Netgear RP614v4 config disclosure

Device: Netgear RP614v4 Firmware version: v1.1.209.01 Firmware release date: November 2009 HTTP service: Boa HTTPd 0.93.15 Exploit release date: Wednesday March 24, 2010 Default router credentials: username: admin password: password Scope: Local/Remote Vulnerability: The Netgear RP614v4 is...

ZyXEL ZyWALL USG client side authorization config disclosure

Details ======= Product: ZyXEL USG Unified Security Gateway appliances ZyWALL USG-20 ZyWALL USG-20W ZyWALL USG-50 ZyWALL USG-100 ZyWALL USG-200 ZyWALL USG-300 ZyWALL USG-1000 ZyWALL USG-1050 ZyWALL USG-2000 Possibly other ZLD-based products Affected Versions: Firmware Releases before April 25, 20...

DMX FORUM 2.1a Configuration Disclosure

| Title : DMX FORUM v2.1a Config Disclosure Vulnerability | Author : indoushka | email : [email protected] | Dork : © DMX FORUM v2.1a | Tested on: windows 8.1 Français V.Pro | Bug : by pass | Download : scripts.toucharger.com/fiches/scripts/dmx-forum/3392.htm...

JEEBBS任意帐号密码重置附poc

简要描述： JEEBBS 某些小问题可导致任意帐号密码重置。漏洞的类型，难度不重要，关键是能造成什么影响才是最重要的 详细说明： 一、首先注册个帐号，虽然有些网站去掉了注册连接，但是register.jspx 文件还是存在的，直接访问可以注册帐号。 二、来到论坛的随便一个帖子里，找到举报的连接，虽然有些网站去掉了连接，但是通过 member/getreportpage.jspx?url=/sqzx/帖子ID.jhtml 去举报帖子。 三、由于举报的字符串没有经过过滤直接查询显示在后台位置,于维护-用户举报-举报详情-举报理由。形成存储型xss...

USN-2325-1 nova vulnerability

Alex Gaynor discovered that OpenStack Nova would sometimes respond with variable times when comparing authentication tokens. If nova were configured to proxy metadata requests via Neutron, a remote authenticated attacker could exploit this to conduct timing attacks and ascertain configuration...

Tenda W309R Router 5.07.46 - Configuration Disclosure

No description provided by source. --------------------------------------------------- Exploit Title: Tenda W309R Configuration Enumeration without Authentication Author: SANTHO @s4n7h0 Vendor Homepage: http://www.tenda.cn Product link: http://www.tenda.cn/tendacn/product/show.aspx?productid=382...

Multiple Products DVR Configuration Disclosure (CVE-2013-1391)

A configuration disclosure vulnerability has been reported in the DVR web server of multiple vendors which allows authentication bypass. A remote attacker could get the unencrypted configuration file by requesting the "/DVR.cfg" without entering credentials. Successful exploitation of this...

Tenda W309R Router 5.07.46 - Configuration Disclosure

Exploit for hardware platform in category web applications --------------------------------------------------- Exploit Title: Tenda W309R Configuration Enumeration without Authentication Author: SANTHO Vendor Homepage: http://www.tenda.cn Product link:...

Tenda W309R Router 5.07.46 - Configuration Disclosure

--------------------------------------------------- Exploit Title: Tenda W309R Configuration Enumeration without Authentication Author: SANTHO Vendor Homepage: http://www.tenda.cn Product link: http://www.tenda.cn/tendacn/product/show.aspx?productid=382 Category: Hardware/Wireless Router Firmware...

Tenda W309R Router 5.07.46 - Configuration Disclosure

Tenda W309R Router 5.07.46 - Configuration Disclosure --------------------------------------------------- Exploit Title: Tenda W309R Configuration Enumeration without Authentication Author: SANTHO Vendor Homepage: http://www.tenda.cn Product link:...

Multiple DVR Manufacturers Configuration Disclosure

This module takes advantage of an authentication bypass vulnerability at the web interface of multiple manufacturers DVR systems, which allows to retrieve the device configuration. This module requires Metasploit: https://metasploit.com/download Current source:...

CubeCart 5.0.7 Insecure Backup Handling

OVERVIEW CubeCart 5.0.7 and lower versions are vulnerable to Insecure Backup File Handling which leads to the disclosure of the application configuration file. 2. BACKGROUND CubeCart is an "out of the box" ecommerce shopping cart software solution which has been written to run on servers that...

Havalite v1.1.7 Mutiple Vulnerabilities

Its Multiple Vulnerabilities found in Havalite 1.1.0 by me old version & oday , and its work/able in the last havalite version v1.1.7 . 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //...

Cisco DPC2420 Multiples Vulnerabilities

Exploit for hardware platform in category web applications 0x00 Details Vendor : Cisco Model : DPC2420 type : Cablemodem router.=20 Firmware: D2425-P10-13-v202r12811-110511as-TRO.bin Software: D2425-P10-13-v202r12811-110511as-TRO Website : http://www.cisco.com/web/consumer/support/modemDPC2420.ht...

Radio istek scripti 2.5 - Remote Configuration Disclosure

Radio istek scripti 2.5 - Remote Configuration Disclosure turkish radio php script ====================================================== RADIO istek scripti tr Version 2.5 tr Remote config Vulnerability Found by? :? kurdish hackers team C0ntact : pshela at YaHoo .com Groups : Kurd-Team site :...

Radio istek scripti 2.5 - Remote Configuration Disclosure

turkish radio php script ====================================================== RADIO istek scripti tr Version 2.5 tr Remote config Vulnerability Found by? :? kurdish hackers team C0ntact : pshela at YaHoo .com Groups : Kurd-Team site : www.kurdteam.org...

Radio istek scripti 2.5 Remote Configuration Disclosure Vulnerability

Exploit for unknown platform in category web applications ===================================================================== Radio istek scripti 2.5 Remote Configuration Disclosure Vulnerability =====================================================================...

aa33code 0.0.1 LFI / Authentication Bypass

aa33code 0.0.1 LFI/Auth Bypass/DCD Multiple Remote Vulnerabilites + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Download : http://sourceforge.net/projects/aa33code/files/aa33code/0.0.1/aa33code-0.0.1.tar.gz/download + Local File Inclusion - PoC...

aa33code 0.0.1 (LFI/Auth Bypass/DCD) Multiple Remote Vulnerabilites

No description provided by source. + aa33code 0.0.1 LFI/Auth Bypass/DCD Multiple Remote Vulnerabilites + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Download : http://sourceforge.net/projects/aa33code/files/aa33code/0.0.1/aa33code-0.0.1.tar.gz/download + Local File...

aa33code 0.0.1 (LFI/Auth Bypass/DCD) Multiple Remote Vulnerabilites

Exploit for unknown platform in category web applications =================================================================== aa33code 0.0.1 LFI/Auth Bypass/DCD Multiple Remote Vulnerabilites =================================================================== + aa33code 0.0.1 LFI/Auth Bypass/DCD...