Lucene search
K

19 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2008-6250

Malware in sbrugna...

4.3CVSS6.4AI score0.1704EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2009-2069

Malware in sbrugna...

6.8CVSS6.4AI score0.00254EPSS
Exploits0References7
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.12 views

Linksys WRT160N 'apply.cgi' Cross-Site Scripting Vulnerability

No description provided by source...

7.1AI score
Exploits0
seebug.org
seebug.org
added 2014/02/18 12:0 a.m.67 views

Linksys系列未明远程代码执行漏洞

No description provided by source. !/usr/bin/php ?php / Exploit for 0day linksys unauthenticated remote code execution vulnerability. As exploited by TheMoon worm; Discovered in the wild on Feb 13, 2013 by Johannes Ullrich. I was hoping this would stay under-wraps until a firmware patch could be...

7.1AI score
Exploits0
Packet Storm
Packet Storm
added 2014/02/17 12:0 a.m.25 views

Linksys E-Series Remote Code Execution

!/usr/bin/php ?php / Exploit for 0day linksys unauthenticated remote code execution vulnerability. As exploited by TheMoon worm; Discovered in the wild on Feb 13, 2013 by Johannes Ullrich. I was hoping this would stay under-wraps until a firmware patch could be released, but it appears the cat is...

Exploits0
exploitpack
exploitpack
added 2014/02/16 12:0 a.m.16 views

Linksys E-series - Remote Code Execution

Linksys E-series - Remote Code Execution !/usr/bin/php ?php / Exploit for 0day linksys unauthenticated remote code execution vulnerability. As exploited by TheMoon worm; Discovered in the wild on Feb 13, 2013 by Johannes Ullrich. I was hoping this would stay under-wraps until a firmware patch cou...

Exploits0
Packet Storm
Packet Storm
added 2013/05/21 12:0 a.m.26 views

Linksys WRT160n apply.cgi Remote Command Injection

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex/proto/tftp' class Metasploit3 'Linksys...

Exploits0
NVD
NVD
added 2009/06/15 7:30 p.m.10 views

CVE-2009-2073

Cross-site request forgery CSRF vulnerability in Linksys WRT160N wireless router hardware 1 and firmware 1.02.2 allows remote attackers to hijack the authentication of other users for unspecified requests via unknown vectors, as demonstrated using administrator privileges and actions...

6.8CVSS7.3AI score0.00254EPSS
Exploits0References6
Prion
Prion
added 2009/06/15 7:30 p.m.10 views

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Linksys WRT160N wireless router hardware 1 and firmware 1.02.2 allows remote attackers to hijack the authentication of other users for unspecified requests via unknown vectors, as demonstrated using administrator privileges and actions...

6.8CVSS7.8AI score0.00254EPSS
Exploits0References6Affected Software1
Cvelist
Cvelist
added 2009/06/15 7:0 p.m.15 views

CVE-2009-2073

Cross-site request forgery CSRF vulnerability in Linksys WRT160N wireless router hardware 1 and firmware 1.02.2 allows remote attackers to hijack the authentication of other users for unspecified requests via unknown vectors, as demonstrated using administrator privileges and actions...

7.3AI score0.00254EPSS
Exploits0References6
CVE
CVE
added 2009/06/15 7:0 p.m.34 views

CVE-2009-2073

The CVE-2009-2073 entry concerns the Linksys WRT160N family (hardware 1 and firmware 1.02.2). The vulnerability is described as a Cross-site Request Forgery (CSRF) that allows remote attackers to hijack the authentication of other users to perform unspecified requests; the administrator privilege...

6.8CVSS7.5AI score0.00254EPSS
Exploits0References6Affected Software1
seebug.org
seebug.org
added 2009/04/11 12:0 a.m.20 views

Linksys WRT160N无线路由器跨站请求伪造漏洞

BUGTRAQ ID: 34448 WRT160N是Linksy最新推出的一款802.11n无线路由器。 WRT160N路由器的WEB管理接口没有正确地验证用户所提交的HTTP请求,如果管理员受骗访问了恶意网页的话就可能导致绕过安全限制执行管理操作。 0 Linksys WRT160N Linksys ------- 目前厂商还没有提供补丁或者升级程序,我们建议使用此软件的用户随时关注厂商的主页以获取最新版本: a href=http://www.linksys.com target=blank rel=external nofollowhttp://www.linksys.com/a...

6.9AI score
Exploits0
Prion
Prion
added 2009/02/25 11:30 p.m.11 views

Cross site scripting

Cross-site scripting XSS vulnerability in apply.cgi on the Linksys WRT160N allows remote attackers to inject arbitrary web script or HTML via the action parameter in a DHCPStatic operation...

4.3CVSS6.1AI score0.1704EPSS
Exploits1References4
NVD
NVD
added 2009/02/25 11:30 p.m.10 views

CVE-2008-6280

Cross-site scripting XSS vulnerability in apply.cgi on the Linksys WRT160N allows remote attackers to inject arbitrary web script or HTML via the action parameter in a DHCPStatic operation...

4.3CVSS5.7AI score0.1704EPSS
Exploits1References4
Cvelist
Cvelist
added 2009/02/25 11:0 p.m.13 views

CVE-2008-6280

Cross-site scripting XSS vulnerability in apply.cgi on the Linksys WRT160N allows remote attackers to inject arbitrary web script or HTML via the action parameter in a DHCPStatic operation...

5.7AI score0.1704EPSS
Exploits1References4
CVE
CVE
added 2009/02/25 11:0 p.m.37 views

CVE-2008-6280

The vulnerability affects the Linksys WRT160N router, exposed through the apply.cgi utility. The root cause is an XSS flaw in the DHCP_Static path caused by unsanitized input via the action parameter, allowing remote attackers to inject arbitrary web script or HTML. According to the sources, the ...

4.3CVSS5.8AI score0.1704EPSS
Exploits1References4Affected Software1
seebug.org
seebug.org
added 2008/12/04 12:0 a.m.17 views

Linksys WRT160N apply.cgi文件跨站脚本漏洞

BUGTRAQ ID: 32496 WRT160N是Linksy最新推出的一款802.11n无线路由器。 Linksys WRT160N的apply.cgi文件没有正确地过滤对action参数所传送的输入便返回给了管理员,远程攻击者可以通过提交恶意请求导致在管理员的浏览器会话中执行任意HTML和脚本代码。 0 Linksys WRT160N Linksys ------- 目前厂商还没有提供补丁或者升级程序,我们建议使用此软件的用户随时关注厂商的主页以获取最新版本: a href=http://www.linksys.com...

6.9AI score
Exploits0
exploitpack
exploitpack
added 2008/11/27 12:0 a.m.21 views

Linksys WRT160N - apply.cgi Cross-Site Scripting

Linksys WRT160N - apply.cgi Cross-Site Scripting source: https://www.securityfocus.com/bid/32496/info Linksys WRT160N is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. Attackers may exploit this issue by enticing victims into...

6.8AI score
Exploits0
Exploit DB
Exploit DB
added 2008/11/27 12:0 a.m.33 views

Linksys WRT160N - 'apply.cgi' Cross-Site Scripting

source: https://www.securityfocus.com/bid/32496/info Linksys WRT160N is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. Attackers may exploit this issue by enticing victims into opening a malicious URI. An attacker may leverage...

7.4AI score
Exploits0
Rows per page
Query Builder