1652 matches found
CVE-2018-12456
Intelbras NPLUG 1.0.0.14 wireless repeater devices have no CSRF token protection in the web interface, allowing attackers to perform actions such as changing the wireless SSID, rebooting the device, editing access control lists, or activating remote access...
Design/Logic Flaw
Intelbras NPLUG 1.0.0.14 devices have XSS via a crafted SSID that is received via a network broadcast...
CVE-2018-17337
CVE-2018-17337 affects Intelbras NPLUG 1.0.0.14. The connected documents confirm a cross-site scripting (XSS) vulnerability that can be triggered by a specially crafted SSID received over a network broadcast. The root cause is the handling of SSID data leading to script/HTML injection. The report...
CVE-2018-17337
Intelbras NPLUG 1.0.0.14 devices have XSS via a crafted SSID that is received via a network broadcast...
CVE-2018-12456
Intelbras NPLUG 1.0.0.14 wireless repeater devices have no CSRF token protection in the web interface, allowing attackers to perform actions such as changing the wireless SSID, rebooting the device, editing access control lists, or activating remote access...
CVE-2018-11897
In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, while processing diag event after associating to a network out of bounds read occurs if ssid of the network joined is greater than max limit...
CVE-2018-17007
An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services e.g., inetd, HTTP, DNS, and UPnP via long JSON data for wireless wlanwds2g ssid...
CVE-2018-17007
An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services e.g., inetd, HTTP, DNS, and UPnP via long JSON data for wireless wlanwds2g ssid...
Tenda ADSL Router D152 - Cross-Site Scripting Vulnerability
Exploit for hardware platform in category web applications Exploit Title: Tenda D152 ADSL Router - Cross-Site Scripting Exploit Author: Sandip Dey Vendor Homepage: http://www.tendacn.com Hardware Link:...
CVE-2018-16333
An issue was discovered on Tenda AC7 V15.03.06.44CN, AC9 V15.03.05.196318CN, AC10 V15.03.06.23CN, AC15 V15.03.05.19CN, and AC18 V15.03.05.196318CN devices. There is a buffer overflow vulnerability in the router's web server. While processing the ssid parameter for a POST request, the value is...
Information disclosure
Information disclosure in Netwave IP camera at //etc/RT2870STA.dat via HTTP on port 8000 allows an unauthenticated attacker to exfiltrate sensitive information about the network configuration like the network SSID and password...
CVE-2018-11653
Information disclosure in Netwave IP camera at //etc/RT2870STA.dat via HTTP on port 8000 allows an unauthenticated attacker to exfiltrate sensitive information about the network configuration like the network SSID and password...
CVE-2018-11653
Information disclosure in Netwave IP camera at //etc/RT2870STA.dat via HTTP on port 8000 allows an unauthenticated attacker to exfiltrate sensitive information about the network configuration like the network SSID and password...
Edimax EW-7438RPn Mini Cross-Site Scripting Vulnerability
Edimax EW-7438RPn Mini is a wireless router product from Edimax Technology. A cross-site scripting vulnerability exists in the SSID field in the Edimax EW-7438RPn Mini v2 prior to version 1.26. A remote attacker can exploit this vulnerability to perform a phishing attack...
JioFi 4G M2S 1.0.2 - Denial of Service Exploit
Exploit for hardware platform in category dos / poc Exploit Title: JioFi 4G M2S 1.0.2 - Denial of Service PoC Exploit Author: Vikas Chaudhary Vendor Homepage: https://www.jio.com/ Hardware Link:...
Design/Logic Flaw
An issue was discovered in Edimax EW-7438RPn Mini v2 before version 1.26. There is XSS in an SSID field...
CVE-2018-10569
An issue was discovered in Edimax EW-7438RPn Mini v2 before version 1.26. There is XSS in an SSID field...
CVE-2018-15181
JioFi 4G Hotspot M2S devices allow attackers to cause a denial of service secure configuration outage via an XSS payload in the SSID name and Security Key fields...