CVE-2021-30866

A user privacy issue was addressed by removing the broadcast MAC address. This issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. A device may be passively tracked by its WiFi MAC address...

Command injection

An issue was discovered in D-Link DIR816A1FW101CNB04 750m11ac wireless router, The HTTP request parameter is used in the handler function of /goform/form2userconfig.cgi route, which can construct the user name string to delete the user function. This can lead to command injection through shell...

CVE-2021-39510

The CVE-2021-39510 entry documents a vulnerability in D-Link DIR816_A1_FW101CNB04 750m11ac routers. Affected component: the HTTP handler for /goform/form2userconfig.cgi, where an HTTP request parameter is used to compose a username string for the delete-user function. Root cause: improper handlin...

RaspAP 命令注入漏洞

RaspAP is a software solution that can easily deploy Raspberry Pi as a wireless AP access point with a set of responsive WebUI to control WiFi, as easy to use as a home router. a command injection vulnerability exists in includes/configureclient.php in RaspAP version 2.6.6. An attacker could...

Apple tvOS 安全漏洞

Apple tvOS is a set of smart TV operating systems from the American company Apple Apple. A security vulnerability exists in several Apple products that could allow devices to be passively tracked by their WiFi MAC addresses. The issue was fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15...

TOTOLINK A3002R Cross-Site Scripting Vulnerability (CNVD-2021-64485)

TOTOLINK A3002RU is an AC1200 wireless dual-band gigabit router. ddns.htm in TOTOLINK A3002R version 1.1.1-B20200824 is vulnerable to cross-site scripting. An attacker can modify the "domain" field, "server address" field, "username/email" or "password/key " field to execute arbitrary JavaScript...

Command Execution Vulnerability in DIR-846 at AUO Electronic Devices (Shanghai) Co.

The DIR-846 router is a wireless router product for users with gaming and video entertainment needs. A command execution vulnerability exists in the AUO Electronic Devices Shanghai Co. DIR-846, which can be exploited by an attacker to execute arbitrary code...

TOTOLINK A3002RU Cross-Site Scripting Vulnerability (CNVD-2022-06507)

TOTOLINK A3002RU is a wireless router product from Taiwan-based TOTOLINK Corporation. tr069config.htm in TOTOLINK A3002R version V1.1.1-B20200824 contains a security vulnerability that allows attackers to exploit it by modifying the " username" field or "password" field to execute arbitrary...

TOTOLINK A3002RU Cross-Site Scripting Vulnerability (CNVD-2022-13192)

Totolink TOTOLINK A3002RU is a wireless router product from Gion Electronics Totolink, Taiwan, China.A cross-site scripting vulnerability exists in TOTOLINK A3002R V1.1.1-B20200824, which stems from the lack of proper validation of client-side data by the WEB application. An attacker could use th...

D-Link DAP-2020 Stack Buffer Overflow Vulnerability

The D-Link DAP-2020 is a wireless N access point. A stack buffer overflow vulnerability exists in the D-Link DAP-2020, which is caused by incorrect boundary checking of the var:page parameter in the webproc endpoint. An attacker could exploit the vulnerability to cause a buffer overflow and execu...

SSH Cisco Wireless LAN Controller (WLC) Enumeration

The remote device is a Cisco Wireless LAN Controller WLC. TRUSTED...

D-Link DAP-2020 Stack Buffer Overflow Vulnerability (CNVD-2021-67523)

The D-Link DAP-2020 is a wireless N access point. The D-Link DAP-2020 is vulnerable to a stack buffer overflow vulnerability caused by incorrect boundary checking of the var:menu parameter in the webproc endpoint, which could be exploited by an attacker to cause a buffer overflow and execute...

D-Link DAP-2020 Directory Traversal Vulnerability

The D-Link DAP-2020 is a wireless N access point. a directory traversal vulnerability exists in the D-Link DAP-2020. An attacker could exploit this vulnerability to obtain sensitive information...

D-Link DAP-2020 Stack Buffer Overflow Vulnerability (CNVD-2021-67522)

The D-Link DAP-2020 is a wireless N access point. A stack buffer overflow vulnerability exists in the D-Link DAP-2020, which is caused by a failure to properly boundary check in the webproc endpoint. An attacker could exploit the vulnerability to cause a buffer overflow and execute arbitrary code...

D-Link DSL-2750U Unauthorized Configuration Modification Vulnerability

The D-Link DSL-2750U is a wireless N 300 ADSL2 modem router.An unauthorized configuration modification vulnerability exists in the D-Link DSL-2750U ME1.16 and earlier versions. An attacker could use this vulnerability to modify the configuration without authorization...

D-Link DSL-2750U OS Command Injection Vulnerability

The D-Link DSL-2750U is a wireless N 300 ADSL2 modem router. an OS command injection vulnerability exists in the D-Link DSL-2750U ME1.16 and earlier versions. An attacker could exploit this vulnerability in combination with other vulnerabilities to execute arbitrary OS commands...

CVE-2021-34560

In PEPPERL+FUCHS WirelessHART-Gateway = 3.0.9 a form contains a password field with autocomplete enabled. The stored credentials can be captured by an attacker who gains control over the user's computer. Therefore the user must have logged in at least once...

NetGear D1500 V1.0.0.21_1.0.1PE - (Wireless Repeater) Stored Cross-Site Scripting Vulnerability

Exploit Title: NetGear D1500 V1.0.0.211.0.1PE - 'Wireless Repeater' Stored Cross-Site Scripting XSS Exploit Author: Securityium Vendor Homepage: https://www.netgear.com/ Version: V1.0.0.211.0.1PE Tested on: NetGear D1500 Home Router Contact: email protected Version : Hardware version:...

NetGear D1500 V1.0.0.21_1.0.1PE - 'Wireless Repeater' Stored Cross-Site Scripting (XSS)

Exploit Title: NetGear D1500 V1.0.0.211.0.1PE - 'Wireless Repeater' Stored Cross-Site Scripting XSS Date: 21 Dec 2018 Exploit Author: Securityium Vendor Homepage: https://www.netgear.com/ Version: V1.0.0.211.0.1PE Tested on: NetGear D1500 Home Router Contact: [email protected] Version :...

NetGear D1500 1.0.0.21_1.0.1PE Cross Site Scripting

Exploit Title: NetGear D1500 V1.0.0.211.0.1PE - 'Wireless Repeater' Stored Cross-Site Scripting XSS Date: 21 Dec 2018 Exploit Author: Securityium Vendor Homepage: https://www.netgear.com/ Version: V1.0.0.211.0.1PE Tested on: NetGear D1500 Home Router Contact: [email protected] Version :...