Lucene search
+L

1098 matches found

seebug.org
seebug.org
added 2016/07/07 12:0 a.m.25 views

WPS text 10. 1. 0. 5777 version of the XSS vulnerability

No description provided by source...

7.1AI score
SaveExploits0
NVD
NVD
added 2016/06/25 9:59 p.m.17 views

CVE-2016-4824

The Wi-Fi Protected Setup WPS implementation on Corega CG-WLR300GNV and CG-WLR300GNV-W devices does not restrict the number of PIN authentication attempts, which makes it easier for remote attackers to obtain network access via a brute-force attack...

5.3CVSS5.4AI score0.01385EPSS
SaveExploits0References3
CVE
CVE
added 2016/06/25 9:0 p.m.48 views

CVE-2016-4824

The CVE-2016-4824 issue affects Corega CG-WLR300GNV and CG-WLR300GNV-W wireless routers. The WPS PIN authentication implementation does not limit the number of attempts, enabling authenticated brute-force attempts from within wireless range to recover the PIN and gain network access. Affected com...

5.3CVSS5.4AI score0.01385EPSS
SaveExploits0References3Affected Software1
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2016/06/22 12:0 a.m.33 views

JVN#75028871: CG-WLR300GNV Series does not limit authentication attempts

CG-WLR300GNV and CG-WLR300GNV-W provided by Corega Inc are wireless LAN routers. The WPS functionality in CG-WLR300GNV Series does not limit PIN authentication attempts, making it susceptible to brute force attacks. Impact An unauthenticated attacker within wireless range of the device may perfor...

5.3CVSS5.5AI score0.01385EPSS
SaveExploits0
Prion
Prion
added 2016/05/14 4:59 p.m.9 views

Design/Logic Flaw

The WPS implementation on I-O DATA DEVICE WN-GDN/R3, WN-GDN/R3-C, WN-GDN/R3-S, and WN-GDN/R3-U devices does not limit PIN guesses, which allows remote attackers to obtain network access via a brute-force attack...

3.3CVSS7.2AI score0.00632EPSS
SaveExploits0References3
NVD
NVD
added 2016/05/14 4:59 p.m.15 views

CVE-2016-1206

The WPS implementation on I-O DATA DEVICE WN-GDN/R3, WN-GDN/R3-C, WN-GDN/R3-S, and WN-GDN/R3-U devices does not limit PIN guesses, which allows remote attackers to obtain network access via a brute-force attack...

4.3CVSS4.7AI score0.00632EPSS
SaveExploits0References3
CVE
CVE
added 2016/05/14 4:0 p.m.42 views

CVE-2016-1206

CVE-2016-1206 affects I-O DATA DEVICE WN-GDN/R3 series (WN-GDN/R3, R3-C, R3-S, R3-U). The WPS implementation does not limit PIN guesses, enabling a brute-force attack from within wireless range to recover the PIN and gain network access. Public documents from JVN and CNVD confirm this vulnerabili...

4.3CVSS4.7AI score0.00632EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2016/05/14 4:0 p.m.16 views

CVE-2016-1206

The WPS implementation on I-O DATA DEVICE WN-GDN/R3, WN-GDN/R3-C, WN-GDN/R3-S, and WN-GDN/R3-U devices does not limit PIN guesses, which allows remote attackers to obtain network access via a brute-force attack...

4.7AI score0.00632EPSS
SaveExploits0References3
OSV
OSV
added 2016/05/14 12:0 a.m.32 views

DLA-473-1 wpa - security update

Bulletin has no description...

7.8CVSS6.3AI score0.02858EPSS
SaveExploits0
n0where
n0where
added 2016/05/12 12:42 a.m.27 views

Wireless Network Security Auditing Bash Script: airgeddon

airgeddon is a living project growing day by day. This is the list of features so far: Interface mode switcher Monitor-Managed keeping selection even on interface name changing DoS over wireless networks using different methods. “DoS Pursuit mode” available to avoid AP channel hopping available...

