CVE-2014-100005

Multiple cross-site request forgery CSRF vulnerabilities in D-Link DIR-600 router rev. Bx with firmware before 2.17b02 allow remote attackers to hijack the authentication of administrators for requests that 1 create an administrator account or 2 enable remote management via a crafted configuratio...

CVE-2014-100005

CVE-2014-100005 affects D-Link DIR-600 (revision Bx) routers with firmware before 2.17b02. The vulnerability comprises multiple CSRF flaws that can hijack administrator sessions and perform actions such as creating an admin account, enabling remote management via hedwig.cgi, applying new settings...

CVE-2014-100005

Multiple cross-site request forgery CSRF vulnerabilities in D-Link DIR-600 router rev. Bx with firmware before 2.17b02 allow remote attackers to hijack the authentication of administrators for requests that 1 create an administrator account or 2 enable remote management via a crafted configuratio...

CVE-2014-100005

Multiple cross-site request forgery CSRF vulnerabilities in D-Link DIR-600 router rev. Bx with firmware before 2.17b02 allow remote attackers to hijack the authentication of administrators for requests that 1 create an administrator account or 2 enable remote management via a crafted configuratio...

CVE-2014-9518

Cross-site scripting XSS vulnerability in login.cgi in D-Link router DIR-655 rev Bx with firmware before 2.12b01 allows remote attackers to inject arbitrary web script or HTML via the htmlresponsepage parameter...

CVE-2014-9518

CVE-2014-9518 is an XSS in the D-Link router DIR-655 (rev Bx) login.cgi. The vulnerability arises from insufficient input sanitization of the html_response_page parameter, enabling remote attackers to inject arbitrary web script/HTML. Affected firmware versions are before 2.12b01. The cited sourc...

CVE-2014-9518

Cross-site scripting XSS vulnerability in login.cgi in D-Link router DIR-655 rev Bx with firmware before 2.12b01 allows remote attackers to inject arbitrary web script or HTML via the htmlresponsepage parameter...

Adobe Shockwave Player Chunk Parsing Uninitialized Object Access (APSB12-13) - Ver2 (CVE-2012-2030)

A remote code execution vulnerability has been reported in Adobe Shockwave player. The vulnerability is due to an error in Adobe Shockwave Player while parsing crafted data inside rcsL RIFF chunk in DIR or DCR files. A remote attacker can exploit this issue by enticing a target user to open a...

CVE-2014-9089

Multiple SQL injection vulnerabilities in viewallbugpage.php in MantisBT before 1.2.18 allow remote attackers to execute arbitrary SQL commands via the 1 sort or 2 dir parameter to viewallset.php...

USB Disk Free v1.0 iOS - File Include Vulnerability

Document Title: =============== USB Disk Free v1.0 iOS - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id= Release Date: ============= 2014-10-10 Vulnerability Laboratory ID VL-ID: ==================================== 1340 Commo...

[SECURITY] Fedora 21 Update: mediawiki-1.23.5-1.fc21

MediaWiki is the software used for Wikipedia and the other Wikimedia Foundation websites. Compared to other wikis, it has an excellent range of features and support for high-traffic websites using multiple servers This package supports wiki farms. Read the instructions for creating wiki instances...

Ubuntu 14.04 LTS : APT vulnerability (USN-2353-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2353-1 advisory. It was discovered that APT incorrectly handled certain http URLs. If a remote attacker were able to perform a machine-in-the-middle attack, this flaw could be...

Photorange 1.0 Local File Inclusion

Document Title: =============== Photorange v1.0 iOS - File Include Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1318 Release Date: ============= 2014-09-07 Vulnerability Laboratory ID VL-ID: ==================================== 1318...

Photorange 1.0 iOS - Local File Inclusion

Document Title: =============== Photorange v1.0 iOS - File Include Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1318 Release Date: ============= 2014-09-07 Vulnerability Laboratory ID VL-ID: ==================================== 1318...

Photorange 1.0 iOS - Local File Inclusion

Photorange 1.0 iOS - Local File Inclusion Document Title: =============== Photorange v1.0 iOS - File Include Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1318 Release Date: ============= 2014-09-07 Vulnerability Laboratory ID VL-ID:...

Photorange v1.0 iOS - File Include Web Vulnerability

Document Title: =============== Photorange v1.0 iOS - File Include Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1318 Release Date: ============= 2014-09-06 Vulnerability Laboratory ID VL-ID: ==================================== 1318...

PhotoSync v2.2 iOS - Command Inject Web Vulnerability

Document Title: =============== PhotoSync v2.2 iOS - Command Inject Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1290 Release Date: ============= 2014-08-05 Vulnerability Laboratory ID VL-ID: ==================================== 1290...

PhotoSync 2.2 Command Injection

Document Title: =============== PhotoSync v2.2 iOS - Command Inject Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1290 Release Date: ============= 2014-08-05 Vulnerability Laboratory ID VL-ID: ==================================== 1290...

PhotoSync v2.2 iOS - Command Inject Web Vulnerability

Document Title: =============== PhotoSync v2.2 iOS - Command Inject Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1290 Release Date: ============= 2014-08-05 Vulnerability Laboratory ID VL-ID: ==================================== 1290...

D-Link HNAP Request Remote Buffer Overflow

No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = NormalRanking include Msf::Exploit::Remote::HttpClient include...