D-Link DIR-505 HNAP Request Remote Buffer Overflow Exploit

Stack-based buffer overflow in the dohnap function in www/mycgi.cgi in D-Link DSP-W215 Rev. A1 with firmware 1.01b06 and earlier, DIR-505 with firmware before 1.08b10, and DIR-505L with firmware 1.01 and earlier allows remote attackers to execute arbitrary code via a long Content-Length header in...

D-Link HNAP Request Remote Buffer Overflow

This module exploits an anonymous remote code execution vulnerability on different D-Link devices. The vulnerability is due to a stack based buffer overflow while handling malicious HTTP POST requests addressed to the HNAP handler. This module has been successfully tested on D-Link DIR-505 in an...

D-Link HNAP Request Remote Buffer Overflow

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'D-Link HNAP Request Remote Buffer Overflow', 'Description' = %q This module exploits an anonymous remote code execution vulnerability...

Nokia N97 m3u Playlist Crash PoC

No description provided by source. !/usr/bin/perl Title : Nokia N97 PlayList M3U Crash PoC Author : KedAns-Dz E-mail : [email protected] Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans platform : hardware Impact : Crashs & Reboot Some Times Rebooted Tested on...

CVE-2014-3936

Stack-based buffer overflow in the dohnap function in www/mycgi.cgi in D-Link DSP-W215 Rev. A1 with firmware 1.01b06 and earlier, DIR-505 with firmware before 1.08b10, and DIR-505L with firmware 1.01 and earlier allows remote attackers to execute arbitrary code via a long Content-Length header in...

Stack overflow

Stack-based buffer overflow in the dohnap function in www/mycgi.cgi in D-Link DSP-W215 Rev. A1 with firmware 1.01b06 and earlier, DIR-505 with firmware before 1.08b10, and DIR-505L with firmware 1.01 and earlier allows remote attackers to execute arbitrary code via a long Content-Length header in...

CVE-2014-3936

CVE-2014-3936 affects D-Link DSP-W215 (Rev. A1) 1.01b06 and earlier, DIR-505 firmware prior to 1.08b10, and DIR-505L prior to 1.01. The flaw is a stack-based buffer overflow in the do_hnap function (www/my_cgi.cgi) triggered by a long Content-Length header in a GetDeviceSettings HNAP request, all...

Multiple vulnerabilities on D-Link Dir-505 devices

Multiple vulnerabilities on D-Link Dir-505 devices ================================================== ADVISORY INFORMATION Title: Multiple vulnerabilities on D-Link Dir-505 devices Discovery date: 05/04/2013 Release date: 09/09/2013 Credits: Alessandro Di Pinto alessandro.dipinto artificialstudio...

D-Link DIR-505 Bypass / Privilege Escalation/ Traversal / Code Injection

Multiple vulnerabilities on D-Link Dir-505 devices ================================================== ADVISORY INFORMATION Title: Multiple vulnerabilities on D-Link Dir-505 devices Discovery date: 05/04/2013 Release date: 09/09/2013 Credits: Alessandro Di Pinto alessandro.dipinto artificialstudio...

D-Link DIR-505 1.06 - Multiple Vulnerabilities

D-Link DIR-505 1.06 - Multiple Vulnerabilities Multiple vulnerabilities on D-Link Dir-505 devices ================================================== ADVISORY INFORMATION Title: Multiple vulnerabilities on D-Link Dir-505 devices Discovery date: 05/04/2013 Release date: 09/09/2013 Credits: Alessand...

D-Link Dir-505 devices Multiple Vulnerabilities

D-Link DIR-505 devices suffer from privilege escalation issues due to hard-coded credentials, path traversal, command injection, weak encryption, and authentication bypass vulnerabilities. Firmware versions 1.06 and below are affected. Multiple vulnerabilities on D-Link Dir-505 devices...

Nokia N97 Playlist Proof Of Concept

!/usr/bin/perl Title : Nokia N97 PlayList M3U Crash PoC Author : KedAns-Dz E-mail : [email protected] Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans platform : hardware Impact : Crashs & Reboot Some Times Rebooted Tested on : Nokia N97 v 22.0.110 Type RM-505...

Nokia N97 - '.m3u' Playlist Crash (PoC)

!/usr/bin/perl Title : Nokia N97 PlayList M3U Crash PoC Author : KedAns-Dz E-mail : [email protected] Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans platform : hardware Impact : Crashs & Reboot Some Times Rebooted Tested on : Nokia N97 v 22.0.110 Type RM-505...

openSUSE Security Update : sblim-sfcb (sblim-sfcb-505)

A tmp file race condition in the genSslCerts.sh helper script could be used by local attackers to gain root privileges. CVE-2009-0416 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

Ubuntu Update for vim vulnerability USN-505-1

Ubuntu Update for Linux kernel vulnerabilities USN-505-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5051.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for vim vulnerability USN-505-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.n...

Ubuntu: Security Advisory (USN-505-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 505-1 (cvs)

The remote host is missing an update to cvs announced via advisory DSA 505-1. OpenVAS Vulnerability Test $Id: deb5051.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 505-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 505-1 (cvs)

The remote host is missing an update to cvs announced via advisory DSA 505-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 6.06 LTS / 6.10 / 7.04 : vim vulnerability (USN-505-1)

Ulf Harnhammar discovered that vim does not properly sanitise the 'helptagsone' function when running the 'helptags' command. By tricking a user into running a crafted help file, a remote attacker could execute arbitrary code with the user's privileges. Note that Tenable Network Security has...

RHEL 4 : tcpdump (RHSA-2005:505)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:505 advisory. Tcpdump is a command line tool for monitoring network traffic. A denial of service bug was found in tcpdump during the processing of certain network...