NetGear D1500 V1.0.0.21_1.0.1PE - (Wireless Repeater) Stored Cross-Site Scripting Vulnerability

Exploit Title: NetGear D1500 V1.0.0.211.0.1PE - 'Wireless Repeater' Stored Cross-Site Scripting XSS Exploit Author: Securityium Vendor Homepage: https://www.netgear.com/ Version: V1.0.0.211.0.1PE Tested on: NetGear D1500 Home Router Contact: email protected Version : Hardware version:...

NetGear D1500 V1.0.0.21_1.0.1PE - 'Wireless Repeater' Stored Cross-Site Scripting (XSS)

Exploit Title: NetGear D1500 V1.0.0.211.0.1PE - 'Wireless Repeater' Stored Cross-Site Scripting XSS Date: 21 Dec 2018 Exploit Author: Securityium Vendor Homepage: https://www.netgear.com/ Version: V1.0.0.211.0.1PE Tested on: NetGear D1500 Home Router Contact: [email protected] Version :...

NetGear D1500 1.0.0.21_1.0.1PE Cross Site Scripting

Exploit Title: NetGear D1500 V1.0.0.211.0.1PE - 'Wireless Repeater' Stored Cross-Site Scripting XSS Date: 21 Dec 2018 Exploit Author: Securityium Vendor Homepage: https://www.netgear.com/ Version: V1.0.0.211.0.1PE Tested on: NetGear D1500 Home Router Contact: [email protected] Version :...

Null Pointer Dereference Vulnerability in Multiple D-Link Products (CNVD-2021-94840)

The D-Link DAP-2310 is a single-band wireless network access point for small businesses or schools that need a fast and reliable wireless network.The D-Link DAP-2330 is a wireless N300 single-band PoE access point. A null pointer dereference vulnerability exists in multiple D-Link products, which...

Multiple D-Link products null pointer dereference vulnerability

The D-Link DAP-2310 is a single-band wireless network access point for small businesses or schools that need a fast and reliable wireless network. the DAP-2330 is a wireless N300 single-band PoE access point. A null pointer dereference vulnerability exists in several D-Link products. The...

SUSE SLES15: kernel-azure / kernel-azure-devel / kernel-devel-azure / etc (SUSE-SU-2021:2646-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:2646-1 advisory. The SUSE Linux Enterprise 15 SP2 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: -...

NetworkManager bug fix and enhancement update

NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband WWAN, and PPPoE devices, as well as providing VPN integration with a varie...

NetworkManager bug fix and enhancement update

An update is available for NetworkManager. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list NetworkManager is a system network service that manages network device...

ALBA-2021:3055 NetworkManager bug fix and enhancement update

NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband WWAN, and PPPoE devices, as well as providing VPN integration with a varie...

Netgear NETGEAR和NETGEAR WAC104 安全漏洞

Netgear NETGEAR and NETGEAR WAC104 are both products of Netgear, Inc.NETGEAR is a router. A hardware device that connects two or more networks and acts as a gateway between networks.NETGEAR WAC104 is a wireless access point AP. A security vulnerability exists in the NETGEAR WAC104 versions prior ...

Trendnet TRENDnet TV-IP110WN 跨站脚本漏洞

The Trendnet TRENDnet TV-IP110WN is a wireless webcam from Trendnet. The Trendnet TRENDnet TV-IP110WN suffers from a cross-site scripting vulnerability that stems from an XSS vulnerability in the profile parameter in /admin/view.cgi...

A week in security (August 2 – August 8)

Last week on Malwarebytes Labs: RDP brute force attacks explained The 3 biggest threats reaching for your antivirus software’s off switch Zoom and gloom? Video comms org agrees to settle for $85m COVID-19 vaccine appointment system attacked in Italy Chrome casts away the padlock - is it good...

Linux kernel代码问题漏洞

Linux kernel is the kernel used by the Linux Foundation's open source operating system, Linux. Linux kernel is vulnerable due to a null pointer dereference flaw in the radiotap parser in the mac80211 subsystem. Through the mac80211 subsystem, a local attacker could exploit this vulnerability to...

Totolink A720R License Issue Vulnerability

The Totolink A720R is a wireless router from Taiwan, China's Gion Electronics Totolink. The Totolink A720R suffers from an authorization issue vulnerability in version V4.1.5cu.470B20200911, which stems from an improper implementation of the form login feature in the software version, and can be...

Totolink A720R Access Control Error Vulnerability

The Totolink A720R is a wireless router from Taiwan, China's Gion Electronics Totolink. A security vulnerability exists in the TOTOLINK A720R that originates from a network system or product that does not properly restrict access to resources from unauthorized roles. An attacker can exploit the...

Totolink A720R Command Execution Vulnerability

The Totolink A720R is a wireless router from Taiwan, China's Gion Electronics Totolink. The TOTOLINK A720R suffers from a command execution vulnerability that stems from improper design or implementation during code development of the network system. The vulnerability can be exploited by an...

NSA issues advice for securing wireless devices

By releasing an information sheet that provides guidance on securing wireless devices while in public pdf—for National Security System, Department of Defense, and Defense Industrial Base teleworkers—the NSA has provided useful information on malicious techniques used by cyber actors, and ways to...

Ecobee Ecobee3 Lite Buffer Overflow Vulnerability

Ecobee Ecobee3 Lite is a Wi-Fi smart thermostat from Ecobee Canada.A buffer error vulnerability exists in Ecobee Ecobee3 Lite, which stems from HKProcessConfig in the product's HomeKit wireless access control settings failing to properly validate data boundaries, which could be used by an attacke...

CVE-2021-27954

A heap-based buffer overflow vulnerability exists on the ecobee3 lite 4.5.81.200 device in the HKProcessConfig function of the HomeKit Wireless Access Control setup process. A threat actor can exploit this vulnerability to force the device to connect to a SSID or cause a denial of service...

Heap overflow

A heap-based buffer overflow vulnerability exists on the ecobee3 lite 4.5.81.200 device in the HKProcessConfig function of the HomeKit Wireless Access Control setup process. A threat actor can exploit this vulnerability to force the device to connect to a SSID or cause a denial of service...