NETGEAR JNR1010 devices before 1.0.0.32 hacks

Overview :

NETGEAR JNR1010 devices flaws

Affected Product(s) :

Netgear Router JNR1010 Version 1.0.0.24

Vulnerability Details :

CVE ID :	CVE-2016-11014
	This flaw may allow a successful attacker to do anything gaining the privilege of the router being in LAN/WAN.
CVE ID :	CVE-2016-11015
	Using this flaw, an attacker can cause victims to change any data the victim is allowed to change or perform any function the victim is authorized to use.
CVE ID :	CVE-2016-11016
	Created a forged request changing the value of any variable, here it is :InternetGatewayDevice.X_TWSZ-COM_URL_Filter.BlackList.1.URL variable in the URL http://router-ip/cgi-bin/webproc and sent it to victim forcing him/her to click on the malicious link

Solution :
https://www.owasp.org/index.php/Cross-site_Scripting_(XSS)

Contact us to get started

CVE-2024-12867 : ARCTIC SECURITY ARCTIC HUB UP TO 5.5.1872 CONFIGURATION SERVER-SIDE REQUEST FORGERY

Description Server-Side Request Forgery in URL Mapper in Arctic Security’s Arctic Hub versions 3.0.1764-5.6.1877 allows an unauthenticated remote attacker to

Learn more

CVE-2024-12840 : RED HAT SATELLITE HTTP PROXY SERVER-SIDE REQUEST FORGERY

Description A server-side request forgery exists in Satellite. When a PUT HTTP request is made to /http_proxies/test_connection, when supplied with

Learn more

CVE-2024-51466 : IBM COGNOS ANALYTICS UP TO 11.2.4 FP4/12.0.4 EL EXPRESSION LANGUAGE INJECTION

Description IBM Cognos Analytics 11.2.0 through 11.2.4 FP4 and 12.0.0 through 12.0.4 is vulnerable to an Expression Language (EL) Injection

Learn more