Hacker made calls worth £10,000 from public phone

Hacker made calls worth £10,000 from public phone Computer expert Dariusz Ganski, of Sunny Bank, Kingswood, used a router to tap into BT phone boxes and made hours of calls to expensive numbers. He make calls worth £10,000 of premium-line bills and he has been jailed for 18 months. Prosecutor Dav...

BackTrack 5 R2 Released, New Kernel, New Tools

BackTrack 5 R2 Released, New Kernel, New Tools Hacker are your Ready ? Backtrack 5 R2 finally released with bug fixes, upgrades, and the addition of 42 new tools. With the best custom-built 3.2.6 kernel, the best wireless support available at maximum speed. This release have included Metasploit...

RHEL 5 : kernel (RHSA-2011:0833)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0833 advisory. - kernel: proc: protect mm startcode/endcode in /proc/pid/stat CVE-2011-0726 - kernel: bt scoconninfo infoleak CVE-2011-1078 - kernel: bnep...

N`CMS 1.1E Pre-Auth Local File Inclusion Remote Code Exploit

Exploit for php platform in category web applications !/usr/bin/python INFORMATION Exploit Title: NCMS 1.1E Pre-Auth Local File Inclusion Remote Code Exploit Date: 11/3/2011 Software link: http://bit.ly/eJAyw5 Tested on: Linux bt Version: 1.1E PHP.ini Settings: gpcmagicquotes = Off Note: The web...

D-Tendencia Bt 2008 SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================== D-Tendencia Bt 2008 SQL Injection Vulnerability =============================================== / Software Information + Vendor : http://www.autoabc.hu/ + script : D-Tendencia Bt 2008 +...

D-Tendencia Bt 2008 - SQL Injection

ALGERIAN HACKER - NORTH-AFRICA SECURITY TEAM - ! D-Tendencia Bt 2008 SQL Injection Vulnerability ! Author : Dr.0rYX and Cr3w-DZ ! MAIL : [email protected] & [email protected] / Software Information + Vendor : http://www.autoabc.hu/ + script : D-Tendencia Bt 2008 + Download : http://www.autoabc.hu/ sel...

D-Tendencia Bt 2008 - SQL Injection

D-Tendencia Bt 2008 - SQL Injection ALGERIAN HACKER - NORTH-AFRICA SECURITY TEAM - ! D-Tendencia Bt 2008 SQL Injection Vulnerability ! Author : Dr.0rYX and Cr3w-DZ ! MAIL : [email protected] & [email protected] / Software Information + Vendor : http://www.autoabc.hu/ + script : D-Tendencia Bt 2008 +...

BT Home Hub管理员口令泄露漏洞

BUGTRAQ ID: 29387 BT Home Hub是家用的无线Internet路由器。 BT Home Hub的最新固件版本添加了一个新的安全功能，允许将默认的管理员口令从admin更改为路由器的序列号，但只要向路由器所在的网络发送MDAP多播请求就可以得到Home Hub的序列号。 如果要利用这个漏洞，攻击者必须通过ethernet或Wi-Fi加入到Home Hub所在的LAN。有两种方式可以入侵到BT Home Hub Wi-Fi网络： - arp回放注入和弱IV破解 - 通过SSID暴力猜测Home Hub的默认WEP密钥列表 British...

BT Home Hub router multiple security vulnerabilities

Authentication bypass, crossite scripting, privilege escalation...

MDAP ANTs PWNAGE: dumping the admin password of the BT Home Hub

http://www.gnucitizen.org/blog/dumping-the-admin-password-of-the-bt-home-hub/ We're back with more security attacks against the BT Home Hub most popular wireless DSL router in the UK! BT added a new security feature on the latest version 1 of the BT Home Hub firmware 6.2.6.E at time of writing...

Thomson SpeedTouch和BT Home Hub路由器默认WEP/WPA密钥算法漏洞

BUGTRAQ ID: 28893 BT Home Hub和Speedtouch都是家用的无线Internet路由器。 BT Home Hub和Speedtouch路由器所使用的默认WEP/WPA密钥算法是可预测的，远程攻击者可以基于一些公开信息（如MAC地址或SSID）预测出密钥，这样就可以完全入侵路由器。 对于Speedtouch路由器路由器： S/N：CP0615JT109 53 删除CC和PP值：CP0615109 将XXX值转换为16进制：CP0615313039 通过SHA-1处理：742da831d2b657fa53d347301ec610e1ebf8a3d0...

Authentication flaw

cgi/b on the BT Home Hub router allows remote attackers to bypass authentication, and read or modify administrative settings or make arbitrary VoIP telephone calls, by placing a character at the end of the PATHINFO, as demonstrated by 1 %5C encoded backslash, 2 '%' percent, and 3 '' tilde. NOTE:...

CVE-2008-1334

cgi/b on the BT Home Hub router allows remote attackers to bypass authentication, and read or modify administrative settings or make arbitrary VoIP telephone calls, by placing a character at the end of the PATHINFO, as demonstrated by 1 %5C encoded backslash, 2 '%' percent, and 3 '' tilde. NOTE:...

CVE-2008-1334

cgi/b on the BT Home Hub router allows remote attackers to bypass authentication, and read or modify administrative settings or make arbitrary VoIP telephone calls, by placing a character at the end of the PATHINFO, as demonstrated by 1 %5C encoded backslash, 2 '%' percent, and 3 '' tilde. NOTE:...

CVE-2008-1334

CVE-2008-1334 affects the BT Home Hub router (and related Thomson/Alcatel SpeedTouch components) where an authentication bypass is possible by placing a character at the end of PATH_INFO. The vulnerability lets remote attackers bypass authentication and read/modify administrative settings or init...

BT Home Hub 6.2.2.6 - Login procedure Authentication Bypass

BT Home Hub 6.2.2.6 - Login procedure Authentication Bypass source: https://www.securityfocus.com/bid/26333/info BT Home Hub is prone to an authentication-bypass vulnerability. An attacker could exploit this issue to gain unauthorized access to the affected device. BT Home Hub firmware 6.2.2.6 is...

BT Home Hub 6.2.2.6 - Login procedure Authentication Bypass

source: https://www.securityfocus.com/bid/26333/info BT Home Hub is prone to an authentication-bypass vulnerability. An attacker could exploit this issue to gain unauthorized access to the affected device. BT Home Hub firmware 6.2.2.6 is vulnerable; other versions may also be affected. This explo...

CVE-2007-2983

Multiple buffer overflows in the British Telecommunications Consumer webhelper ActiveX control before 2.0.0.8 in btwebcontrol.dll allow remote attackers to execute arbitrary code via unspecified vectors...

CVE-2007-2983

CVE-2007-2983 affects the British Telecommunications Consumer webhelper ActiveX control (btwebcontrol.dll) prior to version 2.0.0.8. Multiple buffer overflows enable remote code execution via unspecified vectors. The vulnerability resides in the ActiveX control used by BT’s web helper. Exploitati...

CVE-2007-2983

Multiple buffer overflows in the British Telecommunications Consumer webhelper ActiveX control before 2.0.0.8 in btwebcontrol.dll allow remote attackers to execute arbitrary code via unspecified vectors...