GLSA-201401-05 : ISC DHCP: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201401-05 ISC DHCP: Denial of Service ISC DHCP is vulnerable to a memory exhaustion attack involving regular expressions sent by DHCP clients. Impact : A remote attacker could send a specially crafted request from a malicious or...

Ubiquiti UniFi Controller DHCP Hostname脚本注入漏洞

CVE ID:CVE-2013-3572 Ubiquiti Networks UniFi是一款企业级无线网络系统。 Ubiquiti Networks UniFi中的UniFi Controller管理接口存在跨站脚本漏洞，允许远程攻击者利用漏洞通过特制的客户端主机名，注入恶意脚本或HTML代码，当恶意数据被查看时可获取敏感信息或者劫持用户会话。 0 Ubiquiti UniFi Controller 2.x 厂商补丁： Ubiquiti Networks ----- 用户可参考如下厂商提供的安全公告获得补丁信息：...

ISC DHCP: Denial of service

Background ISC DHCP is a Dynamic Host Configuration Protocol DHCP client/server. Description ISC DHCP is vulnerable to a memory exhaustion attack involving regular expressions sent by DHCP clients. Impact A remote attacker could send a specially crafted request from a malicious or spoofed client,...

[Ghost Phisher v1.5] GUI suite for phishing and penetration attacks

Ghost Phisher is an application of security which comes built-in with a fake DNS server ,DHCP server fake, fake HTTP Server and also has a space for the automatic capture and recording credentials HTTP method of the form to a database. The program could be used for on-demand service of DHCP, DNS,...

CVE-2013-5218

Cross-site scripting XSS vulnerability on the HOT HOTBOX router with software 2.1.11 allows remote attackers to inject arbitrary web script or HTML via a crafted DHCP Host Name option, which is not properly handled during rendering of the DHCP table in wlanAccess.asp...

Cross site scripting

Cross-site scripting XSS vulnerability on the HOT HOTBOX router with software 2.1.11 allows remote attackers to inject arbitrary web script or HTML via a crafted DHCP Host Name option, which is not properly handled during rendering of the DHCP table in wlanAccess.asp...

CVE-2013-5218

Cross-site scripting XSS vulnerability on the HOT HOTBOX router with software 2.1.11 allows remote attackers to inject arbitrary web script or HTML via a crafted DHCP Host Name option, which is not properly handled during rendering of the DHCP table in wlanAccess.asp...

GLSA-201312-02 : BusyBox: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201312-02 BusyBox: Multiple vulnerabilities Multiple vulnerabilities have been discovered in BusyBox. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could send a specially crafted DHCP...

CVE-2013-6692

Cisco IOS XE 3.8S.2 and earlier does not properly use a DHCP pool during assignment of an IP address, which allows remote authenticated users to cause a denial of service device reload via an AAA packet that triggers an address requirement, aka Bug ID CSCuh04949...

Code injection

Cisco IOS XE 3.8S.2 and earlier does not properly use a DHCP pool during assignment of an IP address, which allows remote authenticated users to cause a denial of service device reload via an AAA packet that triggers an address requirement, aka Bug ID CSCuh04949...

CVE-2013-6692

Cisco IOS XE 3.8S.2 and earlier does not properly use a DHCP pool during assignment of an IP address, which allows remote authenticated users to cause a denial of service device reload via an AAA packet that triggers an address requirement, aka Bug ID CSCuh04949...

CVE-2013-6692

CVE-2013-6692 affects Cisco IOS XE (3.8S(.2) and earlier). The issue lies in DHCP pool handling during IP address assignment for AAA clients, causing a denial of service that can reboot the device when processing an AAA packet that triggers an address requirement. An authenticated remote attacker...

Cisco IOS XE Software AAA DHCP Denial of Service Vulnerability

A vulnerability in a DHCP function that assigns IP addresses to AAA clients on Cisco IOS XE Software could allow an authenticated, remote attacker to cause a reload of the affected device. The vulnerability is due to improper processing of AAA packets that require IP address assignment from a DHC...

Sagemcom F@st 3184 2.1.11 - Multiple Vulnerabilities

Sagemcom F@st 3184 2.1.11 - Multiple Vulnerabilities +------------------------------------------------------------------------------+ | HOTBOX is the leading router/modem appliance of | | HOT Cable communication company in israel. | | The Appliance is manufactured by SAGEMCOM | | and carries the...

HOTBOX 2.1.11 CSRF / Traversal / Denial Of Service

HOTBOX router/modem version 2.1.11 suffers from cross site request forgery, denial of service, script injection, and directory traversal vulnerabilities. Denial of service and cross site request forgery proof of concepts included...

HOTBOX 2.1.11 CSRF / Traversal / Denial Of Service

+------------------------------------------------------------------------------+ | HOTBOX is the leading router/modem appliance of | | HOT Cable communication company in israel. | | The Appliance is manufactured by SAGEMCOM | | and carries the model name F@st 3184. |...

CVE-2013-5499

The remember feature in the DHCP server in Cisco IOS allows remote attackers to cause a denial of service device reload by acquiring a lease and then sending a DHCPRELEASE message, aka Bug ID CSCuh46822...

Security feature bypass

The remember feature in the DHCP server in Cisco IOS allows remote attackers to cause a denial of service device reload by acquiring a lease and then sending a DHCPRELEASE message, aka Bug ID CSCuh46822...

CVE-2013-5499

The CVE-2013-5499 issue affects Cisco IOS Software DHCP server remember functionality. A flaw in how leases are released allows an unauthenticated, adjacent attacker who has obtained a lease to send DHCPRELEASE and cause the device to reload (DoS). Root cause is improper handling of lease release...

CVE-2013-5499

The remember feature in the DHCP server in Cisco IOS allows remote attackers to cause a denial of service device reload by acquiring a lease and then sending a DHCPRELEASE message, aka Bug ID CSCuh46822...