Jacob Holcomb

Name of the Vulnerable Software and Affected Versions: D-Link DIR865L version 1.03 Description: The issue is related to an "Unauthenticated Hardware Linking" problem. Recommendations: For D-Link DIR865L version 1.03, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Belkin N300 (F7D7301v1) router Description: The issue allows remote attackers to bypass authentication using "Javascript debugging." Recommendations: For Belkin N300 (F7D7301v1) router, consider disabling Javascript debugging as a temporary workaround until a patch is available.

Name of the Vulnerable Software and Affected Versions: Linksys WRT310Nv2 version 2.0.0.1 Description: The issue is related to a Cross-Site Scripting (XSS) problem. Recommendations: For Linksys WRT310Nv2 version 2.0.0.1, at the moment, there is no information about a newer version that contains a fix for this issue.

The issue is related to a Local Overflow in the Static HTTP Server. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.

An authentication bypass issue exists in the web management interface.

The issue concerns an Authentication Bypass in the Belkin N900 router, specifically utilizing "Javascript debugging".

A Symlink Traversal issue exists.

An Information Disclosure issue exists in the management web interface, which discloses the Pre-Shared Key (PSK) of the wireless LAN.

An Authentication Bypass issue exists, allowing any user to access the web administration portal without a password by visiting a specific URL. The affected URL is http://<router ip>/apply.cgi?/hdd usr setup.htm.

The issue concerns multiple CSRF vulnerabilities.

The issue is a stack-based buffer overflow that allows remote authenticated users to execute arbitrary code. This is achieved by sending a long string in a PUT command.

The issue affects the D-Link DIR865L router, allowing remote attackers to hijack the authentication of administrators. This can be achieved through multiple cross-site request forgery (CSRF) vulnerabilities. The exploitation can lead to changing the administrator password, enabling remote management via a request to "hedwig.cgi", or activating configuration changes via a request to "pigwidgeon.cgi".

The issue concerns multiple cross-site request forgery (CSRF) vulnerabilities in the index.cgi file of the affected router. These vulnerabilities allow remote attackers to hijack the authentication of administrators for specific requests. The requests in question include adding administrative accounts via the `username` and `user level` parameters, as well as enabling remote administration through the `is telnet primary` and `is telnet secondary` parameters.

The issue concerns multiple cross-site request forgery (CSRF) vulnerabilities in the editAccount.html file within the JAMF Software Server (JSS) interface. These vulnerabilities allow remote attackers to hijack the authentication of administrators, enabling them to perform unauthorized actions such as creating user accounts or changing passwords via a Save action.

A cross-site scripting (XSS) issue exists in the WebAdmin Portal, specifically in tools/local lookup.php, allowing remote attackers to inject arbitrary web script or HTML via the `group` parameter in a lookup action.

A cross-site request forgery (CSRF) issue exists in the accountmgr/adminupdate.php file of the WebAdmin Portal. This allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts via an add action.