network broadcast...

CVE-2018-10569

An issue was discovered in Edimax EW-7438RPn Mini v2 before version 1.26. There is XSS in an SSID field...

Tenda D152 ADSL Cross-Site Scripting Vulnerability

Tenda D152 ADSL is a wireless router product from Tenda China. A security vulnerability exists in the Tenda D152 ADSL. The vulnerability can be exploited by remote attackers to inject arbitrary web script or HTML via a specially crafted SSID...

CVE-2016-5638 Netgear WNDR4500 running firmware version V1.0.1.40_1.0.6877 reveals some sensitive information such as 2.4GHz & 5GHz Wireless Network Name (SSID) and Network Key (Password) in clear text

There are few web pages associated with the genie app on the Netgear WNDR4500 running firmware version V1.0.1.401.0.6877. Genie app adds some capabilities over the Web GUI and can be accessed even when you are away from home. A remote attacker can access genieping.htm or genieping2.htm or...

Coship RT3052 Cross-Site Scripting Vulnerability

Coship RT3052 is a wireless router product from Coship, China. A cross-site scripting vulnerability exists in the Coship RT3052 version 4.0.0.48. The vulnerability can be exploited by remote attackers to inject arbitrary web script or HTML via a specially crafted SSID field on the Wireless Settin...

CVE-2018-8772

Coship RT3052 4.0.0.48 devices allow XSS via a crafted SSID field on the "Wireless Setting - Basic" screen...

The vulnerability of the HPE iMC Server software platform, HPE Intelligent Management Center PLAT, allows a perpetrator to execute arbitrary code.

The vulnerability of the HPE iMC Server software platform of HPE Intelligent Management Center PLAT exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using the SSID attribute...

Coship RT3052 Wireless Router - Persistent Cross-Site Scripting

Coship RT3052 Wireless Router - Persistent Cross-Site Scripting Exploit Title: Coship RT3052 Wireless Router - Persistent Cross Site Scripting XSS Date: 2018-03-18 Exploit Author: Sayan Chatterjee Vendor Homepage: http://en.coship.com/ Category: Hardware Wifi Router Version: 4.0.0.48 Tested on:...

Coship RT3052 Wireless Router - Persistent Cross-Site Scripting

Exploit Title: Coship RT3052 Wireless Router - Persistent Cross Site Scripting XSS Date: 2018-03-18 Exploit Author: Sayan Chatterjee Vendor Homepage: http://en.coship.com/ Category: Hardware Wifi Router Version: 4.0.0.48 Tested on: Windows 10 CVE: CVE-2018-8772 Proof of Concept =================...

CVE-2018-6936

Cross Site Scripting XSS exists on the D-Link DIR-600M C1 3.01 via the SSID or the name of a user account...

TP-LINK TL-WR741N and TL-WR741ND 150M Wireless Lite N Router Code Execution Vulnerability

TP-LINK TL-WR741N and TL-WR741ND 150M Wireless Lite N Router are both wireless router products from China P&L TP-LINK. A security vulnerability exists in the TP-LINK TL-WR741N and TL-WR741ND 150M Wireless Lite N Router using firmware version 3.11.7 Build 100603 Rel.56412n and hardware version...

systemd Network Name Resolution Manager NSEC Resource Record Pseudo-Types Denial of Service Vulnerability

This vulnerability allows remote attackers to cause a denial of service condition on vulnerable installations of systemd Network Name Resolution Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NSEC resource records in...

PT-2017-13302 · Intelbras · Intelbras Wireless N 150Mbps Router

Name of the Vulnerable Software and Affected Versions: Intelbras Wireless N 150Mbps router with firmware WRN 240 Description: The issue allows attackers to steal wireless credentials without being connected to the network. This is related to userRpm/popupSiteSurveyRpm.htm and...

Unspecified Vulnerability in Cisco DPC3939 Firmware (CNVD-2017-27792)

Cisco DPC3939 is a wireless voice gateway product from Cisco USA. A security vulnerability exists in the Cisco DPC3939 firmware. A remote attacker hides the SSID and password for a home secured Wi-Fi network...

Ubuntu Fixes Linux Systemd Bug

Developers with Canonical pushed out a handful of patches for the Linux-based operating system Ubuntu this week, including one that resolves a bug that could have let an attacker cause a denial of service or execute arbitrary code with a TCP payload. Chris Coulson, a software and electronics...

CVE-2017-7398

D-Link DIR-615 HW: T1 FW:20.09 is vulnerable to Cross-Site Request Forgery CSRF vulnerability. This enables an attacker to perform an unwanted action on a wireless router for which the user/admin is currently authenticated, as demonstrated by changing the Security option from WPA2 to None, or...