NETGEAR JNR1010 devices before 1.0.0.32 hacks

Overview :

NETGEAR JNR1010 devices flaws

Affected Product(s) :

Netgear Router JNR1010 Version 1.0.0.24

Vulnerability Details :

CVE ID :	CVE-2016-11014
	This flaw may allow a successful attacker to do anything gaining the privilege of the router being in LAN/WAN.
CVE ID :	CVE-2016-11015
	Using this flaw, an attacker can cause victims to change any data the victim is allowed to change or perform any function the victim is authorized to use.
CVE ID :	CVE-2016-11016
	Created a forged request changing the value of any variable, here it is :InternetGatewayDevice.X_TWSZ-COM_URL_Filter.BlackList.1.URL variable in the URL http://router-ip/cgi-bin/webproc and sent it to victim forcing him/her to click on the malicious link

Solution :
https://www.owasp.org/index.php/Cross-site_Scripting_(XSS)

Contact us to get started

CVE-2023-2845 : CLOUDEXPLORER-LITE UP TO 1.0.X ACCESS CONTROL

Description Improper Access Control in GitHub repository cloudexplorer-dev/cloudexplorer-lite prior to v1.1.0. References https://huntr.dev/bounties/ac10e81c-998e-4425-9d74-b985d9b0254c https://github.com/cloudexplorer-dev/cloudexplorer-lite/commit/d9f55a44e579d312977b02317b2020de758b763a For More Information MITRE

Learn more

CVE-2023-32336 : IBM INFOSPHERE INFORMATION SERVER 11.7 RMI SERVICE DESERIALIZATION

Description IBM InfoSphere Information Server 11.7 is affected by a remote code execution vulnerability due to insecure deserialization in an

Learn more

CVE-2023-32306 : TIME TRACKER UP TO 1.22.13.5791 REPORTS.PHP SQL INJECTION

Description Rockwell Automation was made aware that Kinetix 5500 drives, manufactured between May 2022 and January 2023, and are running

Learn more