The vulnerability of the D-Link DSR-500 router’s microprogramming software allows a malicious individual to gain administrator privileges.

The D-Link DSR-500 router has a pre-installed user with administrator privileges...

The vulnerability of the microprogrammed software of the D–Link DSR–500 router allows a malicious individual to gain access to user account information.

In the file system of the D–Link DSR–500 router, user passwords are stored publicly in the file /tmp/teamf1.cfg.ascii...

The vulnerability of the microprogrammed software of the D–Link DSR–500 router allows a malicious individual to execute arbitrary system commands.

The web interface of the router allows for the execution of a limited number of system commands ping, traceroute, dnslookup. However, it is possible to execute any command that is separated by a system separator from the allowed commands...

The vulnerability of the microprogrammed software of the D–Link DSR–500 router allows a malicious individual to gain administrator privileges.

The script “/scgi-bin/platform.cgi” of the D–Link DSR–500 router’s software does not properly filter the data entered by the user in the “Password” field. As a result, a malicious individual can bypass the authentication process and gain access to the device with administrator privileges...

The vulnerability of the microprogrammed software of the D–Link DSR–500 router allows a malicious individual to intercept network traffic.

The D-Link DSR-500 router’s microprogramming software does not perform ARP packet authentication for packets transmitted over the IPv4 protocol. This allows for intercepting the traffic processed by this router through ARP spoofing attacks...

dmagazine.com XSS vulnerability

Vulnerable URL: http://www.dmagazine.com/Errors/500.asp?aspxerrorpath=" Details: Description| Value ---|--- Patched:| Yes, at 15.07.2016 Latest check for patch:| 15.07.2016 23:47 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 45120 VIP website status:| Yes Chec...

Non-ISAKMP Traffic Over Port 500/UDP

Binary data 7212.pasl...

New Relic: JIRA account misconfig causes internal info leak

This issue was originally reported via email [email protected] Hello, In preparation for security conference I'm doing a research of popular task tracking systems / project management software and how they affect company's IT security. During investigation I've found several critical...

Rummy 500 - Dangerous filesystem permissions, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Rummy 500 published at the 'play' market has multiple vulnerabilities...

CVE-2016-1334

Cisco Small Business 500 Wireless Access Point devices with firmware 1.0.4.4 allow remote attackers to set the system time via a crafted POST request, aka Bug ID CSCuy01457...

Cisco Small Business 500 Series Wireless Access Point Configuration Modification Vulnerability

A vulnerability in the web interface that is used to update the system time on Cisco Small Business 500 Series Wireless Access Point devices could allow an unauthenticated, remote attacker to impact the integrity of a system. The vulnerability is due to insufficient validation of user-controlled...

Cisco Small Business 500 Device Web GUI Denial of Service Vulnerability

The Cisco Small Business 500 Device is a 500 series stackable managed switch product from Cisco. A security vulnerability in the Web GUI of the Cisco Small Business 500 Device allows a remote attacker to perform a denial of service by sending a specially crafted HTTP request...

CVE-2016-1303

The web GUI on Cisco Small Business 500 devices 1.2.0.92 allows remote attackers to cause a denial of service via a crafted HTTP request, aka Bug ID CSCul65330...

CVE-2016-1303

The web GUI on Cisco Small Business 500 devices 1.2.0.92 allows remote attackers to cause a denial of service via a crafted HTTP request, aka Bug ID CSCul65330...

Design/Logic Flaw

The web GUI on Cisco Small Business 500 devices 1.2.0.92 allows remote attackers to cause a denial of service via a crafted HTTP request, aka Bug ID CSCul65330...

CVE-2016-1303

The CVE-2016-1303 entry concerns the Cisco Small Business 500 Series devices, where the web GUI on version 1.2.0.92 can be remotely abused to cause a denial of service by sending a crafted HTTP request (Bug ID CSCul65330). Affected products are Cisco Small Business 500 devices with a web-based GU...

Denial of Service

Overview Versions of hapi prior to 11.1.3 are affected by a denial of service vulnerability. The vulnerability is triggered when certain input is passed into the If-Modified-Since or Last-Modified headers. This causes an 'illegal access' exception to be raised, and instead of sending a HTTP 500...

tools.cisco.com Cross Site Scripting

Exploit Title: Cisco.com sub-domain Reflected XSS RXSS Date: 31/10/2015 Author: Yann CAM @ Synetis - ASafety Vendor or Software Link: www.cisco.com Version: / Category: Reflected Cross Site Scripting Google dork: Tested on: cisco.com sub-domains Cisco description :...

无需登录sql注入泛微集团分权管理（e-cology）（某世界500强企业&demo复现）

简要描述： 危害较大，还请官方及时修复并更新到各个用户。 详细说明： 1.先以其众多大客户中的世界500强企业“绿地集团”作为通用性演示： http://.../login/Login.jsp?logintype=1 注入点就在登陆框，注入参数是:loginid 下面是详情： GET...

'Hacking Team' Gets Hacked! 500GB of Data Dumped Over the Internet

Yes, sometimes even the Hackers get Hacked. Hacking Team, one of the most controversial spyware and malware providers to governments and law enforcement agencies all around the world, allegedly been hacked, with some 500 gigabytes of internal data leaked over the Internet. The leaked data indicat...