T&W WIFI Repeater BE126 Arbitrary Code Execution Vulnerability

Gongjin Electronics T&W WIFI Repeater BE126 is a wireless internet repeater from Gongjin Electronics China. A security vulnerability exists in the Gongjin Electronics T&W WIFI Repeater BE126. The vulnerability can be exploited by a remote attacker to execute arbitrary code by sending the 'user'...

Gongjin Electronics T&W WIFI Repeater BE126 Security Bypass Vulnerability

Gongjin Electronics T&W WIFI Repeater BE126 is a wireless internet repeater from Gongjin Electronics China. A security vulnerability exists in the Gongjin Electronics T&W WIFI Repeater BE126 due to a failure to authenticate the firmware during the upgrade process. The vulnerability can be exploit...

CVE-2018-9232

Due to the lack of firmware authentication in the upgrade process of T&W WIFI Repeater BE126 devices, an attacker can craft a malicious firmware and use it as an update...

CVE-2018-9232

Due to the lack of firmware authentication in the upgrade process of T&W WIFI Repeater BE126 devices, an attacker can craft a malicious firmware and use it as an update...

Authentication flaw

Due to the lack of firmware authentication in the upgrade process of T&W WIFI Repeater BE126 devices, an attacker can craft a malicious firmware and use it as an update...

CVE-2018-9232

Due to the lack of firmware authentication in the upgrade process of T&W WIFI Repeater BE126 devices, an attacker can craft a malicious firmware and use it as an update...

CVE-2018-9232

CVE-2018-9232 affects Gongjin Electronics’ T&W WIFI Repeater BE126. The connected CNVD entry confirms a vulnerability caused by failure to authenticate firmware during the upgrade process, enabling an attacker to craft malicious firmware and install it as an update. No explicit fixes are listed i...

PT-2018-18917

Name of the Vulnerable Software and Affected Versions T&W WIFI Repeater BE126 affected versions not specified Description The issue arises from the lack of firmware authentication in the upgrade process, allowing an attacker to craft malicious firmware and use it as an update. Recommendations At...

CVE-2018-9232: Improper Authentication

Due to the lack of firmware authentication in the upgrade process of T&W WIFI Repeater BE126 devices, an attacker can craft a malicious firmware and use it as an update...

PortSwigger Web Security: Leak of Platform Authentication credentials via Repeater

Burp Repeater leaks Platform Authentication HTTP Basic credentials when following redirections. Steps to reproduce: - Set up an open redirection on a site you control example.com. - Set up Platform Authentication for that same site. Use HTTP Basic auth and whatever credentials. - Using Repeater,...

Infogram: Application Vulnerable to CSRF - Remove Invited user

POC: 1. Login to the application with a business account. 2. Go to Manage teams, where we can send invites to a team member. Send a Invite to a team member 3. After the invite is sent to a user, the admin has option to Remove User. 4. While trying to remove the user, capture the request in burp ,...

Gongjin Electronics BE126 WIFI repeater Arbitrary File Read Vulnerability

Gongjin Electronics BE126 WIFI repeater is a wireless internet repeater from Gongjin Electronics China. A security vulnerability exists in Gongjin Electronics BE126 WIFI repeater version 1.0. The vulnerability can be exploited to read the entire file system with a specially crafted 'getpage'...

Gongjin Electronics BE126 WIFI repeater default credentials vulnerability

Gongjin Electronics BE126 WIFI repeater is a wireless internet repeater from Gongjin Electronics China. A security vulnerability exists in Gongjin Electronics BE126 WIFI repeater version 1.0. The vulnerability can be exploited to log in to telnet as root with default credentials...

Multiple vulnerabilities in Gongjin Electronics BE126 WIFI repeater

Gongjin Electronics BE126 WIFI repeater is a wireless internet repeater from Gongjin Electronics China. A security vulnerability exists in Gongjin Electronics BE126 WIFI repeater version 1.0. The vulnerability can be exploited to log in to telnet as root with default credentials and read the enti...

CVE-2017-9649

A Use of Hard-Coded Cryptographic Key issue was discovered in Mirion Technologies DMC 3000 Transmitter Module, iPam Transmitter f/DMC 2000, RDS-31 iTX and variants including RSD31-AM Package, DRM-1/2 and variants including Solar PWR Package, DRM and RDS Based Boundary Monitors, External...

Arbitrary file deletion

There is LFD local file disclosure on BE126 WIFI repeater 1.0 devices that allows attackers to read the entire filesystem on the device via a crafted getpage parameter...

Default credentials

On BE126 WIFI repeater 1.0 devices, an attacker can log into telnet which is open by default with default credentials as root username:"root" password:"root" and can: 1. Read the entire file system; 2. Write to the file system; or 3. Execute any code that attacker desires malicious or not...

Default credentials

On BE126 WIFI repeater 1.0 devices, an attacker can log into telnet which is open by default with default credentials as root username:"root" password:"root". The attacker can make a user that is connected to the repeater click on a malicious link that will log into the telnet and will infect the...

CVE-2017-8772

On BE126 WIFI repeater 1.0 devices, an attacker can log into telnet which is open by default with default credentials as root username:"root" password:"root" and can: 1. Read the entire file system; 2. Write to the file system; or 3. Execute any code that attacker desires malicious or not...

CVE-2017-8771

On BE126 WIFI repeater 1.0 devices, an attacker can log into telnet which is open by default with default credentials as root username:"root" password:"root". The attacker can make a user that is connected to the repeater click on a malicious link that will log into the telnet and will infect the...