NetGear C DSL Router R0318 - Multiple Web Vulnerabilities

Document Title: =============== NetGear C DSL Router R0318 - Multiple Web Vulnerabilities Release Date: ============= 2011-08-18 Vulnerability Laboratory ID VL-ID: ==================================== 40 Product & Service Introduction: =============================== RO318 ergänzt Produktfamilie...

Alice (Telefonica Germany) Modem 1111 DoS + XSS

German ISP 'Alice' has been shipping custom embedded devices DSL modems/routers etc. for the past few years. Their first self-branded DSL modem, Alice Modem 1111, using firmware version 4.19, is prone to at least the following two security vulnerabilities after it has passed initial configuration...

UK Vodafone Phone Hacking method exposed

UK Vodafone Phone Hacking method exposed The Hacker's Choice announced a security problem with Vodafone's Mobile Phone Network today. An attacker can listen to any UK Vodafone customer's phone call. An attacker can exploit a vulnerability in 3G/UMTS/WCDMA - the latest and most secure mobile phone...

Dlink DSL-2650U Dos/PoC

Exploit for hardware platform in category dos / poc Exploit Title: Dlink DSL-2650U DoS/PoC Date: July 6th, 2011 Author: Li'el Fridman Software Link: ftp://ftp.dlink.ru/pub/ADSL/DSL-2650UBRUD/Firmware/RU1.20/DSL-2650UBRUD1RU1.2006222011.zip Version: 1.20 Tested on: Default firmware - Linux 2.6.8.1...

D-Link DSL-2650U Denial Of Service

Exploit Title: Dlink DSL-2650U DoS/PoC Date: July 6th, 2011 Author: Li'el Fridman Software Link: ftp://ftp.dlink.ru/pub/ADSL/DSL-2650UBRUD/Firmware/RU1.20/DSL-2650UBRUD1RU1.2006222011.zip Version: 1.20 Tested on: Default firmware - Linux 2.6.8.1 !/usr/bin/env python -- coding: utf-8 -- import sys...

D-Link DSL-2650U - Denial of Service (PoC)

D-Link DSL-2650U - Denial of Service PoC Exploit Title: Dlink DSL-2650U DoS/PoC Date: July 6th, 2011 Author: Li'el Fridman Software Link: ftp://ftp.dlink.ru/pub/ADSL/DSL-2650UBRUD/Firmware/RU1.20/DSL-2650UBRUD1RU1.2006222011.zip Version: 1.20 Tested on: Default firmware - Linux 2.6.8.1...

D-Link DSL-2650U - Denial of Service (PoC)

Exploit Title: Dlink DSL-2650U DoS/PoC Date: July 6th, 2011 Author: Li'el Fridman Software Link: ftp://ftp.dlink.ru/pub/ADSL/DSL-2650UBRUD/Firmware/RU1.20/DSL-2650UBRUD1RU1.2006222011.zip Version: 1.20 Tested on: Default firmware - Linux 2.6.8.1 !/usr/bin/env python -- coding: utf-8 -- import sys...

CVE-2011-0746

Cross-site request forgery CSRF vulnerability in Forms/PortForwardingEdit1 on the ZyXEL O2 DSL Router Classic allows remote attackers to hijack the authentication of administrators for requests that insert cross-site scripting XSS sequences via the PortRuleName parameter...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Forms/PortForwardingEdit1 on the ZyXEL O2 DSL Router Classic allows remote attackers to hijack the authentication of administrators for requests that insert cross-site scripting XSS sequences via the PortRuleName parameter...

CVE-2011-0746

Cross-site request forgery CSRF vulnerability in Forms/PortForwardingEdit1 on the ZyXEL O2 DSL Router Classic allows remote attackers to hijack the authentication of administrators for requests that insert cross-site scripting XSS sequences via the PortRuleName parameter...

CVE-2011-0746

The CVE-2011-0746 entry documents a CSRF/XSS vulnerability in the ZyXEL O2 DSL Router Classic. The issue is in the web form /Forms/PortForwarding_Edit_1 where the PortRule_Name parameter can be used to insert XSS payloads, enabling remote attackers to hijack administrator authentication for craft...

O2 DSL Router Classic router crossite scripting

Crossite scripting in administration interface...

RomPager 4.07 Denial Of Service

Software: "RomPager/4.07 UPnP/1.0" Issue: A reboot can be caused when a special crafted http request is sent. Other Details: This version of RomPager is seen on a number of residential routers that are shipped by a number of different ISP's. The router I personal know it effects is the d-link...

Have We Lost the Desktop Security Battle?

For years, security experts, analysts and even users have been lamenting the state of desktop security. Viruses, spam, Trojans and rootkits have added up to create an ugly picture. But, the good news is that the desktop security battle may be over. The less-than-good news, however, is that we may...

Virata EmWeb R6.0.1 Denial Of Service

Exploit Title: Virata EmWeb R6.0.1 Remote Crash Vulnerability Date: 06/04/10 Author: Jobert Abma Online 24 Email: j.abmaatonline24dotnl Version: R6.0.1 Tested on: linux CVE : Code : This was written for educational purpose. Use it at your own risk. Author will be not responsible for any damage. -...

Virata EmWeb R6.0.1 Remote Crash Vulnerability

Exploit for linux platform in category dos / poc ============================================== Virata EmWeb R6.0.1 Remote Crash Vulnerability ============================================== Exploit Title: Virata EmWeb R6.0.1 Remote Crash Vulnerability Date: 06/04/10 Author: Jobert Abma Online 24...

Millenium MP3 Studio 1.x - .m3u Local Stack Overflow

Millenium MP3 Studio 1.x - .m3u Local Stack Overflow !/usr/bin/perl Exploit Title: MP3 Studio v1.X .m3u File Local Stack Overflow Date: 19.01.2010 - 01/19/2010 Author: NeoCortex Software Link: http://www.freewarezoom.com/archives/millennium-mp3-studio Version: 1.X Tested on: Windows XP SP3 de-de...

Millenium MP3 Studio v1.X (.m3u File) Local Stack Overflow

Exploit for unknown platform in category local exploits ========================================================== Millenium MP3 Studio v1.X .m3u File Local Stack Overflow ========================================================== !/usr/bin/perl Exploit Title: MP3 Studio v1.X .m3u File Local Stac...

Millenium MP3 Studio 1.x - '.m3u' Local Stack Overflow

!/usr/bin/perl Exploit Title: MP3 Studio v1.X .m3u File Local Stack Overflow Date: 19.01.2010 - 01/19/2010 Author: NeoCortex Software Link: http://www.freewarezoom.com/archives/millennium-mp3-studio Version: 1.X Tested on: Windows XP SP3 de-de Original exploit found by HACK4LOVE...

DSL router remotely controlled by URL

From The H Security Security researcher Michal Sajdak revealed at CONFidence 2009 in Krakow in mid-May that it’s relatively easy to make the Linksys WAG54G2 WLAN DSL router execute arbitrary shell commands. He has now published securitum.pl further details. Sajdak discovered that it’s easy to add...