5558 matches found
Cross site request forgery (csrf)
Fastweb FASTgate 0.00.47 devices are vulnerable to CSRF, with impacts including Wi-Fi password changing, Guest Wi-Fi activating, etc...
CVE-2018-6023
Fastweb FASTgate 0.00.47 devices are vulnerable to CSRF, with impacts including Wi-Fi password changing, Guest Wi-Fi activating, etc...
CVE-2018-6023
Fastweb FASTgate 0.00.47 devices are vulnerable to CSRF, with impacts including Wi-Fi password changing, Guest Wi-Fi activating, etc...
CVE-2018-6023
Affected product: Fastweb FASTgate 0.00.47 router. Vulnerability: Cross-site request forgery (CSRF) that allows attackers to modify configuration, including changing the Wi‑Fi password and activating Guest Wi‑Fi. Root cause: CSRF in the device’s web interface enabling unauthorized authenticated a...
Fastweb FASTGate 0.00.47 - Cross-site Request Forgery
Exploit for hardware platform in category web applications Exploit Title: Fastweb FASTgate 0.00.47 CSRF Exploit Authors: Raffaele Sabato Contact: https://twitter.com/syrion89 Vendor: Fastweb Product Web Page: http://www.fastweb.it/adsl-fibra-ottica/dettagli/modem-fastweb-fastgate/ Version: 0.00.4...
Fastweb FASTGate 0.00.47 Cross Site Request Forgery
Exploit Title: Fastweb FASTgate 0.00.47 CSRF Date: 09-05-2018 Exploit Authors: Raffaele Sabato Contact: https://twitter.com/syrion89 Vendor: Fastweb Product Web Page: http://www.fastweb.it/adsl-fibra-ottica/dettagli/modem-fastweb-fastgate/ Version: 0.00.47 CVE: CVE-2018-6023 I DESCRIPTION...
Fastweb FASTGate 0.00.47 - Cross-Site Request Forgery
Fastweb FASTGate 0.00.47 - Cross-Site Request Forgery Exploit Title: Fastweb FASTgate 0.00.47 CSRF Date: 09-05-2018 Exploit Authors: Raffaele Sabato Contact: https://twitter.com/syrion89 Vendor: Fastweb Product Web Page: http://www.fastweb.it/adsl-fibra-ottica/dettagli/modem-fastweb-fastgate/...
Home security camera isn’t secure. SpotCam in the spotlight
Home security cameras whether indoor or outdoor are becoming very accessible and popular, especially those with cloud backup/recording facilities. The idea is simple. The camera sends a video feed up to the provider’s cloud storage. You can then review your footage should an incident occur. What...
Elevation of Privilege vulnerability when installing Intel Wireless Drivers and related Software
Summary: Intel is releasing software updates that mitigate a security vulnerability in executables to install Intel Wireless drivers. Description: DLL injection vulnerability in the installation executables Autorun.exe and Setup.exe for Intel's wireless drivers and related software allows a local...
Hacking train passenger Wi-Fi
After speaking about Wi-Fi security at a rail industry conference last week, it struck me that very insecure passenger networks are making their way on to trains. So, here’s a quick check list for making sure your pax Wi-Fi network is secure. Similar checks could be applied to your guest network ...
KRACK Vulnerability Puts Medical Devices At Risk
A slew of devices from medical technology company Becton, Dickinson and Company BD are vulnerable to the infamous KRACK key-reinstallation attack, potentially enabling hackers to change and exfiltrate patient records. The KRACK vulnerability, discovered last October, is an industry-wide glitch in...
TP-Link Technologies TL-WA850RE Wi-Fi Range Extender Unauthorized Remote Reboot
Exploit Title: TP-Link Technologies TL-WA850RE Wi-Fi Range Extender | Unauthorized Remote Reboot Date: 25/04/2018 Exploit Author: Wadeek Vendor Homepage: https://www.tp-link.com/ Firmware Link: https://www.tp-link.com/en/download/TL-WA850RE.html Category: dos 1. www.shodan.io with title...
TP-Link Technologies TL-WA850RE Wi-Fi Range Extender - Remote Reboot
TP-Link Technologies TL-WA850RE Wi-Fi Range Extender - Remote Reboot Exploit Title: TP-Link Technologies TL-WA850RE Wi-Fi Range Extender | Unauthorized Remote Reboot Date: 25/04/2018 Exploit Author: Wadeek Vendor Homepage: https://www.tp-link.com/ Firmware Link:...
Trustjacking: iTunes’ Wi-Fi Sync Feature Vulnerable to Exploitation
By Waqas Hackers can exploit the vulnerability in iTunes' Wi-Fi Sync feature and This is a post from HackRead.com Read the original post: Trustjacking: iTunes' Wi-Fi Sync Feature Vulnerable to Exploitation...
'iTunes Wi-Fi Sync' Feature Could Let Attackers Hijack Your iPhone, iPad Remotely
Be careful while plugging your iPhone into a friend's laptop for a quick charge or sharing selected files. Researchers at Symantec have issued a security warning for iPhone and iPad users about a new attack, which they named "TrustJacking," that could allow someone you trust to remotely take...
New vulnerability: hackers can use the iTunes Wi-Fi sync feature to take over your iPhone-bug warning-the black bar safety net
United States Time 4 May 19, according to foreign media reports, Symantec researchers found that the Apple eco in a loophole, as long as the user of the iPhone with the Mac workstation or laptop pairing, the hacker could use the vulnerability Trustjacking）surreptitiously“take over”the user...
Input validation
BMC Medical Luna CPAP Machines released prior to July 1, 2017, contain an improper input validation vulnerability which may allow an authenticated attacker to crash the CPAP's Wi-Fi module resulting in a denial-of-service condition...
CVE-2017-12701
BMC Medical Luna CPAP Machines released prior to July 1, 2017, contain an improper input validation vulnerability which may allow an authenticated attacker to crash the CPAP's Wi-Fi module resulting in a denial-of-service condition...
CVE-2017-12701
CVE-2017-12701 affects BMC Medical Luna CPAP Machines released before 1 July 2017. It is an improper input validation vulnerability that could allow an authenticated attacker to crash the device’s Wi‑Fi module, causing a denial-of-service while the therapy function remains unaffected. The issue i...
CVE-2017-12701
BMC Medical Luna CPAP Machines released prior to July 1, 2017, contain an improper input validation vulnerability which may allow an authenticated attacker to crash the CPAP's Wi-Fi module resulting in a denial-of-service condition...