D-Link DIR-300 - Cross-Site Request Forgery (Change Admin Account Settings)

D-Link DIR-300 - Cross-Site Request Forgery Change Admin Account Settings document.exploit.submit;...

D-Link Routers - Authentication Bypass (1)

D-Link Routers - Authentication Bypass 1 Exploit Title: Multiple D-Link Router Authentication Bypass Vulnerabilities Date: 12-01-2011 Author: Craig Heffner, /dev/ttyS0 Firmware Link: http://www.dlink.co.uk/ Firmware Versions: All Tested on: DIR-300, DIR-320, DIR-615 revD Multiple D-Link routers...

D-Link Routers - Authentication Bypass (1)

Exploit Title: Multiple D-Link Router Authentication Bypass Vulnerabilities Date: 12-01-2011 Author: Craig Heffner, /dev/ttyS0 Firmware Link: http://www.dlink.co.uk/ Firmware Versions: All Tested on: DIR-300, DIR-320, DIR-615 revD Multiple D-Link routers that use a PHP based Web interface suffer...

Re: D-Link DIR-300 authentication bypass

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Polish D-Link branch confirmed the bug and produced relevant patched firmware: DIR-300: ftp://ftp.dlink.pl/dir/dir-300/driversoftware/DIR-300fwrevA1-05B09allen20101130.zip...

D-Link bsc_wlan.php Access Bypass

Exploit for hardware platform in category web applications ================================= D-Link bscwlan.php Access Bypass ================================= Hello All, Here is another D-Link vulnerability where you can change the network Key i.e., WEP, WPAx keys. Requirement: 1. You need to ha...

D-Link DIR-300 - WiFi Key Security Bypass

source: https://www.securityfocus.com/bid/45038/info The D-Link DIR-300 wireless router is prone to a security-bypass vulnerability. Remote attackers can exploit this issue to modify the WiFi key and possibly other configuration settings. Successful exploits will lead to other attacks. POST...

D-Link bsc_wlan.php Access Bypass

Hello All, Here is another D-Link vulnerability where you can change the network Key i.e., WEP, WPAx keys. Requirement: 1. You need to have access to the internal network of that router. The two scenarios are mentioned below: Scenario A: You know the network/ WIFI key to connect to the WIFI netwo...

D-Link DIR-300 - WiFi Key Security Bypass

D-Link DIR-300 - WiFi Key Security Bypass source: https://www.securityfocus.com/bid/45038/info The D-Link DIR-300 wireless router is prone to a security-bypass vulnerability. Remote attackers can exploit this issue to modify the WiFi key and possibly other configuration settings. Successful...

Re: D-Link DIR-300 authentication bypass

Hi, D-Link DIR-300 Firmware Version : 2.04 affected as well...

D-Link DIR-300 Authentication Bypass

\n"; exit; $ch=curlinit; curlsetopt$ch, CURLOPTURL, "http://".$argv1."/toolsadmin.php"; curlsetopt$ch, CURLOPTRETURNTRANSFER, true; curlsetopt$ch, CURLOPTPORT, $argv2; curlsetopt$ch, CURLOPTPOST, 1; curlsetopt$ch,...

D-Link DIR-300 authentication bypass

intro Hello, I found security bug in D-Link DIR-300 wireless router. It can be used to bypass authentication mechanizm by attacker with access to web interface. I reported it to D-Link but they are not replying for my emails. According to other D-Link security holes and their status I think that...

D-Link DIR-300 - Multiple Security Bypass Vulnerabilities

source: https://www.securityfocus.com/bid/44743/info The D-Link DIR-300 wireless router is prone to multiple security-bypass vulnerabilities. Remote attackers can exploit these issues to bypass security restrictions, access certain administrative functions, alter configuration, and compromise the...

Adobe Shockwave Player Duplicate LSCM Records Memory Corruption (APSB10-25; CVE-2010-4089)

Adobe Shockwave is a multimedia player that allows Adobe Director applications to be published on the Internet and viewed in a web browser by anyone who has the Shockwave plug-in installed. A memory corruption vulnerability has been identified in Adobe Shockwave Player. The vulnerability is due t...

CVE-2010-2882

DIRAPI.dll in Adobe Shockwave Player before 11.5.8.612 does not properly parse .dir files, which allows remote attackers to cause a denial of service memory corruption or execute arbitrary code via a malformed file containing an invalid value, as demonstrated by a value at position 0x3812 of a...

Memory corruption

IML32.dll in Adobe Shockwave Player before 11.5.8.612 does not properly parse .dir files, which allows remote attackers to cause a denial of service memory corruption or execute arbitrary code via a malformed file containing an invalid value, as demonstrated by a value at position 0x24C6 of a...

CVE-2010-2869

IML32.dll in Adobe Shockwave Player before 11.5.8.612 does not properly parse .dir files, which allows remote attackers to cause a denial of service memory corruption or execute arbitrary code via a malformed file containing an invalid value, as demonstrated by a value at position 0x3712 of a...

Adobe Shockwave Player Memory Corruption Vulnerability - CVE-2010-2869

I'm writing on behalf of the Check Point Vulnerability Discovery Team to publish the following vulnerability. Check Point Software Technologies - Vulnerability Discovery Team VDT http://www.checkpoint.com/defense/ Memory corruption when Adobe Shockwave Player parses .dir media file CVE-2010-2869...

Adobe Shockwave Player Memory Corruption Vulnerability - CVE-2010-2868

I'm writing on behalf of the Check Point Vulnerability Discovery Team to publish the following vulnerability. Check Point Software Technologies - Vulnerability Discovery Team VDT http://www.checkpoint.com/defense/ Memory corruption when Adobe Shockwave Player parses .dir media file CVE-2010-2868...

Adobe Shockwave Player Memory Corruption Vulnerability - CVE-2010-2864

I'm writing on behalf of the Check Point Vulnerability Discovery Team to publish the following vulnerability. Check Point Software Technologies - Vulnerability Discovery Team VDT http://www.checkpoint.com/defense/ Memory corruption when Adobe Shockwave Player parses .dir media file CVE-2010-2864...

Adobe Shockwave Player Memory Corruption Vulnerability - CVE-2010-2880

Dear List, I'm writing on behalf of the Check Point Vulnerability Discovery Team to publish the following vulnerability. Check Point Software Technologies - Vulnerability Discovery Team VDT http://www.checkpoint.com/defense/ Memory corruption when Adobe Shockwave Player parses .dir media file...