D-Link DSL-2750B ADSL Route' - Cross-Site Request Forgery

Exploit Title : D-Link DSL-2750B ADSL Router CSRF Vulnerability Date : 10-02-2014 Author : [email protected] Vendor site : http://www.d-link.com Version : DSL-2750B Tested on : Firmware Version: EU2.02; Hardware Version: B1 The D-Link DSL-2750B's web interface listening on tcp/ip port 80 is pron...

CVE-2013-6786

Cross-site scripting XSS vulnerability in Allegro RomPager before 4.51, as used on the ZyXEL P660HW-D1, Huawei MT882, Sitecom WL-174, TP-LINK TD-8816, and D-Link DSL-2640R and DSL-2641R, when the "forbidden author header" protection mechanism is bypassed, allows remote attackers to inject arbitra...

CVE-2013-6786

CVE-2013-6786 is an XSS vulnerability in Allegro RomPager prior to 4.51 used on ZyXEL P660HW-D1, Huawei MT882, Sitecom WL-174, TP-LINK TD-8816, and D‑Link DSL-2640R/2641R. The flaw arises when the forbidden author header protection is bypassed, allowing remote attackers to inject arbitrary web sc...

PT-2014-3201 · D Link +5 · D-Link Dsl-2641R +6

Name of the Vulnerable Software and Affected Versions: Allegro RomPager versions prior to 4.51 ZyXEL P660HW-D1 affected versions not specified Huawei MT882 affected versions not specified Sitecom WL-174 affected versions not specified TP-LINK TD-8816 affected versions not specified D-Link DSL-264...

ScMM DSL Modem/Router Backdoor Detection

The remote device is a DSL Modem/Router with a backdoor running on port 32764. It is possible for an attacker to run arbitrary commands or access configuration details including passwords on the device. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid71807;...

D-Link DSL-2750U ME_1.09 - CSRF Vulnerability

This router allows an attacker to bypass authentication and login to the setup page after that just make any settings and save or apply it and it's going to say "worng old password" Don't worry just hit ok . now you are in the Router settings you can Download the config file or whatever yuo want!...

D-Link DSL-2750u ME_1.09 - Cross-Site Request Forgery

Exploit Title: D-Link DSL-2750U CSRF Vulnerability Author: khaledmohdarMysterious guy E-mail: [email protected]/khaledmohdar Category: Hardware Google Dork: N/A Vendor: http://www.dlink.com/ Firmware Version: ME1.09 Product:...

D-Link DSL-2750u ME_1.09 - Cross-Site Request Forgery

D-Link DSL-2750u ME1.09 - Cross-Site Request Forgery Exploit Title: D-Link DSL-2750U CSRF Vulnerability Author: khaledmohdarMysterious guy E-mail: [email protected]/khaledmohdar Category: Hardware Google Dork: N/A Vendor: http://www.dlink.com/ Firmware Version: ME1.09 Product:...

Pentagram Cerberus P 6363 DSL Router - Multiple Vulnerabilities

Pentagram Cerberus P 6363 DSL Router - Multiple Vulnerabilities PENTAGRAM Cerberus P 6363 DSL Router Multiple Vulnerabilities Found by condis Vendor Site / Model: http://www.pentagram.pl/produkty/cerberus-p-6363 Firmware version: V5.07.28PEN01 Software version: V3.0 1. Prolog Cerberus P 6363 is...

CVE-2013-5730

Multiple cross-site request forgery CSRF vulnerabilities in D-Link DSL-2740B Gateway with firmware EU1.00 allow remote attackers to hijack the authentication of administrators for requests that 1 enable or disable Wireless MAC Address Filters via a wlFltMode action to wlmacflt.cmd, 2 enable or...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in D-Link DSL-2740B Gateway with firmware EU1.00 allow remote attackers to hijack the authentication of administrators for requests that 1 enable or disable Wireless MAC Address Filters via a wlFltMode action to wlmacflt.cmd, 2 enable or...

CVE-2013-5730

The CVE-2013-5730 issue affects the D-Link DSL-2740B Gateway (firmware EU_1.00). It describes multiple CSRF vulnerabilities that allow remote attackers to hijack administrator authentication to perform privileged actions via crafted requests: (1) enable/disable Wireless MAC Address Filters throug...

CVE-2013-5223

Multiple cross-site scripting XSS vulnerabilities in D-Link DSL-2760U Gateway Rev. E1 allow remote authenticated users to inject arbitrary web script or HTML via the 1 ntpServer1 parameter to sntpcfg.cgi, username parameter to 2 ddnsmngr.cmd or 3 todmngr.tod, 4 TodUrlAdd parameter to urlfilter.cm...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in D-Link DSL-2760U Gateway Rev. E1 allow remote authenticated users to inject arbitrary web script or HTML via the 1 ntpServer1 parameter to sntpcfg.cgi, username parameter to 2 ddnsmngr.cmd or 3 todmngr.tod, 4 TodUrlAdd parameter to urlfilter.cm...

CVE-2013-2271

The D-Link DSL-2740B Gateway with firmware EU1.0, when an active administrator session exists, allows remote attackers to bypass authentication and gain administrator access via a request to login.cgi...

Authentication flaw

The D-Link DSL-2740B Gateway with firmware EU1.0, when an active administrator session exists, allows remote attackers to bypass authentication and gain administrator access via a request to login.cgi...

CVE-2013-5223

Multiple cross-site scripting XSS vulnerabilities in D-Link DSL-2760U Gateway Rev. E1 allow remote authenticated users to inject arbitrary web script or HTML via the 1 ntpServer1 parameter to sntpcfg.cgi, username parameter to 2 ddnsmngr.cmd or 3 todmngr.tod, 4 TodUrlAdd parameter to urlfilter.cm...

CVE-2013-5223

Multiple cross-site scripting XSS vulnerabilities in D-Link DSL-2760U Gateway Rev. E1 allow remote authenticated users to inject arbitrary web script or HTML via the 1 ntpServer1 parameter to sntpcfg.cgi, username parameter to 2 ddnsmngr.cmd or 3 todmngr.tod, 4 TodUrlAdd parameter to urlfilter.cm...

CVE-2013-2271

The D-Link DSL-2740B Gateway with firmware EU1.0, when an active administrator session exists, allows remote attackers to bypass authentication and gain administrator access via a request to login.cgi...

CVE-2013-5223

CVE-2013-5223 reports multiple cross-site scripting (XSS) vulnerabilities in the D-Link DSL-2760U Gateway (Rev. E1). The issue allows remote authenticated users to inject arbitrary web script or HTML via a long list of parameters (including ntpServer1, ddnsmngr.cmd username, todmngr.tod, urlfilte...