D-Link DSP-W110 Command Execution / SQL Injection / File Upload Vulnerabilities

D-Link DSP-W110 suffers from command execution, remote file upload, and remote SQL injection vulnerabilities. D-Link DSP-W110 - multiple vulnerabilities ---- Discovered by: ---- Peter Adkins ---- Access: ---- Local network; unauthenticated access. ---- Tracking and identifiers: ---- CVE - None...

Multicast DNS Vulnerability Could Lead to DDOS Amplification

The Department of Homeland Security sponsored CERT at Carnegie Mellon University on Tuesday released an advisory warning infrastructure providers of a vulnerability in Multicast DNS, or mDNS, that could leak device information that could be leveraged in high volume DDoS amplification attacks. “I...

Majority of 4G USB Modems, SIM Cards Exploitable

Researchers say 4G USB modems contain exploitable vulnerabilities through which attackers could, and researchers have, managed to gain full control of the machines to which the devices are connected. Researchers from Positive Technologies presented a briefing detailing how to compromise USB modem...

Cool was traced to the presence of a backdoor threat to millions of users information security-vulnerability warning-the black bar safety net

Recently, security research firm PaloAlto Networks found that the domestic mobile phone manufacturers coolpad Android phone install the one named“CoolReaper”a backdoor program that may be related to more than 1, 0 0 0 million users of information security. ! Kupa was traced to the presence of a...

Supermicro Onboard IPMI Port 49152 Sensitive File Exposure Exploit

This module abuses a file exposure vulnerability accessible through the web interface on port 49152 of Supermicro Onboard IPMI controllers. The vulnerability allows an attacker to obtain detailed device information and download data files containing the clear-text usernames and passwords for the...

WhoIsConnectedSniffer - Network discovery tool that listens to network packets on your network

WhoIsConnectedSniffer is a network discovery tool that listens to network packets on your network adapter using a capture driver WinpCap or MS network monitor and accumulates a list of computer and devices currently connected to your network. WhoIsConnectedSniffer uses various protocols to detect...

PT-2014-3807

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager versions prior to 10.01 Description The issue allows remote attackers to bypass authentication and modify registered-device information via crafted data. Recommendations For versions prior to 10.01, update ...

[SECURITY] Fedora 19 Update: kdf-4.10.4-1.fc19

KDiskFree displays the available file devices hard drive partitions, floppy and CD/DVD drives, etc. along with information on their capacity, free space, type and mount point...

Lexmark Printer Detection (HTTP)

This script performs HTTP based detection of Lexmark printer devices. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Google Sheds Light on New Android App Scanner

Google has divulged more information about its forthcoming application verifier for the Android operating system. The feature is being rolled out over the air alongside the latest build of the OS, Jelly Bean 4.2, on Nexus 7 and Galaxy Nexus devices as of yesterday. While it can be disabled, the a...

Analysis: Popular Android Apps Access More Information than Needed

A South Korean security provider says it’s uncovered popular Android apps that want more information than is required, putting users at risk. AhnLab, Inc., headquartered in Seoul, analyzed 178 of the best-rated Android applications using its cloud-based app security analysis tool, ranking each ap...

Cisco Gather Device General Information

This module collects a Cisco IOS or NXOS device information and configuration...

Nmap NSE net: modbus-discover

Enumerates SCADA Modbus slave ids sids and collects their device information. Modbus is one of the popular SCADA protocols. This script does Modbus device information disclosure. It tries to find legal sids slave ids of Modbus devices and to get additional information about the vendor and firmwar...

modbus-discover NSE Script

Enumerates SCADA Modbus slave ids sids and collects their device information. Modbus is one of the popular SCADA protocols. This script does Modbus device information disclosure. It tries to find legal sids slave ids of Modbus devices and to get additional information about the vendor and firmwar...

Device Information (devinfo.xml)

It was possible to download the file 'devinfo.xml' from the remote web server. This file is intended to be read by a setup utility. It contains a description of the device, installation instructions and sometimes credentials for an Internet subscription. C Tenable Network Security, Inc...

Phenoelit ADvisory 0815 ++ ** Ascend

Phenoelit Advisory wir-haben-auch-mal-was-gefunden 0815 +--- Authors FX [email protected] kim0 [email protected] Phenoelit Group http://www.phenoelit.de Advisory http://www.phenoelit.de/stuff/LucentAscend.txt Affected Products Lucent Pipline, MAX, DSL-Terminator. Formerly known under Ascend Router...

PT-2010-5668 · Suse +1 · Suse Linux Enterprise +4

Name of the Vulnerable Software and Affected Versions: SUSE Linux Enterprise versions prior to the fixed version btrfs-kmp-xen versions affected versions not specified btrfs-kmp-pae versions affected versions not specified kernel-desktop-devel versions affected versions not specified Description:...