Cross site scripting

Cross Site Scripting XSS vulnerability in Connectize AC21000 G6 641.139.1.1256 allows attackers to run arbitrary code via crafted string when setting the Wi-Fi password in the admin panel...

CVE-2023-42693

CVE-2023-42693 : The issue is a missing permission check in the wifi service of UNISOC chipsets, enabling local escalation of privilege with no extra execution privileges required. Connected sources confirm the affected component as the wifi service and describe the impact as local privilege elev...

Connectize G6 AC2100 Security Vulnerability

The Connectize G6 AC2100 is a wireless router from Connectize. A security vulnerability exists in the Connectize G6 AC2100 version 641.139.1.1256, which stems from the presence of a cross-site scripting XSS vulnerability. The vulnerability can be exploited by an attacker to run arbitrary code via...

CVE-2023-24050

Cross Site Scripting XSS vulnerability in Connectize AC21000 G6 641.139.1.1256 allows attackers to run arbitrary code via crafted string when setting the Wi-Fi password in the admin panel...

CVE-2023-24050

Cross Site Scripting XSS vulnerability in Connectize AC21000 G6 641.139.1.1256 allows attackers to run arbitrary code via crafted string when setting the Wi-Fi password in the admin panel...

CVE-2023-45623

Unauthenticated Denial-of-Service DoS vulnerabilities exist in the Wi-Fi Uplink service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to interrupt the normal operation of the affected access point...

Design/Logic Flaw

Unauthenticated Denial-of-Service DoS vulnerabilities exist in the Wi-Fi Uplink service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to interrupt the normal operation of the affected access point...

CVE-2023-45623

Unauthenticated Denial-of-Service DoS vulnerabilities exist in the Wi-Fi Uplink service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to interrupt the normal operation of the affected access point...

CVE-2023-45623

Unauthenticated Denial-of-Service DoS vulnerabilities exist in the Wi-Fi Uplink service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to interrupt the normal operation of the affected access point...

CVE-2023-45623

CVE-2023-45623 is an unauthenticated Denial-of-Service affecting the Wi-Fi Uplink service over the PAPI protocol. The issue, described in Red Hat/ENISA/ARUBA-aligned sources, enables interrupting normal operation of the affected access point and has a CVSS v3.1 base score of 7.5 ( NETWORK, LOW co...

PT-2023-29603 · Unknown · Wi-Fi Uplink Service

Name of the Vulnerable Software and Affected Versions: Wi-Fi Uplink service affected versions not specified Description: The issue concerns unauthenticated Denial-of-Service DoS vulnerabilities in the Wi-Fi Uplink service, which is accessed via the PAPI protocol. Successful exploitation of these...

VulnCheck KEV: CVE-2022-31126

Roxy-wi is an open source web interface for managing Haproxy, Nginx, Apache and Keepalived servers. A vulnerability in Roxy-wi allows a remote, unauthenticated attacker to code execution by sending a specially crafted HTTP request to /app/options.py file. This affects Roxy-wi versions before...

kernel: Linux kernel: Denial of Service due to memory leak in rtl8xxxu Wi-Fi driver

A flaw was found in the Linux kernel's Wi-Fi driver for certain Realtek chips. This vulnerability allows a local attacker to cause a system to run out of memory, leading to a Denial of Service DoS. The issue occurs because the driver does not correctly free memory associated with Card-to-Host C2H...

CVE-2023-42530

Improper access control vulnerability in SecSettings prior to SMR Nov-2023 Release 1 allows attackers to enable Wi-Fi and Wi-Fi Direct without User Interaction...

Improper access control

Improper access control vulnerability in SecSettings prior to SMR Nov-2023 Release 1 allows attackers to enable Wi-Fi and Wi-Fi Direct without User Interaction...

CVE-2023-42530

Improper access control vulnerability in SecSettings prior to SMR Nov-2023 Release 1 allows attackers to enable Wi-Fi and Wi-Fi Direct without User Interaction...

CVE-2023-42530

CVE-2023-42530 affects Samsung Mobile SecSettings prior to SMR Nov-2023 Release 1. The vulnerability is an improper access control that allows enabling Wi‑Fi and Wi‑Fi Direct without user interaction. Reported impact includes potential high integrity impact (I:H) and high confidentiality/availabi...

CVE-2023-42530

Improper access control vulnerability in SecSettings prior to SMR Nov-2023 Release 1 allows attackers to enable Wi-Fi and Wi-Fi Direct without User Interaction...

Rocky Linux 8 : wpa_supplicant (RLSA-2021:1686)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2021:1686 advisory. - In p2pcopyclientinfo of p2p.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution if the target...

SAMSUNG Mobile devices security vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from Samsung South Korea. A security vulnerability exists in SAMSUNG Mobile devices SMR Nov-2023 Release 1, which stems from an improper access control vulnerability in the SecSettings module. An...