CVE-2015-7286: Undefined Security Weakness

CSL DualCom GPRS CS2300-R devices with firmware 1.25 through 3.53 rely on a polyalphabetic substitution cipher with hardcoded keys, which makes it easier for remote attackers to defeat a cryptographic protection mechanism by capturing IP or V.22bis PSTN protocol traffic...

CVE-2015-7287: Undefined Security Weakness

CSL DualCom GPRS CS2300-R devices with firmware 1.25 through 3.53 use the same 001984 default PIN across different customers' installations, which allows remote attackers to execute commands by leveraging knowledge of this PIN and including it in an SMS message...

CVE-2015-7288: Undefined Security Weakness

CSL DualCom GPRS CS2300-R devices with firmware 1.25 through 3.53 allow remote attackers to modify the configuration via a command in an SMS message, as demonstrated by a "4 2" command...

CSL DualCom GPRS CS2300-R SPT is vulnerable (CNVD-2015-07790)

The CSL DualCom GPRS CS2300-R SPT is an alarm signaling board from CSL DualCom, UK, which provides a communication link between the burglar alarm and the monitoring center, allowing signals to be sent to the monitoring center when the alarm goes off, via the mobile network, ordinary phone lines o...

PT-2015-7504

Name of the Vulnerable Software and Affected Versions CSL DualCom GPRS CS2300-R devices with firmware 1.25 through 3.53 Description The issue concerns the use of a polyalphabetic substitution cipher with hardcoded keys in the affected devices. This makes it easier for remote attackers to defeat t...

PT-2015-7506

Name of the Vulnerable Software and Affected Versions CSL DualCom GPRS CS2300-R devices versions 1.25 through 3.53 Description The issue allows remote attackers to modify the configuration of the devices via a command in an SMS message. For example, a "4 2" command can be used to achieve this...

PT-2015-7505

Name of the Vulnerable Software and Affected Versions CSL DualCom GPRS CS2300-R devices versions 1.25 through 3.53 Description The issue allows remote attackers to execute commands on the device by leveraging knowledge of the default PIN and including it in an SMS message. The default PIN 001984 ...

PT-2015-7503

Name of the Vulnerable Software and Affected Versions CSL DualCom GPRS CS2300-R devices with firmware 1.25 through 3.53 Description The issue allows man-in-the-middle attackers to bypass intended access restrictions via a spoofed HSxx response, as the devices do not require authentication from...

CorelDRAW X3 13.0.0.576 - DLL Hijacking Exploit (crlrib.dll)

No description provided by source. / CorelDRAW X3 v13.0.0.576 crlrib.dll DLL Hijacking Exploit Vendor: Corel Corporation Product Web Page: http://www.corel.com Affected Version: X3 v13.0.0.576 Summary: Graphic design software for striking visual communication. Desc: CorelDRAW X3 suffers from a dl...

Code Snippets 0.9 Insecure Session

--------------------------------------- Author : L3b-r1'z Title : Code Snippets Version 0,9 insecure session Date : 6/30/2012 Email : [email protected] Site : Sec4Ever.com & Exploit4arab.com Google Dork : allintext: "Powered by: PHP-CSL V0.9" Version : 1.1.0 6/30/2012 - Vulnerability discovered...

CSLSecurity Hacked by TeaMp0isoN

CSLSecurity Hacked by TeaMp0isoN CSL Security hacked by TeaMp0isoN. CSL Security claim to be "New LulzSec " type hacking Group. Their goal is to show that most of the important websites are vulnerable,They claim to show that any system can be compromised, nothing is secure. They Hit Sites,...

Metropolitan UK Police hacked for #Antisec by CSL Security using SQL injection Vulnerability

Metropolitan UK Police hacked for Antisec by CSL Security using SQL injection Vulnerability One of the Anonymous Hacker "CSL Security " expose SQL Injection Vulnerability in Metropolitan UK Police website via Twitter. He posted the stuff on Pastebin. Vulnerable link is also posted by hacker. Wher...

Metropolitan UK Police hacked for #Antisec by CSL Security using SQL injection Vulnerability

Metropolitan UK Police hacked for Antisec by CSL Security using SQL injection Vulnerability One of the Anonymous Hacker "CSL Security" expose SQL Injection Vulnerability in Metropolitan UK Police website via Twitter. He posted the stuff on Pastebin. Vulnerable link is also posted by hacker. Where...

CorelDRAW X3 13.0.0.576 - crlrib.dll DLL Hijacking

CorelDRAW X3 13.0.0.576 - crlrib.dll DLL Hijacking / CorelDRAW X3 v13.0.0.576 crlrib.dll DLL Hijacking Exploit Vendor: Corel Corporation Product Web Page: http://www.corel.com Affected Version: X3 v13.0.0.576 Summary: Graphic design software for striking visual communication. Desc: CorelDRAW X3...