D-Link DIR-866L 'HNAP' and 'Send Email' Function Buffer Overflow Vulnerability

D-Link DIR-866L is a wireless router product from AUO D-Link. A buffer overflow vulnerability exists in the D-Link DIR-866L. An attacker can exploit this vulnerability to execute arbitrary code in an affected application, which may also result in a denial of service...

IRS Releases First in a Series of Tax Security Tips

The Internal Revenue Service IRS has released the first in a series of tips intended to increase public awareness of how to protect personal and financial data online and at home. A new tip will be available each Monday through the start of the tax season in January. The first tip focuses on seve...

Sam Spade 1.14 - Browse URL Buffer Overflow PoC

Exploit for windows platform in category dos / poc !/usr/bin/env python Exploit Title : Sam Spade 1.14 Browse URL Buffer Overflow PoC Discovery by : Nipun Jaswal Email : email protected Discovery Date : 14/11/2015 Vendor Homepage : http://samspade.org Software Link :...

D-Link DIR-615 Buffer Overflow Vulnerability

D-Link DIR-615 suffers from multiple buffer overflow vulnerabilities. Title: Dlink DIR-615 Authenticated Buffer overflow in Ping and Send email functionality Vendors contacted: William Brown , Patrick Cline email protected CVE: None Note: All these security issues have been discussed with the...

PowerTools - Collection Of PowerShell Projects With A Focus On Offensive Operations

Veil's PowerTools are a collection of PowerShell projects with a focus on offensive operations. This collection contains five projects: PowerUp PowerBreach PowerPick PewPewPew PowerView PowerUp PowerUp is a powershell tool to assist with local privilege escalation on Windows systems. It contains...

D-Link DIR-817LW Buffer Overflow / Command Injection Vulnerabilities

D-Link DIR-817LW suffers from buffer overflow and command injection vulnerabilities. Title: DIR-817LW Buffer overflows and Command injection in authentication and HNAP functionalities Vendors contacted: William Brown , Patrick Cline email protected CVE: None Note: All these security issues have...

D-Link DIR-818W - Multiple Vulnerabilities

Advisory Information Title: DIR-818W Buffer overflows and Command injection in authentication and HNAP functionalities Vendors contacted: William Brown , Patrick Cline [email protected] CVE: None Note: All these security issues have been discussed with the vendor and vendor indicated...

D-Link DIR-818W Buffer Overflow / Command Injection

Advisory Information Title: DIR-818W Buffer overflows and Command injection in authentication and HNAP functionalities Vendors contacted: William Brown , Patrick Cline [email protected] CVE: None Note: All these security issues have been discussed with the vendor and vendor indicated...

D-Link DIR-866L - Multiple Buffer Overflow Vulnerabilities

Advisory Information Title: DIR-866L Buffer overflows in HNAP and send email functionalities Vendors contacted: William Brown , Patrick Cline [email protected] CVE: None Note: All these security issues have been discussed with the vendor and vendor indicated that they have fixed issues...

D-Link DIR-825 (vC) - Multiple Vulnerabilities

Advisory Information Title: DIR-825 vC Buffer overflows in authentication,HNAP and ping functionalities. Also a directory traversal issue exists which can be exploited Vendors contacted: William Brown , Patrick Cline [email protected] CVE: None Note: All these security issues have been...

D-Link DIR-615 Buffer Overflow

Advisory Information Title: Dlink DIR-615 Authenticated Buffer overflow in Ping and Send email functionality Vendors contacted: William Brown , Patrick Cline [email protected] CVE: None Note: All these security issues have been discussed with the vendor and vendor indicated that they...

Alcatel-Lucent Home Device Manager Unauthorized Access Vulnerability

Alcatel-Lucent Home Device Manager is a device manager that allows you to manage and control your home network devices through a help desk. A security vulnerability exists in Alcatel-Lucent Home Device Manager that could be exploited by remote attackers to conduct spoofing attacks and perform...

home-patch.fr XSS vulnerability

Vulnerable URL: http://www.home-patch.fr/recherche.html?motclef=%22%3E%3Csvg%2Fonload%3Dalert%28%2FXSSPOSED%2F%29%3E&valider.x;=11&valider.y;=15 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

bosch-home.ie XSS vulnerability

Vulnerable URL: http://www.bosch-home.ie/search-result-page.html?q=%22-alert%28%22XSSPOSED%22%29-%22 Details: Description| Value ---|--- Patched:| Yes, at 17.11.2015 Latest check for patch:| 17.11.2015 14:06 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 146942...

bosch-home.be XSS vulnerability

Vulnerable URL: http://www.bosch-home.be/nl/search.html?q=%22-alert%28%22XSSPOSED%22%29-%22 Details: Description| Value ---|--- Patched:| Yes, at 17.11.2015 Latest check for patch:| 17.11.2015 14:07 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 459240 Google...

bosch-home.co.nz XSS vulnerability

Vulnerable URL: http://www.bosch-home.co.nz/site-search.html?q=%22-alert%28%22XSSPOSED%22%29-%22 Details: Description| Value ---|--- Patched:| Yes, at 01.12.2015 Latest check for patch:| 01.12.2015 01:24 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1384456...

bosch-home.com.au XSS vulnerability

Vulnerable URL: http://www.bosch-home.com.au/site-search.html?q=%22-alert%28%22XSSPOSED%22%29-%22 Details: Description| Value ---|--- Patched:| Yes, at 17.11.2015 Latest check for patch:| 17.11.2015 14:13 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 435086...

jre7-openjdk: multiple issues

CVE-2015-4734 information disclosure It was discovered that the JGSS component of OpenJDK did not properly hide Kerberos realm information from all error exceptions when running under Security Manager. An untrusted Java application or applet could use this flaw to obtain certain information about...

jre8-openjdk-headless: multiple issues

CVE-2015-4734 information disclosure It was discovered that the JGSS component of OpenJDK did not properly hide Kerberos realm information from all error exceptions when running under Security Manager. An untrusted Java application or applet could use this flaw to obtain certain information about...

jre7-openjdk-headless: multiple issues

CVE-2015-4734 information disclosure It was discovered that the JGSS component of OpenJDK did not properly hide Kerberos realm information from all error exceptions when running under Security Manager. An untrusted Java application or applet could use this flaw to obtain certain information about...