EUVD-2019-6194

Malware in sbrugna...

EUVD-2017-2954

Malware in sbrugna...

Broadcom Wi-Fi Devices - 'KR00K Information Disclosure

Kr00ker Experimetal KR00K PoC in python3 using scapy Description: This script is a simple experiment to exploit the KR00K vulnerability CVE-2019-15126, that allows to decrypt some WPA2 CCMP data in vulnerable devices. More specifically this script attempts to retrieve Plaintext Data of WPA2 CCMP...

kr00k – Billions of Wi-Fi devices affected by encryption vulnerability

By Sudais Asif The IT security researchers at ESET have disclosed a new vulnerability named Kr00k in FullMAC WLAN chips manufactured by Broadcom and Cypress. This is a post from HackRead.com Read the original post: kr00k - Billions of Wi-Fi devices affected by encryption vulnerability...

CVE-2019-6496

Marvell Avastar Wi‑Fi chip family (models 88W8787/8797/8801/8897/8997) is affected by CVE-2019-6496 due to a block pool memory overflow in the ThreadX-based firmware when performing Wi‑Fi network scans. This can allow remote attackers within Wi‑Fi range to execute arbitrary code or cause a denial...

CVE-2019-6496

The ThreadX-based firmware on Marvell Avastar Wi-Fi devices, models 88W8787, 88W8797, 88W8801, 88W8897, and 88W8997, allows remote attackers to execute arbitrary code or cause a denial of service block pool overflow via malformed Wi-Fi packets during identification of available Wi-Fi networks...

CVE-2017-11320

Persistent XSS through the SSID of nearby Wi-Fi devices on Technicolor TC7337 routers 08.89.17.20.00 allows an attacker to cause DNS Poisoning and steal credentials from the router...

Cross site scripting

Persistent XSS through the SSID of nearby Wi-Fi devices on Technicolor TC7337 routers 08.89.17.20.00 allows an attacker to cause DNS Poisoning and steal credentials from the router...

CVE-2017-11320

The CVE-2017-11320 entry concerns Technicolor TC7337 routers (firmware 08.89.17.20.00) with a persistent XSS vulnerability in the SSID handling. The XSS can be triggered by the SSID of nearby devices and is described as enabling DNS poisoning and credentials theft from the router. Publicly docume...

CVE-2017-11320

Persistent XSS through the SSID of nearby Wi-Fi devices on Technicolor TC7337 routers 08.89.17.20.00 allows an attacker to cause DNS Poisoning and steal credentials from the router...

China is planting spying microchips in Electric Iron and kettles that can scan Wi-Fi devices to serve malware

We have discussed many times in our stories the network of Intelligent devices, their capabilities and the possibilities that cyber criminals could exploit them for illegal activities. Hidden chips are used by cyber criminals and state-sponsored hackers to infiltrate company networks and...