69 matches found
Xfinity Gateway - Remote Code Execution
Exploit Title: Xfinity Gateway: Remote Code Execution Date: 12/2/2016 Exploit Author: Gregory Smiley Contact: [email protected] Vendor Homepage: http://xfinity.com Platform: php The page located at /networkdiagnostictools.php has a feature called test connectivity, which is carried out through ...
Xfinity Gateway Cross Site Request Forgery
EXPLOIT TITLE: CSRF RCE XFINITY WEB GATEWAY AUTHOR: Pabstersac DATE: 1ST OF AUGUST 2016 CVE: N/A CATEGORY: REMOTE CONTACT: [email protected] IF ANYONE HAS COMMUNICATION WITH VENDOR PLEASE NOTIFY THEM SINCE THEY HAVE IGNORED ME. CSRF FOR COMCAST XFINITY WEB GATEWAY. LEADS TO RCE AND ACCESS TO T...
Xfinity Gateway - Cross-Site Request Forgery Vulnerability
Exploit for hardware platform in category web applications EXPLOIT TITLE: CSRF RCE XFINITY WEB GATEWAY AUTHOR: Pabstersac DATE: 1ST OF AUGUST 2016 CVE: N/A CATEGORY: REMOTE CONTACT: email protected IF ANYONE HAS COMMUNICATION WITH VENDOR PLEASE NOTIFY THEM SINCE THEY HAVE IGNORED ME. CSRF FOR...
Xfinity Gateway - Cross-Site Request Forgery
Xfinity Gateway - Cross-Site Request Forgery EXPLOIT TITLE: CSRF RCE XFINITY WEB GATEWAY AUTHOR: Pabstersac DATE: 1ST OF AUGUST 2016 CVE: N/A CATEGORY: REMOTE CONTACT: [email protected] IF ANYONE HAS COMMUNICATION WITH VENDOR PLEASE NOTIFY THEM SINCE THEY HAVE IGNORED ME. CSRF FOR COMCAST...
Xfinity Gateway - Cross-Site Request Forgery
EXPLOIT TITLE: CSRF RCE XFINITY WEB GATEWAY AUTHOR: Pabstersac DATE: 1ST OF AUGUST 2016 CVE: N/A CATEGORY: REMOTE CONTACT: [email protected] IF ANYONE HAS COMMUNICATION WITH VENDOR PLEASE NOTIFY THEM SINCE THEY HAVE IGNORED ME. CSRF FOR COMCAST XFINITY WEB GATEWAY. LEADS TO RCE AND ACCESS TO T...
hotspots.wifi.xfinity.com XSS vulnerability
Vulnerable URL: http://hotspots.wifi.xfinity.com/mobile/?txtQuick=A=1=mobile%27,true;alert'OPENBUGBOUNTY';// Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 11:57 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...
Xfinity Gateway (Technicolor DPC3941T) - Cross-Site Request Forgery
Exploit Title: CSRF XFINITY Gateway product Technicolorpreviously Cisco DPC3941T Date: 09/08/2016 Exploit Author: Ayushman Dutta Version: dpc3941-P20-18-v303r20421733-160413a-CMCST CVE : CVE-2016-7454 The Device DPC3941T is vulnerable to CSRF and has no security on the entire admin panel for it...
Xfinity Gateway (Technicolor DPC3941T) - Cross-Site Request Forgery
Xfinity Gateway Technicolor DPC3941T - Cross-Site Request Forgery Exploit Title: CSRF XFINITY Gateway product Technicolorpreviously Cisco DPC3941T Date: 09/08/2016 Exploit Author: Ayushman Dutta Version: dpc3941-P20-18-v303r20421733-160413a-CMCST CVE : CVE-2016-7454 The Device DPC3941T is...
hotspots.wifi.xfinity.com XSS vulnerability
Vulnerable URL:...
Comcast XFINITY Home Security System Security Bypass Vulnerability
The Comcast XFINITY Home Security System is a complete home security system. The Comcast XFINITY Home Security System failed to properly maintain base station communications, allowing an attacker to disrupt sensor functionality by jamming ZigBee 2.4 GHz communications...
CVE-2016-2398
Comcast XFINITY Home Security System does not properly maintain base-station communication, which allows physically proximate attackers to defeat sensor functionality by interfering with ZigBee 2.4 GHz transmissions...
Design/Logic Flaw
Comcast XFINITY Home Security System does not properly maintain base-station communication, which allows physically proximate attackers to defeat sensor functionality by interfering with ZigBee 2.4 GHz transmissions...
CVE-2016-2398
Comcast XFINITY Home Security System does not properly maintain base-station communication, which allows physically proximate attackers to defeat sensor functionality by interfering with ZigBee 2.4 GHz transmissions...
CVE-2016-2398
CVE-2016-2398 affects the Comcast XFINITY Home Security System. The vulnerability arises from improper maintenance of base-station communication, allowing physically proximate attackers to defeat sensor functionality by interfering with ZigBee 2.4 GHz transmissions. The linked records confirm the...
CVE-2016-2398: Undefined Security Weakness
Comcast XFINITY Home Security System does not properly maintain base-station communication, which allows physically proximate attackers to defeat sensor functionality by interfering with ZigBee 2.4 GHz transmissions...
Comcast XFINITY Home Security Denial of Service Vulnerability
Comcast XFINITY Home Security is a complete home security system. The system provides online access to security monitoring and more. A denial of service vulnerability exists in Comcast XFINITY Home Security, which allows remote attackers to submit a special request for denial of service...
Comcast Xfinity home security system is exposed to serious vulnerabilities-vulnerability warning-the black bar safety net
Recently, researchers found that Comcast Xfinity home security system a security vulnerability exists, an attacker can not trigger the alarm of the premise into the user homes. Comcast（Comcast is the largest U.S. cable TV company, but also broadband Internet and IP telephony service provider...
Comcast XFINITY Home Security fails to properly handle wireless communications disruption
Overview Comcast XFINITY Home Security does not fail securely, which may be leveraged to avoid triggering alarm events. Description CWE-636: Not Failing Securely 'Failing Open'Comcast XFINITY Home Security system components use the ZigBee communication protocol over a 2.4 GHz radio frequency band...