CVE-2016-10864

NETGEAR EX7000 V1.0.0.421.0.94 devices allow XSS via the SSID...

CVE-2016-10864

The CVE-2016-10864 entry concerns NETGEAR EX7000 devices (V1.0.0.42_1.0.94). Red Hat and CNVD records confirm a Cross-Site Scripting (XSS) vulnerability in the device’s web application that can be triggered via the SSID, stemming from insufficient input validation. Impact details in the sources i...

CVE-2017-18483

ANNKE SP1 HD wireless camera 3.4.1.1604071109 devices allow XSS via a crafted SSID...

CVE-2017-18483

ANNKE SP1 HD wireless camera 3.4.1.1604071109 devices allow XSS via a crafted SSID...

CVE-2018-12715

DIGISOL DG-HR3400 devices have XSS via a modified SSID when the apssid value is unchanged...

Design/Logic Flaw

DIGISOL DG-HR3400 devices have XSS via a modified SSID when the apssid value is unchanged...

CVE-2018-12715

Affected product: DIGISOL DG-HR3400 wireless router. Vulnerability: Cross-Site Scripting (XSS) via a modified SSID when the apssid value is unchanged, caused by lack of proper validation of client data by the web application. Impact: allows execution of client-side code in vulnerable contexts. Ro...

CVE-2018-12715

DIGISOL DG-HR3400 devices have XSS via a modified SSID when the apssid value is unchanged...

Unspecified vulnerability in SHEKAR Technology Endoscope (CNVD-2019-18874)

SHEKAR Technology Endoscope is a portable endoscopic device from SHEKAR Technology, China. A security vulnerability exists in SHEKAR Technology Endoscope. An attacker can exploit the vulnerability to modify the default SSID and password, causing users to be unable to access the device or cause...

CVE-2017-10724

Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that an attacker connected to the device Wi-Fi SSID can exploit a memory corruption issue and execute remote code on the device. This device acts as an Endoscope camera that allows...

CVE-2017-10718

Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that any malicious user connecting to the device can change the default SSID and password thereby denying the owner an access to his/her own device. This device acts as an Endoscop...

CVE-2017-10724

CVE-2017-10724 describes a memory corruption/overflow issue in the firmware of the Shekar Endoscope. The vulnerability arises in the UDP handling path: a crafted UDP request to change the Wi‑Fi name is processed by the control_Dev_thread, leading to a call to setwifipassword which uses memcpy wit...

CVE-2017-10724

Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that an attacker connected to the device Wi-Fi SSID can exploit a memory corruption issue and execute remote code on the device. This device acts as an Endoscope camera that allows...

CVE-2017-10723

Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that an attacker connected to the device Wi-Fi SSID can exploit a memory corruption issue and execute remote code on the device. This device acts as an Endoscope camera that allows...

CVE-2017-10718

Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that any malicious user connecting to the device can change the default SSID and password thereby denying the owner an access to his/her own device. This device acts as an Endoscop...

CVE-2017-10718

CVE-2017-10718 affects the Shekar Endoscope firmware. A vulnerability lets any malicious user connecting to the device change the default SSID and password, denying the owner access. This can enable an attacker to access the video feed and images; it also could facilitate footholds in air‑gapped ...

Out-of-bounds

While processing ssid IE length from remote AP, possible out-of-bounds access may occur due to crafted ssid IE length in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music,...

CVE-2018-11953

CVE-2018-11953 describes a potential out-of-bounds access when processing the SSID IE length from a remote AP in Qualcomm WLAN/WiFi stack. Affected are Snapdragon platforms including Auto, CE Connectivity, C IoT, Industrial IoT, IoT, Mobile, Voice & Music, and Wearables (many chipsets listed: MDM...

CVE-2018-11953

While processing ssid IE length from remote AP, possible out-of-bounds access may occur due to crafted ssid IE length in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music,...

Wi-Fi Hotspot Finder Spills 2 Million Passwords

More than 2 million passwords for Wi-Fi hotspots were leaked online by the Android app developer behind the mobile application called WiFi Finder. The passwords were part of an insecure database found by researchers at GDI Foundation. The Android app itself did not just help users find Wi-Fi...