Verizon Fios Router MI424WR-GEN3I CSRF

Exploit Title: Verizon Fios Router CSRF Admin Shell Date: Discovered and reported January 2013 Author: Jacob Holcomb/Gimppy - Security Analyst @ Independent Security Evaluators Software: Verizon FIOS Router - Firmware 40.19.36 http://verizon.com CVE: CVE-2013-0126 Advisory/Video:...

Verizon Fios Router MI424WR-GEN3I - Cross-Site Request Forgery

Exploit Title: Verizon Fios Router CSRF Admin Shell Date: Discovered and reported January 2013 Author: Jacob Holcomb/Gimppy - Security Analyst @ Independent Security Evaluators Software: Verizon FIOS Router - Firmware 40.19.36 http://verizon.com CVE: CVE-2013-0126 Advisory/Video:...

Verizon Fios Actiontec model MI424WR-GEN3I router vulnerable to cross-site request forgery

Overview The Verizon FIOS Actiontec router model MI424WR-GEN3I is susceptible to cross-site request forgery attacks. CWE-352 Description The Verizon FIOS Actiontec router model MI424WR-GEN3I is susceptible to cross-site request forgery attacks. CWE-352 A remote attacker that is able to trick a us...

CentOS 5 : squirrelmail (CESA-2013:0126)

An updated squirrelmail package that fixes one security issue and several bugs is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

[security bulletin] HPSBUX02755 SSRT100667 rev.1 - HP-UX WBEM, Remote Unauthorized Access to Diagnostic Data

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03221589 Version: 1 HPSBUX02755 SSRT100667 rev.1 - HP-UX WBEM, Remote Unauthorized Access to Diagnostic Data NOTICE: The information in this Security Bulletin should be acted upon as soon as...

Design/Logic Flaw

Unspecified vulnerability in the WBEM implementation in HP HP-UX 11.31 allows local users to obtain access to diagnostic information via unknown vectors, a related issue to CVE-2012-0126...

CVE-2012-0125

Unspecified vulnerability in the WBEM implementation in HP HP-UX 11.31 allows local users to obtain access to diagnostic information via unknown vectors, a related issue to CVE-2012-0126...

CVE-2012-0126

HP-UX WBEM vulnerability (CVE-2012-0126) affects WBEM components on HP-UX 11.11 and 11.23, allowing remote unauthorized access to diagnostic data. Root cause same as CVE-2012-0125, but remote access is possible on the earlier releases; 11.31 is also listed with local access in some configs. The H...

glibc, nscd security update

CentOS Errata and Security Advisory CESA-2012:0126 Updated glibc packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base...

RHEL 5 : glibc (RHSA-2012:0126)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0126 advisory. The glibc packages contain the standard C libraries used by multiple programs on the system. These packages contain the standard C and the...

Apple Safari Multiple Vulnerabilities (Mar 2011) - Mac OS X

Apple Safari web browser is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari";...

Safari < 5.0.4 Multiple Vulnerabilities

The version of Safari installed on the remote Windows host is earlier than 5.0.4. It therefore is potentially affected by several issues in the following components : - ImageIO - libxml - WebKit C Tenable Network Security, Inc. include"compat.inc"; if description scriptid52613; scriptversion"1.18...

CVE-2011-0126

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in...

CVE-2011-0126

CVE-2011-0126 , as described in the initial document, affects WebKit as used by Apple iTunes prior to version 10.2 on Windows. The vulnerability enables man-in-the-middle attackers to cause memory corruption or execute arbitrary code, or to cause a denial of service, via vectors related to iTunes...

Apple iTunes < 10.2 Multiple Vulnerabilities (credentialed check)

The version of Apple iTunes installed on the remote Windows host is older than 10.2. As such, it is affected by numerous issues in the following components : - ImageIO - libxml - WebKit C Tenable Network Security, Inc. include"compat.inc"; if description scriptid52534; scriptversion"1.21";...

CVE-2010-0126

CVE-2010-0126 affects Autonomy KeyView 10.4 and 10.9. The vulnerability is a heap-based buffer overflow in a KeyView component/library used by multiple products (e.g., IBM, Symantec) that processes compound documents. An attacker could trigger code execution by supplying a specially crafted compo...

Secunia Research: Autonomy KeyView Compound File Parsing Buffer Overflow

====================================================================== Secunia Research 28/07/2010 - Autonomy KeyView Compound File Parsing Buffer Overflow - ====================================================================== Table of Contents Affected...

CentOS 5 : kvm (CESA-2010:0126)

Updated kvm packages that fix two security issues and two bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. KVM Kernel-based Virtual Machine is a full virtualization solution for Linux on...

openSUSE Security Update : boinc-client (boinc-client-437)

The boinc-client was missing return value checks for openssl function calls. CVE-2009-0126 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update boinc-client-437. The text description of this plugin...

Fedora Core 10 FEDORA-2009-0587 (boinc-client)

The remote host is missing an update to boinc-client announced via advisory FEDORA-2009-0587. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C ...