CVE-2020-24104

XSS on the PIX-Link Repeater/Router LV-WR07 with firmware v28K.Router.20170904 allows attackers to steal credentials without being connected to the network. The attack vector is a crafted ESSID, as demonstrated by the wireless.htm SET2 parameter...

CVE-2020-24104

CVE-2020-24104 refers to an XSS flaw in the PIX-Link Repeater/Router LV-WR07 (firmware v28K.Router.20170904). The vulnerability concerns the wireless.htm SET2 parameter, enabling an attacker to steal credentials via a crafted ESSID without network connectivity. Affected component: the device’s we...

CVE-2020-24104: Improper Neutralization of Input During Web Page Generation

XSS on the PIX-Link Repeater/Router LV-WR07 with firmware v28K.Router.20170904 allows attackers to steal credentials without being connected to the network. The attack vector is a crafted ESSID, as demonstrated by the wireless.htm SET2 parameter...

CVE-2019-10999: Out-of-bounds Write

The D-Link DCS series of Wi-Fi cameras contains a stack-based buffer overflow in alphapd, the camera's web server. The overflow allows a remotely authenticated attacker to execute arbitrary code by providing a long string in the WEPEncryption parameter when requesting wireless.htm. Vulnerable...

Exploit for Out-of-bounds Write in Dlink Dcs-930L_Firmware

D-Link Exploit The exploit exists in the devices server, alpha...