Belkin G Info Disclosure

Module exploits Belkin Wireless G Plus MIMO Router F5D9230-4 information disclosure vulnerability which allows fetching sensitive information such as credentials. !/usr/bin/env python3 -- coding: utf-8 -- """Belkin G Info Disclosure""" import re from kittysploit import from...

EUVD-2007-6673

Malware in sbrugna...

EUVD-2006-2559

Malware in sbrugna...

EUVD-2008-7074

Malware in sbrugna...

Remote code execution

An arbitrary code execution vulnerability exisits in Linksys WRT54GL Wireless-G Broadband Router with firmware = 4.30.18.006. The CheckTSSI function within the httpd binary uses unvalidated user input in the construction of a system command. An authenticated attacker with administrator privileges...

Null pointer dereference

A null pointer dereference vulnerability exists in Linksys WRT54GL Wireless-G Broadband Router with firmware = 4.30.18.006. A null pointer dereference in the soapaction function within the upnp binary can be triggered by an unauthenticated attacker via a malicious POST request invoking the...

CVE-2022-43973: Improper Neutralization of Special Elements used in an OS Command

An arbitrary code execution vulnerability exisits in Linksys WRT54GL Wireless-G Broadband Router with firmware = 4.30.18.006. The CheckTSSI function within the httpd binary uses unvalidated user input in the construction of a system command. An authenticated attacker with administrator privileges...

CVE-2022-43972: NULL Pointer Dereference

A null pointer dereference vulnerability exists in Linksys WRT54GL Wireless-G Broadband Router with firmware = 4.30.18.006. A null pointer dereference in the soapaction function within the upnp binary can be triggered by an unauthenticated attacker via a malicious POST request invoking the...

CVE-2022-43970: Buffer Copy without Checking Size of Input

A buffer overflow vulnerability exists in Linksys WRT54GL Wireless-G Broadband Router with firmware = 4.30.18.006. A stack-based buffer overflow in the StartEPI function within the httpd binary allows an authenticated attacker with administrator privileges to execute arbitrary commands on the...

CVE-2022-43970

The CVE-2022-43970 entry refers to a stack-based buffer overflow in the httpd binary of Linksys WRT54GL Wireless-G Broadband Router (firmware ≤ 4.30.18.006). The Start_EPI function handles untrusted input, enabling an authenticated administrator to execute arbitrary commands as root on the underl...

CVE-2018-14783

NetComm Wireless G LTE Light Industrial M2M Router NWL-25 with firmware 2.0.29.11 and prior. A cross-site request forgery condition can occur, allowing an attacker to change passwords of the device remotely...

CVE-2018-14783: Cross-Site Request Forgery (CSRF)

NetComm Wireless G LTE Light Industrial M2M Router NWL-25 with firmware 2.0.29.11 and prior. A cross-site request forgery condition can occur, allowing an attacker to change passwords of the device remotely...

CVE-2018-14785: Exposure of Information Through Directory Listing

NetComm Wireless G LTE Light Industrial M2M Router NWL-25 with firmware 2.0.29.11 and prior. The directory of the device is listed openly without authentication...

CVE-2018-14784: Improper Neutralization of Input During Web Page Generation

NetComm Wireless G LTE Light Industrial M2M Router NWL-25 with firmware 2.0.29.11 and prior. The device is vulnerable to several cross-site scripting attacks, allowing a remote attacker to run arbitrary code on the device...

CVE-2018-14782: Exposure of Sensitive Information to an Unauthorized Actor

NetComm Wireless G LTE Light Industrial M2M Router NWL-25 with firmware 2.0.29.11 and prior. The device allows access to configuration files and profiles without authenticating the user...

PT-2018-1457

Name of the Vulnerable Software and Affected Versions NetComm Wireless G LTE Light Industrial M2M Router NWL-25 versions 2.0.29.11 and prior Description The issue is related to the device's vulnerability to cross-site scripting attacks, which allows a remote attacker to run arbitrary code on the...

PT-2018-1459

Name of the Vulnerable Software and Affected Versions NetComm Wireless G LTE Light Industrial M2M Router NWL-25 versions 2.0.29.11 and prior Description The issue is related to insufficient protection of configuration data, allowing unauthorized access to configuration files and profiles without...

PT-2018-1456

Name of the Vulnerable Software and Affected Versions NetComm Wireless G LTE Light Industrial M2M Router NWL-25 versions 2.0.29.11 and prior Description The issue is related to the disclosure of information through directory listing without authentication. This allows a remote attacker to gain...

PT-2018-1458

Name of the Vulnerable Software and Affected Versions NetComm Wireless G LTE Light Industrial M2M Router NWL-25 versions 2.0.29.11 and prior Description A cross-site request forgery condition can occur, allowing an attacker to change passwords of the device remotely. This issue is related to the...

Linksys Wireless-G PTZ Access Sensitive Files Vulnerability

Exploit for hardware platform in category web applications Also sold by Cisco, this device, which can be found on ZoomEye here: https://www.zoomeye.org/search?q=Basic%20realm%3D%22Authorization%22%20Boa/0.94.13%20port%3A80&p=4&t=host has a vulnerability in which you can read some sensitive files ...