WPS-Text has XXE vulnerability in docx parsing

WPS-Text is an office software. WPS-Text suffers from an XXE vulnerability in docx parsing. This allows attackers to exploit the vulnerability to cause the disclosure of sensitive user information as well as a DoS Denial of Service on the user's system...

Memory Out-of-Bounds Read Vulnerability in WPS File Parsing

WPS Office is a set of office software developed by Beijing Kingsoft Office Software Company. A memory out-of-bounds read vulnerability exists in WPS file parsing. Due to the docReader module of WPS text, when calling the 'memcpy' function, the program fails to adequately perform boundary checkin...

CVE-2016-10180

An issue was discovered on the D-Link DWR-932B router. WPS PIN generation is based on srandtime0 seeding...

Design/Logic Flaw

An issue was discovered on the D-Link DWR-932B router. WPS PIN generation is based on srandtime0 seeding...

Hardcoded credentials

An issue was discovered on the D-Link DWR-932B router. There is a hardcoded WPS PIN of 28296607...

CVE-2016-10179

An issue was discovered on the D-Link DWR-932B router. There is a hardcoded WPS PIN of 28296607...

CVE-2016-10180

An issue was discovered on the D-Link DWR-932B router. WPS PIN generation is based on srandtime0 seeding...

CVE-2016-10179

An issue was discovered on the D-Link DWR-932B router. There is a hardcoded WPS PIN of 28296607...

CVE-2016-10180

CVE-2016-10180 affects the D-Link DWR-932B router. The WPS PIN generation is based on srand(time(0)) seeding, enabling potential PIN predictability. Connected sources confirm the issue and link to multiple entries, with no publicly documented patch/version details in the provided documents. Pract...

CVE-2016-10179

The CVE-2016-10179 entry affects the D-Link DWR-932B router. Multiple sources confirm a hardcoded WPS PIN (28296607) in the device, enabling authentication bypass and potentially unauthorized operations. CNVD-2017-01663 specifically notes exploitation on firmware 02.02eu, and CNVD describes bypas...

CVE-2016-10180

An issue was discovered on the D-Link DWR-932B router. WPS PIN generation is based on srandtime0 seeding...

Hijacker - Aircrack, Airodump, Aireplay, MDK3 and Reaver GUI Application for Android

Hijacker is a Graphical User Interface for the wireless auditing tools airodump-ng, aireplay-ng and mdk3. It offers a simple and easy UI to use these tools without typing commands in a console and copy&pasting MAC addresses. This application requires an android device with a wireless adapter that...

D-Link DWR-932B LTE router found multiple Backdoor-vulnerability warning-the black bar safety net

! If you have a similar to the DWR-9 3 2 B LTE D-Link router, don't wait for it to slow a firmware upgrade, or directly to give it is better. Allegedly the D-Link DWR-9 3 2 B LTE has more than 2 0 at risk, including Backdoor accounts, the default certificate, leakage of certificate, the firmware...

Unauthorized Access Vulnerability in D-Link DWR-932B LET Router WPS System

The D-Link DWR-932B LET is a wireless router. An unauthorized access vulnerability exists in the WPS system of the D-Link DWR-932B LET router. Since the WPS system PIN is hardcoded into the /bin/appmgr program, an attacker can exploit the vulnerability to use the PIN to access the wireless networ...

UPnP WFA Device Detection

According to its UPnP data, the remote device implements a UPnP WFA Device profile. This interface allows a user to configure WiFi settings over UPnP. The specifications requires a WPS-like authentication scheme. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid94049;...

Dlink DWR-932B router is explosion multiple security vulnerabilities-vulnerability warning-the black bar safety net

Foreword According to security experts the latest discovery, the Dlink DWR-932B router in the presence of a large number of security vulnerabilities, including back doors, the back door account, the weak WPS, as well as a remote code execution vulnerability and so on. If you're on IOT Security...

Backdoored D-Link Router Should be Trashed, Researcher Says

A researcher who found a slew of vulnerabilities in a popular router said it’s so hopelessly broken that consumers who own them should throw them away. Pierre Kim said attackers could easily exploit the vulnerabilities and use the device as a spamming zombie or a man-in-the-middle tool. “I advise...

D-Link DWR-932B Backdoors / Default WPS PIN

D-Link DWR-932B suffers from backdoor accounts, default WPS PIN, weak WPS PIN generation, and various other bad security practices and issues. Advisory Information Title: Multiple vulnerabilities found in the Dlink DWR-932B backdoor, backdoor accounts, weak WPS, RCE ... Advisory URL:...

D-Link DWR-932B Backdoors / Default WPS PIN

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory Information Title: Multiple vulnerabilities found in the Dlink DWR-932B backdoor, backdoor accounts, weak WPS, RCE ... Advisory URL: https://pierrekim.github.io/advisories/2016-dlink-0x00.txt Blog URL:...

SUSE SLED12 / SLES12 Security Update : wpa_supplicant (SUSE-SU-2016:2305-1)

This update for wpasupplicant fixes the following issues : - CVE-2015-4141: WPS UPnP vulnerability with HTTP chunked transfer encoding. bnc930077 - CVE-2015-4142: Integer underflow in AP mode WMM Action frame processing. bnc930078 - CVE-2015-4143: EAP-pwd missing payload length validation...