Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

CVE #8

Open
wants to merge 2 commits into
base: master
Choose a base branch
from
Open

CVE #8

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
ddfc9bb
Create CVE-2019-3420.md
Zelakolase Aug 18, 2019
9c99e38
Update README.md
Zelakolase Aug 18, 2019
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 5 additions & 0 deletions CVE-2019-3420.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,5 @@
# CVE-2019-3420
* Report: 18 AUGUST,2019
* Credit: Morad Abdelrasheed Mokhtar
# PoC
https://github.com/qarqoush/Zata-Router-Takeover
6 changes: 5 additions & 1 deletion README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -750,7 +750,7 @@ If you enjoy this awesome list and would like to support it, check out my [Patre
- [CVE-2019-9213](#cve-2019-9213)
- [CVE-2019-10038](#cve-2019-10038)
- [CVE-2019-11358](#cve-2019-11358)

- [CVE-2019-3420](#cve-2019-3420)
## Resource

### [CVE-2011-2856](https://github.com/Metnew/uxss-db/tree/master/chrome/CVE-2011-2856)
Expand Down Expand Up @@ -3677,6 +3677,10 @@ If you enjoy this awesome list and would like to support it, check out my [Patre

- jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.

### [CVE-2019-3420]

- No Authorization required for ZTE ZXHN H108N V2.5 in wizard_wlan_t.gch, which allows the hacker to control Wi-Fi Settings.

## Code of Conduct

Please note that this project is released with a [Contributor Code of Conduct](code-of-conduct.md). By participating in this project you agree to abide by its terms.
Expand Down