CVE-2017-6127

Multiple cross-site request forgery CSRF vulnerabilities in the access portal on the DIGISOL DG-HR1400 Wireless Router with firmware 1.00.02 allow remote attackers to hijack the authentication of administrators for requests that 1 change the SSID, 2 change the Wi-Fi password, or 3 possibly have...

CVE-2017-6127

Multiple cross-site request forgery CSRF vulnerabilities in the access portal on the DIGISOL DG-HR1400 Wireless Router with firmware 1.00.02 allow remote attackers to hijack the authentication of administrators for requests that 1 change the SSID, 2 change the Wi-Fi password, or 3 possibly have...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the access portal on the DIGISOL DG-HR1400 Wireless Router with firmware 1.00.02 allow remote attackers to hijack the authentication of administrators for requests that 1 change the SSID, 2 change the Wi-Fi password, or 3 possibly have...

CVE-2017-6127

Multiple cross-site request forgery CSRF vulnerabilities in the access portal on the DIGISOL DG-HR1400 Wireless Router with firmware 1.00.02 allow remote attackers to hijack the authentication of administrators for requests that 1 change the SSID, 2 change the Wi-Fi password, or 3 possibly have...

CVE-2017-6127

The CVE-2017-6127 issue affects the DigiSol DG-HR1400 Wireless Router (firmware 1.00.02) and is a CSRF vulnerability in the access portal. Exposed via crafted requests to form2WlanBasicSetup.cgi, it allows an attacker to hijack administrator authentication to perform actions such as changing the ...

DIGISOL DG-HR1400 Wireless Router - Cross-Site Request Forgery

DIGISOL DG-HR1400 Wireless Router - Cross-Site Request Forgery Digisol Router CSRF Exploit - Indrajith A.N history.pushState'', '', '/' input type="hidden" name="basicrates" value...

DIGISOL DG-HR1400 Wireless Router - Cross-Site Request Forgery Vulnerability

Exploit for hardware platform in category web applications Digisol Router CSRF Exploit - Indrajith A.N history.pushState'', '', '/' input type="hidden" na...

D-Link DIR-600M - Cross-Site Request Forgery

D-Link DIR-600M - Cross-Site Request Forgery Exploit Title:D-link wireless router DIR-600M – Cross-Site Request Forgery CSRF vulnerability Google Dork:N/A Date: 07/02/2017 Exploit Author:Ajay S. Kulal www.twitter.com/ajaykulal Vendor Homepage:dlink.com Software Link:N/A Version:Hardware version: ...

TM RG4332 2.7.0 Arbitrary File Disclosure

Exploit Title: TM RG4332 Wireless Router Traversal Arbitrary File Read Date: 27/01/2017 Exploit Author: Saeid Atabaki Version: RG4332V2.7.0 Tested on: RG4332 with minihttp 1.19 = 1 ============================================================= GET...

TM RG4332 Wireless Router Arbitrary File Disclosure Vulnerability

The RG4332 is a wireless router. An arbitrary file disclosure vulnerability exists in the web page of the TM RG4332 Wireless Router, which can be exploited by an attacker to obtain sensitive information because the program fails to adequately validate user-supplied input...

TM RG4332 Wireless Router - Arbitrary File Disclosure

TM RG4332 Wireless Router - Arbitrary File Disclosure Exploit Title: TM RG4332 Wireless Router Traversal Arbitrary File Read Date: 27/01/2017 Exploit Author: Saeid Atabaki Version: RG4332V2.7.0 Tested on: RG4332 with minihttp 1.19 = 1 =============================================================...

CG-WLR300NX vulnerable to cross-site request forgery

Overview CG-WLR300NX provided by Corega Inc is a wireless LAN router. CG-WLR300NX contains a cross-site request forgery vulnerability CWE-352. Satoshi Ogawa of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information...

Eir D1000 Wireless Router - WAN Side Remote Command Injection (Metasploit)

=begin Exploit Title: Eir D1000 Wireless Router - WAN Side Remote Command Injection Date: 7th November 2016 Exploit Author: Kenzo Website: https://devicereversing.wordpress.com Tested on Firmware version: 2.00AADU.520150909 Type: Webapps Platform: Hardware Description =========== By sending certa...

ASUS RT-N10E Cross-Site Scripting Vulnerability

ASUS RT-N10E Wireless Router is a wireless router device developed by ASUS. A cross-site scripting vulnerability exists in ASUS RT-N10E. An attacker can exploit the vulnerability to launch a cross-site scripting attack...

Security Advisory - Two Vulnerabilities in Huawei WS331a

Huawei WS331a is a Mini Wireless route. There is a Cross-site request forgery CSRF vulnerability in the management interface of WS331a products, an unauthenticated attacker could exploit this vulnerability to perform a CSRF attack. Successful exploit could allow the attacker to submit special...

Belkin F9K1122v1 'fmmgmt.c' Buffer Overflow Vulnerability

Belkin F9K1122v1 is wireless dual band router product. A buffer overflow vulnerability exists in the Belkin F9K1122v1 version 1.00.30 'fmmgmt.c'. The vulnerability allows attackers to cause a buffer overflow via cross-site request forgery...

PLC Wireless Router GPN2.4P21-C-CN File Disclosure

Exploit Title: PLC Wireless Router GPN2.4P21-C-CN Authorised Arbitrary File Disclosure Date: 28/08/2016 Exploit Author: Rahul Raz Affected Model : GPN2.4P21-C-CNFrimware- W2001EN-00 Vendor: ChinaMobile Tested on: Ubuntu Linux GET...

Cisco EPC3928 Denial of Service Vulnerability (CNVD-2016-04559)

Cisco EPC3928 is a wireless router product from Cisco USA. A security vulnerability exists in the goform/WClientMACList on the Cisco EPC3928. A remote attacker can exploit this vulnerability to cause a denial of service device crash with the help of a long 'hsortWireless' parameter...

Corega CG-WLBARGL Command Injection Vulnerability

The Corega CG-WLBARGL is a wireless LAN router from Corega Japan. A command injection vulnerability exists in Corega CG-WLBARGL. An attacker can exploit this vulnerability to execute arbitrary commands...

Corega CG-WLBARAGM Denial of Service Vulnerability

The Corega CG-WLBARGL is a wireless LAN router from Corega Japan. A denial of service vulnerability exists in Corega CG-WLBARAGM. A remote attacker can exploit this vulnerability to cause a denial of service reboot...