DIGISOL DG-HR3400 Wireless Router - Cross-Site Scripting

DIGISOL DG-HR3400 Wireless Router - Cross-Site Scripting Exploit Title: DIGISOL DG-HR3400 Wireless Router - Cross-Site Scripting Date: 2018-06-25 Vendor Homepage: http://www.digisol.com Hardware Link: https://www.amazon.in/Digisol-DG-HR3400-300Mbps-Wireless-Broadband/dp/B00IL8DR6W Category:...

DIGISOL DG-HR3400 Wireless Router - Cross-Site Scripting

Exploit Title: DIGISOL DG-HR3400 Wireless Router - Cross-Site Scripting Date: 2018-06-25 Vendor Homepage: http://www.digisol.com Hardware Link: https://www.amazon.in/Digisol-DG-HR3400-300Mbps-Wireless-Broadband/dp/B00IL8DR6W Category: Hardware Exploit Author: Adipta Basu Tested on: Mac OS High...

DIGISOL DG-BR4000NG - Cross-Site Scripting

DIGISOL DG-BR4000NG - Cross-Site Scripting Exploit Title: DIGISOL DG-BR4000NG - Cross-Site Scripting Date: 2018-06-24 Vendor Homepage: http://www.digisol.com Hardware Link: https://www.amazon.in/Digisol-DG-BR4000NG-Wireless-Broadband-802-11n/dp/B00A19EHYK Category: Hardware Exploit Author: Adipta...

DIGISOL DG-BR4000NG - Cross-Site Scripting

Exploit Title: DIGISOL DG-BR4000NG - Cross-Site Scripting Date: 2018-06-24 Vendor Homepage: http://www.digisol.com Hardware Link: https://www.amazon.in/Digisol-DG-BR4000NG-Wireless-Broadband-802-11n/dp/B00A19EHYK Category: Hardware Exploit Author: Adipta Basu Contact :...

Design/Logic Flaw

DIGISOL DG-BR4000NG devices have XSS via the SSID it is validated only on the client side...

CVE-2018-12705

DIGISOL DG-BR4000NG devices have XSS via the SSID it is validated only on the client side...

CVE-2018-12705

The affected device is DIGISOL DG-BR4000NG wireless router. It has a Cross-Site Scripting (XSS) vulnerability in its management interface that is triggered by the SSID value, with input validation performed only on the client side. The flaw allows injection of arbitrary scripts via the SSID field...

CVE-2018-12705

DIGISOL DG-BR4000NG devices have XSS via the SSID it is validated only on the client side...

PT-2018-11343

Name of the Vulnerable Software and Affected Versions DIGISOL DG-BR4000NG devices affected versions not specified Description The issue concerns a security problem where DIGISOL DG-BR4000NG devices are affected by XSS via the SSID. The SSID is validated only on the client side, which can lead to...

CVE-2018-12705: Improper Neutralization of Input During Web Page Generation

DIGISOL DG-BR4000NG devices have XSS via the SSID it is validated only on the client side...

CVE-2018-10252

An issue was discovered on Actiontec WCB6200Q before 1.1.10.20a devices. The admin login session cookie is insecurely generated making admin session hijacking possible. When an admin logs in, a session cookie is generated using the time of day rounded to 10ms. Since the web server returns its...

CVE-2018-10252

An issue was discovered on Actiontec WCB6200Q before 1.1.10.20a devices. The admin login session cookie is insecurely generated making admin session hijacking possible. When an admin logs in, a session cookie is generated using the time of day rounded to 10ms. Since the web server returns its...

Design/Logic Flaw

Coship RT3052 4.0.0.48 devices allow XSS via a crafted SSID field on the "Wireless Setting - Basic" screen...

CVE-2018-8772

CVE-2018-8772 : Coship RT3052 wireless router (version 4.0.0.48) is affected by a cross-site scripting (XSS) vulnerability that can be triggered by a crafted SSID in the Wireless Setting – Basic page. Multiple connected sources confirm the vulnerability exists in the router’s web interface and al...

CVE-2018-8772: Improper Neutralization of Input During Web Page Generation

Coship RT3052 4.0.0.48 devices allow XSS via a crafted SSID field on the "Wireless Setting - Basic" screen...

PT-2018-18626

Name of the Vulnerable Software and Affected Versions Coship RT3052 version 4.0.0.48 Description The issue allows for XSS attacks through a crafted SSID field on the "Wireless Setting - Basic" screen. Recommendations For Coship RT3052 version 4.0.0.48, avoid using the SSID field on the "Wireless...

HackerOne: h1-202 leaderboard photo discloses local wifi password

Summary: the h1-202 event took several photos for the event that rotate on the public leaderboard. One of these photos disclosed the local wifi SSID and Password. Description: SSID: HackerOne Password: █████████ Steps To Reproduce 1. Look at the photo attached Remediation Have your staff...

Coship RT3052 Wireless Router - Persistent Cross-Site Scripting

Coship RT3052 Wireless Router - Persistent Cross-Site Scripting Exploit Title: Coship RT3052 Wireless Router - Persistent Cross Site Scripting XSS Date: 2018-03-18 Exploit Author: Sayan Chatterjee Vendor Homepage: http://en.coship.com/ Category: Hardware Wifi Router Version: 4.0.0.48 Tested on:...

Design/Logic Flaw

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, there is an obsolete set/reset ssid hotlist API...

CVE-2017-11074: Undefined Security Weakness

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, there is an obsolete set/reset ssid hotlist API...