EUVD-2013-6777

Malware in sbrugna...

Cisco EPC3925 UPC Insecure Default Password Vulnerability

The Cisco EPC3925 is a home router device. An insecure default password vulnerability exists in the Cisco EPC3925 UPC. A remote attacker with knowledge of the default credentials could exploit this vulnerability to gain unauthorized access and perform unauthorized actions...

Cisco EPC3925 UPC Modem / Router Default Passphrase

Cisco EPC3925 UPC modem/router default passphrase vulnerabilities ----------------------------------------------------------------- Platforms / Firmware confirmed affected: - Cisco EPC3925, ESIP-12-v302r125573-131230cupc Vulnerabilities --------------- Default SSID and passphrase can be calculate...

CVE-2014-3306: Improper Input Validation

The web server on Cisco DPC3010, DPC3212, DPC3825, DPC3925, DPQ3925, EPC3010, EPC3212, EPC3825, and EPC3925 Wireless Residential Gateway products allows remote attackers to execute arbitrary code via a crafted HTTP request, aka Bug ID CSCup40808...

Cisco EPC3925 - Cross Site Request Forgery

Cisco EPC3925是美国思科（Cisco）公司的一款家用无线路由器设备。 Cisco EPC3925路由器中存在跨站请求伪造漏洞，该漏洞源于goform/Quicksetup URL没有正确验证请求。远程攻击者可借助Password和PasswordReEnter参数利用该漏洞更改密码。 Exploit Title: Cisco EPC3925 ? Cross Site Request Forgery Google Dork: N/A Date: 12-11-2013 Exploit Author: Jeroen - IT Nerdbox Vendor Homepage:...

Cisco EPC3925 - Persistent Cross-Site Scripting

Cisco EPC3925 - Persistent Cross-Site Scripting Exploit Title: Cisco EPC3925 - Persistent Cross Site Scripting Google Dork: N/A Date: 12-11-2013 Exploit Author: Jeroen - IT Nerdbox Vendor Homepage: http://www.cisco.com Software Link: Not public Version: epc3925-E10-5-v302r125572-130520c Tested on...

Cisco EPC3925 - Persistent Cross-Site Scripting

Exploit Title: Cisco EPC3925 - Persistent Cross Site Scripting Google Dork: N/A Date: 12-11-2013 Exploit Author: Jeroen - IT Nerdbox Vendor Homepage: http://www.cisco.com Software Link: Not public Version: epc3925-E10-5-v302r125572-130520c Tested on: Cisco EPC3925 CVE: N/A Description The paramet...

CVE-2013-6976

Cross-site request forgery CSRF vulnerability in goform/Quicksetup on Cisco EPC3925 devices allows remote attackers to hijack the authentication of administrators for requests that change a password via the Password and PasswordReEnter parameters, aka Bug ID CSCuh37496...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in goform/Quicksetup on Cisco EPC3925 devices allows remote attackers to hijack the authentication of administrators for requests that change a password via the Password and PasswordReEnter parameters, aka Bug ID CSCuh37496...

PT-2013-6215

Name of the Vulnerable Software and Affected Versions Cisco EPC3925 devices affected versions not specified Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack administrator authentication for requests that change passwords. This is achieved via the...

CVE-2013-6976: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in goform/Quicksetup on Cisco EPC3925 devices allows remote attackers to hijack the authentication of administrators for requests that change a password via the Password and PasswordReEnter parameters, aka Bug ID CSCuh37496...

Cisco EPC3925跨站请求伪造漏洞

Cisco EPC3925是美国思科（Cisco）公司的一款家用无线路由器设备。 Cisco EPC3925路由器中存在跨站请求伪造漏洞，该漏洞源于goform/Quicksetup URL没有正确验证请求。远程攻击者可借助Password和PasswordReEnter参数利用该漏洞更改密码。 Exploit Title: Cisco EPC3925 � Cross Site Request Forgery Google Dork: N/A Date: 12-11-2013 Exploit Author: Jeroen - IT Nerdbox Vendor Homepage:...

Cisco EPC3925 Cross Site Request Forgery

Exploit Title: Cisco EPC3925 � Cross Site Request Forgery Google Dork: N/A Date: 12-11-2013 Exploit Author: Jeroen - IT Nerdbox Vendor Homepage: http://www.cisco.com Software Link: Not public Version: epc3925-E10-5-v302r125572-130520c Tested on: Cisco EPC3925 CVE: N/A Description: This proof of...

Cisco EPC3925 - Cross-Site Request Forgery

Cisco EPC3925 - Cross-Site Request Forgery Exploit Title: Cisco EPC3925 � Cross Site Request Forgery Google Dork: N/A Date: 12-11-2013 Exploit Author: Jeroen - IT Nerdbox Vendor Homepage: http://www.cisco.com Software Link: Not public Version: epc3925-E10-5-v302r125572-130520c Tested on: Cisco...

Cisco EPC3925 - Cross-Site Request Forgery

Exploit Title: Cisco EPC3925 � Cross Site Request Forgery Google Dork: N/A Date: 12-11-2013 Exploit Author: Jeroen - IT Nerdbox Vendor Homepage: http://www.cisco.com Software Link: Not public Version: epc3925-E10-5-v302r125572-130520c Tested on: Cisco EPC3925 CVE: N/A Description: This proof of...