inet vulnerabilities and exploits

(subscribe to this query)

An issue exists on GL.iNet devices prior to 3.216. Through the software installation feature, it is possible to install arbitrary software, such as a reverse shell, because the restrictions on the available package list are limited to client-side verification. It is possible to i...

An issue exists on GL.iNet devices prior to 3.216. There is an arbitrary file write in which an empty file can be created anywhere on the filesystem. This is caused by a command injection vulnerability with a filter applied. Through the software installation feature, it is possib...

An issue exists on GL.iNet devices prior to 3.216. Through the software installation feature, it is possible to inject arbitrary parameters in a request to cause opkg to obtain a list of files in a specific directory, by using the regex feature in a package name.

An issue exists on GL.iNet devices prior to 3.216. The function guci2_get() found in libglutil.so has a buffer overflow when an item is requested from a UCI context, and the value is pasted into a char pointer to a buffer without checking the size of the buffer.

An issue exists on GL.iNet devices before version 4.5.0. There is an NGINX authentication bypass via Lua string pattern matching. This affects A1300 4.4.6, AX1800 4.4.6, AXT1800 4.4.6, MT3000 4.4.6, MT2500 4.4.6, MT6000 4.5.0, MT1300 4.3.7, MT300N-V2 4.3.7, AR750S 4.3.7, AR750 4....

1 Metasploit module

An issue exists on GL.iNet devices before version 4.5.0. They assign the same session ID after each user reboot, allowing malicious users to share session identifiers between different sessions and bypass authentication or access control measures. Attackers can impersonate legiti...

Shell Injection vulnerability GL.iNet A1300 v4.4.6, AX1800 v4.4.6, AXT1800 v4.4.6, MT3000 v4.4.6, MT2500 v4.4.6, MT6000 v4.5.0, MT1300 v4.3.7, MT300N-V2 v4.3.7, AR750S v4.3.7, AR750 v4.3.7, AR300M v4.3.7, and B1300 v4.3.7., allows local malicious users to execute arbitrary code v...

Gl-inet Gl-mt1300 Firmware 4.3.7 Gl-inet Gl-mt300n-v2 Firmware 4.3.7 Gl-inet Gl-ar750s Firmware 4.3.7 Gl-inet Gl-ar750 Firmware 4.3.7 Gl-inet Gl-ar300m Firmware 4.3.7 Gl-inet Gl-b1300 Firmware 4.3.7 Gl-inet Gl-mt6000 Firmware 4.5.0 Gl-inet Gl-a1300 Firmware 4.4.6 Gl-inet Gl-ax1800 Firmware 4.4.6 Gl-inet Gl-axt1800 Firmware 4.4.6 Gl-inet Gl-mt3000 Firmware 4.4.6 Gl-inet Gl-mt2500 Firmware 4.4.6

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook