Verizon Fios Actiontec model MI424WR-GEN3I router vulnerable to cross-site request forgery

Overview The Verizon FIOS Actiontec router model MI424WR-GEN3I is susceptible to cross-site request forgery attacks. CWE-352 Description The Verizon FIOS Actiontec router model MI424WR-GEN3I is susceptible to cross-site request forgery attacks. CWE-352 A remote attacker that is able to trick a us...

DefenseCode Security Advisory: Cisco Linksys Remote Preauth 0day Root Exploit Follow-Up

A few weeks ago, we have announced remote preauth root access exploit for Cisco Linksys http://www.youtube.com/watch?v=cv-MbL7KFKE. Vulnerability details were disclosed here: http://www.defensecode.com/public/DefenseCodeBroadcomSecurityAdvisory.pdf During further research, we have discovered that...

Actiontec MI424WR默认WEP KEY安全绕过漏洞

BUGTRAQ ID: 32271 CNCAN ID：CNCAN-2008111301 Actiontec MI424WR是一款SOHO路由器设备。 Actiontec MI424WR存在默认的WEP加密密钥，攻击者可以轻易的解密无线网络通信，获得敏感信息。并对网络进行进一步攻击。 Actiontec MI424WR 目前没有解决方案提供： http://www.actiontec.com/products/product.php?pid=41...