CVE-2012-3247

Unspecified vulnerability on the HP Integrity Server BL860c i2, BL870c i2, and BL890c i2 with firmware before 26.31 and the HP Integrity Server rx2800 i2 with firmware before 26.30 allows local users to cause a denial of service via unknown vectors...

Korenix Jetport 5600 Series Hard-coded Credentials

Overview This advisory provides mitigation details for a vulnerability that impacts the Korenix JetPort 5600. Independent researcher Reid Wightman of Digital Bond identified undocumented hard-coded root credentials in the firmware of the Korenix JetPort 5600 system application without coordinatio...

foofus.net security advisory - Toshiba eStudio Multifunction Printer Information Leakage

============================================================================ Foofus.net Security Advisory: foofus-20111026 ============================================================================ Title: Toshiba eStudio Multifunction Printer Information Leakage Version: e-Studio series devices...

Singtel 2Wire Hardcoded Password / Cross Site Request Forgery

CVE-2011-3682: 2WIRE-SINGTEL 2701HGV-E/2700HGV-2/2700HG GATEWAY ROUTER MANAGEMENT AND DIAGNOSTIC CONSOLE VULNERABILITY 1. BACKGROUND AND AFFECTED MODELS/FIRMWARE SingTel provides customized versions of 2Wire gateway routers to its Internet service subscribers for the purpose of accessing the web...

foofus.net Security Advisory - Toshiba eStudio Multifunction Printer Authentication Bypass

============================================================================ Foofus.net Security Advisory: foofus-20111016 ============================================================================ Title: Toshiba EStudio Multifunction Printer Authentication Bypass Version: e-Studio series devic...

NETGEAR CG814WG Cross Site Request Forgery

Sense of Security - Security Advisory - SOS-11-011 Release Date. 20-Sep-2011 Last Update. - Vendor Notification Date. 22-Mar-2011 Product. NETGEAR Wireless Cable Modem Gateway CG814WG Affected versions. Hardware 1.03, Software V3.9.26 R14 verified, possibly others Severity Rating. High Impact...

[RT-SA-2011-003] Authentication Bypass in Configuration Import and Export of ZyXEL ZyWALL USG Appliances

Advisory: Authentication Bypass in Configuration Import and Export of ZyXEL ZyWALL USG Appliances Unauthenticated users with access to the management web interface of certain ZyXEL ZyWALL USG appliances can download and upload configuration files, that are applied automatically. Details =======...

Rockwell PLC5/SLC5/0x/RSLogix Security Vulnerability

Overview Rockwell Automation has identified a security vulnerability in the programming and configuration client software authentication mechanism employed by certain versions of the PLC-5 and SLC 5/0x family of programmable controllers. Affected Products Rockwell PLC-5 and SLC 5/0x controllers a...

Belkin wireless router vulnerability-vulnerability warning-the black bar safety net

html head /head body bthis HTML code can bypass the webinterface password protection of the Belkin wireless router+ADSL2 modembr It work model F5D7632-4V6 with upgraded firmware 6. 0 1. 0 8/b br form action="http://192.168.2.1/cgi-bin/setupdns.exe" name=dnspoison method=post Change DNS domain nam...

Intel Desktop Board Bitmap Processing Buffer Overflow (INTEL-SA-00020)

The version of the Intel BIOS on the remote host is affected by a local buffer overflow vulnerability due to a flaw in its Bitmap processing code. A local attacker may be able to leverage this issue to trigger a denial of service or to escalate privileges. C Tenable Network Security, Inc...

Snom VoIP/SIP Phone Bypass

COMPASS SECURITY ADVISORY http://www.csnc.ch/en/downloads/advisories.html Product: Snom VoIP/SIP Phones Snom300, Snom320, Snom360, Snom370, Snom820 Vendor: snom technology AG CVD ID: CVE-2009-1048 Subject: Authentication Bypass of Snom Phone Web Interface Risk: High Effect: Remote Author: Walter...

2WIRE Routers - CD35_SETUP_01 Access Validation

2WIRE Routers - CD35SETUP01 Access Validation source: https://www.securityfocus.com/bid/36031/info Multiple 2Wire routers are prone to an access-validation vulnerability because they fail to adequately authenticate users before performing certain actions. Unauthenticated attackers can leverage th...

Netgear DG632 Denial Of Service

Product Name: Netgear DG632 Router Vendor: http://www.netgear.com Date: 15 June, 2009 Author: [email protected] Original URL: http://www.tomneaves.co.uk/NetgearDG632RemoteDoS.txt Discovered: 18 November, 2006 Disclosed: 15 June, 2009 I. DESCRIPTION The Netgear DG632 router has a web interface...

DDIVRT-2009-24 Precidia Ether232 Memory Corruption

Title ----- DDIVRT-2009-24 Precidia Ether232 Memory Corruption Severity -------- Medium Date Discovered --------------- March 10th, 2009 Discovered By ------------- Digital Defense, Inc. Vulnerability Research Team Credit: Steven James and princeofnigeria and r@b13$ Vulnerability Description...

Barracuda Message Archiver

CVE Numbers: CVE-2008-0971 Vulnerabilities: Multiple Cross-Site Scripting Persistent & Reflected Risk: Medium Attack vector: From Remote Vulnerabilities Discovered: 16th June 2008 Vendor Notified: 16th June 2008 Advisory Released: 15th December 2008 Abstract Barracuda Networks Message Archiver...

Barracuda Spam Firewall 3.5.11.020 Model 600 - SQL Injection

CVE Number: CVE-2008-1094 Vulnerability: SQL Injection Risk: Medium Attack vector: From Remote Vulnerability Discovered: 16th June 2008 Vendor Notified: 16th June 2008 Advisory Released: 15th December 2008 Abstract Barracuda Networks Spam Firewall is vulnerable to various SQL Injection attacks...

Belkin Wireless G Router ADSL2 Modem - Authentication Bypass

Belkin Wireless G Router ADSL2 Modem - Authentication Bypass html code to bypass the webinterface password protection of the Belkin wireless G router + adsl2 modem. It worked on model F5D7632-4V6 with upgraded firmware 6.01.08. Change dns nameservers ip's can't be the same Clear log file Change...

Asterisk IAX2固件升级报文放大远程拒绝服务漏洞

BUGTRAQ ID: 30350 CVECAN ID: CVE-2008-3264 Asterisk是开放源码的软件PBX，支持各种VoIP协议和设备。 远程用户可以向Asterisk服务器请求发送部分的固件镜像，但固件下载协议没有初始化握手，可能伪造源地址。此外，对固件文件的IAX2 FWDOWNL请求可能仅为40字节，但生成1040字节的响应。如果向多个不同的Asterisk服务器提交了请求的话，就可以用大量固件报文对用户站点执行flood攻击。 Asterisk Asterisk 1.4.x Asterisk Asterisk 1.2.x Asterisk Asterisk...

AirStation series and BroadStation series vulnerable to cross-site request forgery

Overview Buffalo's AirStation Series and BroadStation Series routers are vulnerable to cross-site request forgery. Buffalo's AirStation series and BroadStation series routers have a web administration interface that can be accessed from a web browser to configure their functional settings. The we...

CVE-2003-1346

CVE-2003-1346 affects D-Link DWL-900AP+ wireless access points (firmware versions 2.2, 2.3 and possibly 2.5). The issue allows remote attackers to restore factory default settings by upgrading the firmware via AirPlus Access Point Manager. The impact is description-based: factory defaults can be ...