CVE-2018-12715

DIGISOL DG-HR3400 devices have XSS via a modified SSID when the apssid value is unchanged...

Design/Logic Flaw

DIGISOL DG-HR3400 devices have XSS via a modified SSID when the apssid value is unchanged...

CVE-2018-12715

Affected product: DIGISOL DG-HR3400 wireless router. Vulnerability: Cross-Site Scripting (XSS) via a modified SSID when the apssid value is unchanged, caused by lack of proper validation of client data by the web application. Impact: allows execution of client-side code in vulnerable contexts. Ro...

CVE-2018-12715

DIGISOL DG-HR3400 devices have XSS via a modified SSID when the apssid value is unchanged...

Unspecified vulnerability in SHEKAR Technology Endoscope (CNVD-2019-18874)

SHEKAR Technology Endoscope is a portable endoscopic device from SHEKAR Technology, China. A security vulnerability exists in SHEKAR Technology Endoscope. An attacker can exploit the vulnerability to modify the default SSID and password, causing users to be unable to access the device or cause...

CVE-2017-10724

Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that an attacker connected to the device Wi-Fi SSID can exploit a memory corruption issue and execute remote code on the device. This device acts as an Endoscope camera that allows...

CVE-2017-10718

Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that any malicious user connecting to the device can change the default SSID and password thereby denying the owner an access to his/her own device. This device acts as an Endoscop...

CVE-2017-10724

Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that an attacker connected to the device Wi-Fi SSID can exploit a memory corruption issue and execute remote code on the device. This device acts as an Endoscope camera that allows...

CVE-2017-10724

CVE-2017-10724 describes a memory corruption/overflow issue in the firmware of the Shekar Endoscope. The vulnerability arises in the UDP handling path: a crafted UDP request to change the Wi‑Fi name is processed by the control_Dev_thread, leading to a call to setwifipassword which uses memcpy wit...

CVE-2017-10723

Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that an attacker connected to the device Wi-Fi SSID can exploit a memory corruption issue and execute remote code on the device. This device acts as an Endoscope camera that allows...

CVE-2017-10718

Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that any malicious user connecting to the device can change the default SSID and password thereby denying the owner an access to his/her own device. This device acts as an Endoscop...

CVE-2017-10718

CVE-2017-10718 affects the Shekar Endoscope firmware. A vulnerability lets any malicious user connecting to the device change the default SSID and password, denying the owner access. This can enable an attacker to access the video feed and images; it also could facilitate footholds in air‑gapped ...

Out-of-bounds

While processing ssid IE length from remote AP, possible out-of-bounds access may occur due to crafted ssid IE length in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music,...

CVE-2018-11953

CVE-2018-11953 describes a potential out-of-bounds access when processing the SSID IE length from a remote AP in Qualcomm WLAN/WiFi stack. Affected are Snapdragon platforms including Auto, CE Connectivity, C IoT, Industrial IoT, IoT, Mobile, Voice & Music, and Wearables (many chipsets listed: MDM...

CVE-2018-11953

While processing ssid IE length from remote AP, possible out-of-bounds access may occur due to crafted ssid IE length in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music,...

Wi-Fi Hotspot Finder Spills 2 Million Passwords

More than 2 million passwords for Wi-Fi hotspots were leaked online by the Android app developer behind the mobile application called WiFi Finder. The passwords were part of an insecure database found by researchers at GDI Foundation. The Android app itself did not just help users find Wi-Fi...

JioFi 4G M2S 1.0.2 Cross Site Request Forgery

Exploit Title: JioFi 4G M2S 1.0.2 devices have CSRF via the SSID name and Security Key field under Edit Wi-Fi Settings aka a SetWiFiSetting request to cgi-bin/qcmapwebcgi Exploit Author: Vikas Chaudhary Date: 21-01-2019 Vendor Homepage: https://www.jio.com/ Hardware Link:...

CVE-2019-7440

JioFi 4G M2S 1.0.2 devices have CSRF via the SSID name and Security Key field under Edit Wi-Fi Settings aka a SetWiFiSetting request to cgi-bin/qcmapwebcgi...

CVE-2019-7440

Affected product: JioFi 4G M2S 1.0.2. Vulnerability: Cross-Site Request Forgery (CSRF) via the SSID name and Security Key field in Edit Wi‑Fi Settings (SetWiFi_Setting to cgi-bin/qcmap_web_cgi). Root cause: HTTP requests processed without proper validity checks enabling state-changing actions. Im...

Coship Wireless Router 4.0.0.x/5.0.0.x - WiFi Password Reset

Exploit for hardware platform in category web applications Exploit Title: Coship Wireless Router – Wireless SSID Unauthenticated Password Reset Exploit Author: Adithyan AK Vendor Homepage: http://en.coship.com/ Category: Hardware WiFi Router Affected Versions : Coship RT3052 - 4.0.0.48, Coship...