Cross site request forgery (csrf)

ajax.cgi in the web interface on the Choice Wireless Green Packet WIXFMR-111 4G WiMax modem allows remote attackers to execute arbitrary commands via shell metacharacters in the pip parameter in an Ajax tagipPing request, a different vulnerability than CVE-2013-3581...

CVE-2013-4731

ajax.cgi in the web interface on the Choice Wireless Green Packet WIXFMR-111 4G WiMax modem allows remote attackers to execute arbitrary commands via shell metacharacters in the pip parameter in an Ajax tagipPing request, a different vulnerability than CVE-2013-3581...

CVE-2013-4731

CVE-2013-4731 affects the Choice Wireless Green Packet WIXFMR-111 4G WiMax modem. The vulnerability is in the web interface’s ajax.cgi. It allows remote attackers to execute arbitrary commands by injecting shell metacharacters in the pip parameter of an Ajax tag_ipPing request. This is a distinct...

CVE-2013-3581

The CVE-2013-3581 entry affects the web interface of the Choice Wireless Green Packet WIXFMR-111 4G WiMax modem. The vulnerability lies in ajax.cgi where remote attackers can obtain sensitive information via Ajax requests (wmxState or netState). The provided documents describe the affected compon...

General Talks Security at Brookings Institution

General Martin Dempsey, Chairman of the Joint Chiefs of Staff, made clear yesterday in a speech to the Brookings Institution that the military, government, and private sector each has a role to play in hardening the U.S. against cyberattacks. General Dempsey also called out the maintainers of...

The Broadcom LAN chip BCM4325 AND BCM4329 denial of service vulnerability-vulnerability warning-the black bar safety net

This vulnerability is the Broadcom Wireless card firmware, the model for the BCM4325 and the BCM4329, the attacker can send specific wireless network packets causing a denial of service attack. A major influence on the equipment: BCM4325 Apple iPhone 3GS Apple iPod 2G HTC Touch Pro 2 HTC Droid...

Design/Logic Flaw

The Samsung and HTC onTouchEvent method implementation for Android on the T-Mobile myTouch 3G Slide, HTC Merge, Sprint EVO Shift 4G, HTC ChaCha, AT&T Status, HTC Desire Z, T-Mobile G2, T-Mobile myTouch 4G Slide, and Samsung Galaxy S stores touch coordinates in the dmesg buffer, which allows remot...

CVE-2012-2924

PHP remote file inclusion vulnerability in admin/setup.inc.php in Hypermethod eLearning Server 4G allows remote attackers to execute arbitrary PHP code via a URL in the path parameter...

CVE-2012-2923

SQL injection vulnerability in news.php4 in Hypermethod eLearning Server 4G allows remote attackers to execute arbitrary SQL commands via the nid parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in admin/setup.inc.php in Hypermethod eLearning Server 4G allows remote attackers to execute arbitrary PHP code via a URL in the path parameter...

Sql injection

SQL injection vulnerability in news.php4 in Hypermethod eLearning Server 4G allows remote attackers to execute arbitrary SQL commands via the nid parameter...

CVE-2012-2923

The provided data confirms CVE-2012-2923 as a SQL injection in Hypermethod eLearning Server 4G, specifically in news.php4 via the nid parameter. Exploitation could allow remote attackers to execute arbitrary SQL commands, impacting data confidentiality and integrity; the base CVSS score is 7.5 (H...

CVE-2012-2924

CVE-2012-2924 affects Hypermethod eLearning Server 4G. Vulnerability: PHP remote file inclusion in admin/setup.inc.php allows an attacker to supply a URL in the path parameter to execute arbitrary PHP code on the server. Affected software/component: Hypermethod eLearning Server 4G (admin/setup.in...

eLearning Server 4G Remote File Inclusion / SQL Injection

Exploit Title: eLearning Server Multiple Remote Vulnerabilities Google Dork: intitle:"eLearning Server" Date: 10.05.2012 Author: Eugene Salov, Andrey Komarov Group-IB, http://group-ib.ru Software Link: http://www.hypermethod.ru/ Version: 4G Tested on: Microsoft Windows news.php4 "nid" SQL...

eLearning server 4g - Multiple Vulnerabilities

eLearning server 4g - Multiple Vulnerabilities Exploit Title: eLearning Server Multiple Remote Vulnerabilities Google Dork: intitle:"eLearning Server" Date: 10.05.2012 Author: Eugene Salov, Andrey Komarov Group-IB, http://group-ib.ru Software Link: http://www.hypermethod.ru/ Version: 4G Tested on...

eLearning Server 4G Multiple Remote Vulnerabilities

Exploit for php platform in category web applications Exploit Title: eLearning Server Multiple Remote Vulnerabilities Google Dork: intitle:"eLearning Server" Date: 10.05.2012 Author: Eugene Salov, Andrey Komarov Group-IB, http://group-ib.ru Software Link: http://www.hypermethod.ru/ Version: 4G...

Code injection

The HTC IQRD service for Android on the HTC EVO 4G before 4.67.651.3, EVO Design 4G before 2.12.651.5, Shift 4G before 2.77.651.3, EVO 3D before 2.17.651.5, EVO View 4G before 2.23.651.1, Vivid before 3.26.502.56, and Hero does not restrict localhost access to TCP port 2479, which allows remote...

Attacking 3G and 4G Mobile Tele-Communications Networks

Document Title: =============== Attacking 3G and 4G Mobile Tele-Communications Networks References: =========== Document: http://www.vulnerability-lab.com/resources/documents/320.pdf Speaker: http://conference.hitb.org/hitbsecconf2011kul/?pageid=1782 Original Mirror:...

Attacking 3G and 4G Mobile Tele-Communications Networks

Document Title: =============== Attacking 3G and 4G Mobile Tele-Communications Networks References: =========== Document: https://www.vulnerability-lab.com/resources/documents/320.pdf Speaker: https://conference.hitb.org/hitbsecconf2011kul/?pageid=1782 Original Mirror:...

Atrix 4G Hacked Before You Can Even Buy It !

Following in the steps of the HTC Evo before it, the Motorola Atrix 4G has been hacked to give root privileges before the phone is even available to buy. In more evidence that Android hackers are frequently out-pacing the creators of the phones themselves, the third post in the xda-developers...