7.4AI score
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2016/05/12 12:0 a.m.25 views

JVN#25674893: WN-GDN/R3 Series does not limit authentication attempts

WN-GDN/R3 series provided by I-O DATA DEVICE, INC. is a wireless LAN router. WPS functionality in WN-GDN/R3 Series does not limit PIN authentication attempts, making it susceptible to brute force attacks. Impact An unauthenticated attacker within wireless range of the device may perform a brute...

4.3CVSS4.8AI score0.00632EPSS
SaveExploits0
exploitpack
exploitpack
added 2016/05/11 12:0 a.m.54 views

Google Android Broadcom Wi-Fi Driver - Memory Corruption

Google Android Broadcom Wi-Fi Driver - Memory Corruption / Copyright C 2016 by AbdSec Core Team This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, ...

8.3CVSS0.7AI score0.33367EPSS
SaveExploits4
Exploit DB
Exploit DB
added 2016/05/11 12:0 a.m.87 views

Google Android Broadcom Wi-Fi Driver - Memory Corruption

/ Copyright C 2016 by AbdSec Core Team This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or at your option any later version. This program is...

9.8CVSS8.5AI score0.33367EPSS
SaveExploits4
zdt
zdt
added 2016/05/11 12:0 a.m.64 views

Android Broadcom Wi-Fi Driver - Memory Corruption

Exploit for Android platform in category dos / poc / Copyright C 2016 by AbdSec Core Team This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or at...

7AI score0.33367EPSS
SaveExploits4
NVD
NVD
added 2016/05/09 10:59 a.m.34 views

CVE-2016-4476

hostapd 0.6.7 through 2.5 and wpasupplicant 0.6.7 through 2.5 do not reject \n and \r characters in passphrase parameters, which allows remote attackers to cause a denial of service daemon outage via a crafted WPS operation...

7.5CVSS7.2AI score0.02858EPSS
SaveExploits0References2
OSV
OSV
added 2016/05/09 10:59 a.m.24 views

CVE-2016-4476

hostapd 0.6.7 through 2.5 and wpasupplicant 0.6.7 through 2.5 do not reject \n and \r characters in passphrase parameters, which allows remote attackers to cause a denial of service daemon outage via a crafted WPS operation...

7.5CVSS6.6AI score
SaveExploits0References2
OSV
OSV
added 2016/05/09 10:59 a.m.5 views

ALPINE-CVE-2016-4476

hostapd 0.6.7 through 2.5 and wpasupplicant 0.6.7 through 2.5 do not reject \n and \r characters in passphrase parameters, which allows remote attackers to cause a denial of service daemon outage via a crafted WPS operation...

7.5CVSS6.8AI score0.02858EPSS
SaveExploits0References1
OSV
OSV
added 2016/05/09 10:59 a.m.2 views

DEBIAN-CVE-2016-4476

hostapd 0.6.7 through 2.5 and wpasupplicant 0.6.7 through 2.5 do not reject \n and \r characters in passphrase parameters, which allows remote attackers to cause a denial of service daemon outage via a crafted WPS operation...

7.5CVSS8.9AI score0.02858EPSS
SaveExploits0References1
Prion
Prion
added 2016/05/09 10:59 a.m.26 views

Code injection

hostapd 0.6.7 through 2.5 and wpasupplicant 0.6.7 through 2.5 do not reject \n and \r characters in passphrase parameters, which allows remote attackers to cause a denial of service daemon outage via a crafted WPS operation...

5CVSS6.8AI score0.02858EPSS
SaveExploits0References2Affected Software3
UbuntuCve
UbuntuCve
added 2016/05/09 10:59 a.m.41 views

CVE-2015-0570

Stack-based buffer overflow in the SETWPSIE IOCTL implementation in wlanhddhostapd.c in the WLAN aka Wi-Fi driver for the Linux kernel 3.x and 4.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allows attackers to gain privileges via a crafte...

9.3CVSS7.3AI score0.01751EPSS
SaveExploits0References3
Rows per page
Query Builder