D-Link DSL-320B Multiple Security Vulnerabilities (May 2013) - Active Check

D-Link DSL-320B devices are prone multiple security vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only nb: Running against all DS...

[SECURITY] Fedora 18 Update: php-twig-Twig-1.12.3-1.fc18

The flexible, fast, and secure template engine for PHP. Fast: Twig compiles templates down to plain optimized PHP code. The overhead compared to regular PHP code was reduced to the very minimum. Secure: Twig has a sandbox mode to evaluate untrusted template code. This allows Twig to be used as a...

D-Link DSL-2740B ADSL Router - Authentication Bypass

+------------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : D-Link DSL-2740B ADSL Router Authentication Bypass Date : 10-02-2013 Author : Ivano Binetti http://ivanobinetti.com Vendor site :...

D-Link DSL-2740B ADSL Router - Authentication Bypass

D-Link DSL-2740B ADSL Router - Authentication Bypass +------------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : D-Link DSL-2740B ADSL Router Authentication Bypass Date : 10-02-2013 Author : Ivano...

D-Link DSL-2740B Authentication Bypass

+------------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : D-Link DSL-2740B ADSL Router Authentication Bypass Date : 10-02-2013 Author : Ivano Binetti http://ivanobinetti.com Vendor site :...

D-Link DSL-2740B Authentication Bypass Vulnerability

D-Link DSL-2740B ADSL router suffers from an administrative authentication bypass vulnerability. +------------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : D-Link DSL-2740B ADSL Router Authentication...

Netgear DGN1000B - Multiple Vulnerabilities

Exploit for hardware platform in category web applications The N150 Wireless ADSL2+ Modem Router DGN1000 provides you with an easy and secure way to set up a wireless home network with fast access to the Internet over a high-speed digital subscriber line DSL. The N150 Modem Router has a built-in...

NETGEAR DGN1000B - Multiple Vulnerabilities

NETGEAR DGN1000B - Multiple Vulnerabilities Device Name: DGN1000B Vendor: Netgear ============ Vulnerable Firmware Releases: ============ Firmwareversion: V1.1.00.24 Firmwareversion: V1.1.00.45 Download: http://downloadcenter.netgear.com/de/product/DGN1000 ============ Device Description:...

CVE-2012-1308

Cross-site request forgery CSRF vulnerability in redpass.cgi in D-Link DSL-2640B Firmware EU4.00 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via the sysPassword parameter...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in redpass.cgi in D-Link DSL-2640B Firmware EU4.00 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via the sysPassword parameter...

CVE-2012-1308

CVE-2012-1308 is a CSRF vulnerability in the D-Link DSL-2640B firmware (EU_4.00) affecting redpass.cgi, allowing remote attackers to hijack administrator authentication to change the administrator password via the sysPassword parameter. The issue is documented with CVSS v2 base score 6.8 (MEDIUM)...

CVE-2012-1308: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in redpass.cgi in D-Link DSL-2640B Firmware EU4.00 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via the sysPassword parameter...

PT-2012-3185

Name of the Vulnerable Software and Affected Versions D-Link DSL-2640B Firmware version EU 4.00 Description A cross-site request forgery issue allows remote attackers to hijack administrator authentication for requests that change the administrator password via the sysPassword parameter...

Millions of DSL modems hacked in Brazil, spread banking malware

More than 4.5 million DSL modems have been compromised as part of a sustained hacking campaign in Brazil, with the devices spreading malware and malicious web address redirects. According to the malware analyst at Kaspersky Lab in Brazil, Fabio Assolini. The vulnerability exploited by attackers...

The Tale of One Thousand and One DSL Modems

This is the description of an attack happening in Brazil since 2011 using 1 firmware vulnerability, 2 malicious scripts and 40 malicious DNS servers, which affected 6 hardware manufacturers, resulting in millions of Brazilian internet users falling victim to a sustained and silent mass attack on...

D-Link DSL-2730U CSRF / Update config

Exploit for hardware platform in category web applications Author: The Black Devils Home: 1337day Exploit DataBase 1337day.com Software Link: N / A Category : webapps Google dork: N / A Tested on: Windows & Ubuntu ------------------------------- picture of the router...

D-Link DSL-2640U PPoE Data Disclosure (ADSL Router)

Exploit for hardware platform in category web applications ================================================================================ || | | || || || |/ | || |/ | | | | | | | | | | | \ | | | | \ ================================================================================ Exploit Title:...

TP-Link 8840T DSL router default remote management vulnerability

Overview The TP-Link 8840T DSL router's remote management feature is enabled by default. Description The TP-Link 8840T DSL router allows remote WAN internet users access to the administrator web interface of the device by default. --- Impact A remote unauthenticated attacker may be able to access...

D-Link DSL-2640U (ADSL Router) CSRF Change Admin Password

Exploit for hardware platform in category web applications +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : D-Link DSL-2640U ADSL Router CSRF Vulnerability Change Admin Pssword Date : 20-01-2012 Auth...

D-Link DSL-2640B Authentication Bypass

+------------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : D-Link DSL-2640B ADSL Router Authentication Bypass Date : 22-02-2012 Author : Ivano Binetti http://ivanobinetti.com Vendor site :...