kernel: Reassembling fragments encrypted under different keys

A flaw was found in the Linux kernel's WiFi implementation. An attacker within the wireless range can abuse a logic flaw in the WiFi implementation by reassembling packets from multiple fragments under different keys, treating them as valid. This flaw allows an attacker to send a fragment under a...

CVE-2020-26560

An impersonation attack vulnerability was found in the Linux kernel’s Bluetooth Mesh Profile implementation. The Mesh Provisioning procedure has a flaw that allows an attacker without knowledge of the AuthValue to spoof a provisioned device and use crafted responses that appear to possess the...

CVE-2021-20635

Improper restriction of excessive authentication attempts in LOGITEC LAN-WH450N/GR allows an attacker in the wireless range of the device to recover PIN and access the network...

CVE-2021-20635

Improper restriction of excessive authentication attempts in LOGITEC LAN-WH450N/GR allows an attacker in the wireless range of the device to recover PIN and access the network...

Input validation

Improper restriction of excessive authentication attempts in LOGITEC LAN-WH450N/GR allows an attacker in the wireless range of the device to recover PIN and access the network...

CVE-2021-20635

Improper restriction of excessive authentication attempts in LOGITEC LAN-WH450N/GR allows an attacker in the wireless range of the device to recover PIN and access the network...

AZL-6972 CVE-2019-16275 affecting package wpa_supplicant for versions less than 2.9-4

hostapd before 2.10 and wpasupplicant before 2.10 allow an incorrect indication of disconnection in certain situations because source address validation is mishandled. This is a denial of service that should have been prevented by PMF aka management frame protection. The attacker must send a...

Major Bluetooth Vulnerability

Bluetooth has a serious security vulnerability: In some implementations, the elliptic curve parameters are not all validated by the cryptographic algorithm implementation, which may allow a remote attacker within wireless range to inject an invalid public key to determine the session key with hig...

TP-Link Wireless Range Extender Detection

Detection of TP-Link Wireless Range Extender. The script sends a connection request to the server and attempts to detect the presence and get the model of TP-Link Wireless Range Extender. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources...

DODOCOOL DC38 3-in-1 N300 Mini Wireless Range Extend Cross-Site Request Forgery Vulnerability

DODOCOOL DC38 3-in-1 N300 Mini Wireless Range Extend is a wireless signal extender product from DODOCOOL, Hong Kong, China. A cross-site request forgery vulnerability exists in DODOCOOL DC38 3-in-1 N300 Mini Wireless Range Extend RTN2-AW.GD.R3465.1.20161103 version. A remote attacker can exploit...

CVE-2018-5720

An issue was discovered on DODOCOOL DC38 3-in-1 N300 Mini Wireless Range Extend RTN2-AW.GD.R3465.1.20161103 devices. A Cross-site request forgery CSRF vulnerability allows remote attackers to hijack the authentication of users for requests that modify all the settings. This vulnerability can lead...

CVE-2018-5720

CVE-2018-5720 affects the DODOCOOL DC38 3-in-1 N300 Mini Wireless Range Extend RTN2-AW.GD.R3465.1.20161103. The issue is a Cross-site Request Forgery (CSRF) that lets an attacker hijack user authentication to modify settings, including changing usernames/passwords and the Wi‑Fi password. Public r...

CVE-2018-5720

An issue was discovered on DODOCOOL DC38 3-in-1 N300 Mini Wireless Range Extend RTN2-AW.GD.R3465.1.20161103 devices. A Cross-site request forgery CSRF vulnerability allows remote attackers to hijack the authentication of users for requests that modify all the settings. This vulnerability can lead...

PT-2018-17110

Name of the Vulnerable Software and Affected Versions: DODOCOOL DC38 3-in-1 N300 Mini Wireless Range Extend RTN2-AW.GD.R3465.1.20161103 Description: A Cross-site request forgery CSRF issue allows remote attackers to hijack user authentication for requests that modify settings, potentially leading...

CVE-2018-5720: Cross-Site Request Forgery (CSRF)

An issue was discovered on DODOCOOL DC38 3-in-1 N300 Mini Wireless Range Extend RTN2-AW.GD.R3465.1.20161103 devices. A Cross-site request forgery CSRF vulnerability allows remote attackers to hijack the authentication of users for requests that modify all the settings. This vulnerability can lead...

Corega CG-WLR300GNV and CG-WLR300GNV-W Privilege Gain Vulnerabilities

The Corega CG-WLR300GNV and CG-WLR300GNV-W are both wireless LAN routers from Corega Japan. A privilege acquisition vulnerability exists in the Corega CG-WLR300GNV and CG-WLR300GNV-W that stems from the program failing to limit the number of authentication requests. An attacker within wireless...

MalDrone — First Ever Backdoor Malware for Drones

The use of small Unmanned Aerial Vehicles UAVs called Drones is rapidly transforming the way we go to war. Drones were once used for land surveillance, Delivering Pizza's, then equipped with bombs that changed the way nations conduct war and last year, these hovering drones were also used to hack...