CVE-2018-11653: Exposure of Sensitive Information to an Unauthorized Actor

Information disclosure in Netwave IP camera at //etc/RT2870STA.dat via HTTP on port 8000 allows an unauthenticated attacker to exfiltrate sensitive information about the network configuration like the network SSID and password...

JioFi 4G M2S 1.0.2 - Denial of Service Exploit

Exploit for hardware platform in category dos / poc Exploit Title: JioFi 4G M2S 1.0.2 - Denial of Service PoC Exploit Author: Vikas Chaudhary Vendor Homepage: https://www.jio.com/ Hardware Link:...

Edimax EW-7438RPn Mini Cross-Site Scripting Vulnerability

Edimax EW-7438RPn Mini is a wireless router product from Edimax Technology. A cross-site scripting vulnerability exists in the SSID field in the Edimax EW-7438RPn Mini v2 prior to version 1.26. A remote attacker can exploit this vulnerability to perform a phishing attack...

Design/Logic Flaw

An issue was discovered in Edimax EW-7438RPn Mini v2 before version 1.26. There is XSS in an SSID field...

CVE-2018-10569

An issue was discovered in Edimax EW-7438RPn Mini v2 before version 1.26. There is XSS in an SSID field...

CVE-2018-10569: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Edimax EW-7438RPn Mini v2 before version 1.26. There is XSS in an SSID field...

PT-2018-9967

Name of the Vulnerable Software and Affected Versions: Edimax EW-7438RPn Mini version prior to 1.26 Description: An issue was discovered in the Edimax EW-7438RPn Mini, where there is a cross-site scripting XSS vulnerability in an SSID field. Recommendations: For versions prior to 1.26, update to...

CVE-2018-15181

JioFi 4G Hotspot M2S devices allow attackers to cause a denial of service secure configuration outage via an XSS payload in the SSID name and Security Key fields...

CVE-2018-15181

JioFi 4G Hotspot M2S devices allow attackers to cause a denial of service secure configuration outage via an XSS payload in the SSID name and Security Key fields...

PT-2018-12928

Name of the Vulnerable Software and Affected Versions JioFi 4G Hotspot M2S affected versions not specified Description The issue allows attackers to cause a denial of service, specifically a secure configuration outage, by injecting an XSS payload into the SSID name and Security Key fields...

CVE-2018-15181: Improper Neutralization of Input During Web Page Generation

JioFi 4G Hotspot M2S devices allow attackers to cause a denial of service secure configuration outage via an XSS payload in the SSID name and Security Key fields...

Design/Logic Flaw

Tenda D152 ADSL routers allow XSS via a crafted SSID...

CVE-2018-14497: Improper Neutralization of Input During Web Page Generation

Tenda D152 ADSL routers allow XSS via a crafted SSID...

PT-2018-12548

Name of the Vulnerable Software and Affected Versions Tenda D152 affected versions not specified Description The issue allows for cross-site scripting XSS attacks through a crafted SSID. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

Netgear WNDR4500 Information Disclosure Vulnerability

The Netgear WNDR4500 is a wireless router product from NetGear. An information disclosure vulnerability exists in the Netgear WNDR4500 using firmware version 1.0.1.401.0.6877. The vulnerability can be exploited by a remote attacker to gain unauthenticated access to the genieping.htm,...

CVE-2016-5638

There are few web pages associated with the genie app on the Netgear WNDR4500 running firmware version V1.0.1.401.0.6877. Genie app adds some capabilities over the Web GUI and can be accessed even when you are away from home. A remote attacker can access genieping.htm or genieping2.htm or...

PT-2018-4931

Name of the Vulnerable Software and Affected Versions Netgear WNDR4500 firmware version V1.0.1.40 1.0.6877 Description A remote attacker can access certain web pages associated with the genie app without authentication. Specifically, accessing genie ping.htm, genie ping2.htm, or genie ping3.htm...

CVE-2016-5638: Cleartext Transmission of Sensitive Information

There are few web pages associated with the genie app on the Netgear WNDR4500 running firmware version V1.0.1.401.0.6877. Genie app adds some capabilities over the Web GUI and can be accessed even when you are away from home. A remote attacker can access genieping.htm or genieping2.htm or...

VulnCheck KEV: CVE-2017-8877

ASUS RT-AC and RT-N devices with firmware through 3.0.0.4.380.7378 allow JSONP Information Disclosure such as the SSID...

DIGISOL DG-HR3400 Wireless Router - Cross-Site Scripting Vulnerability

Exploit for hardware platform in category web applications Exploit Title: DIGISOL DG-HR3400 Wireless Router - Cross-Site Scripting Vendor Homepage: http://www.digisol.com Hardware Link: https://www.amazon.in/Digisol-DG-HR3400-300Mbps-Wireless-Broadband/dp/B00IL8DR6W Category: Hardware Exploit...