CVE-2007-5383

The Thomson/Alcatel SpeedTouch 7G router, as used for the BT Home Hub 6.2.6.B and earlier, allows remote attackers on an intranet to bypass authentication and gain administrative access via vectors including a '/' slash character at the end of the PATHINFO to cgi/b, aka "double-slash auth bypass....

CVE-2007-5384

Multiple cross-site request forgery CSRF vulnerabilities in the Thomson/Alcatel SpeedTouch 7G router, as used for the BT Home Hub 6.2.6.B and earlier, allow remote attackers to perform actions as administrators via unspecified POST requests, as demonstrated by enabling an inbound remote-assistanc...

CVE-2007-5384

CVE-2007-5384 involves CSRF flaws in the Thomson/Alcatel SpeedTouch 7G router (used by BT Home Hub 6.2.6.B and earlier). The vulnerabilities allow remote attackers to perform administrator actions via unspecified POST requests, demonstrated by enabling an inbound remote‑assistance HTTPS session o...

CVE-2007-5385

Technical details about CVE-2007-5385 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2007-5385: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Thomson/Alcatel SpeedTouch 7G router, as used for the BT Home Hub 6.2.6.B and earlier, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2007-5384: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the Thomson/Alcatel SpeedTouch 7G router, as used for the BT Home Hub 6.2.6.B and earlier, allow remote attackers to perform actions as administrators via unspecified POST requests, as demonstrated by enabling an inbound remote-assistanc...

CVE-2007-5383: Improper Authentication

The Thomson/Alcatel SpeedTouch 7G router, as used for the BT Home Hub 6.2.6.B and earlier, allows remote attackers on an intranet to bypass authentication and gain administrative access via vectors including a '/' slash character at the end of the PATHINFO to cgi/b, aka "double-slash auth bypass....

BT Home Flub: Pwnin the BT Home Hub

http://www.gnucitizen.org/blog/bt-home-flub-pwnin-the-bt-home-hub The BT Home Hub, which is probably the most popular home router in the UK, is susceptible to critical vulnerabilities. BT's plan is to sneak one of this boxes into every UK home. Not only does the BT Home Hub support broadband but...

Microsoft MFC库CFileFind::FindFile缓冲区溢出漏洞

Microsoft Windows是一款流行的操作系统。 Microsoft Windows包含的MFC库处理CFileFind::FindFile方法存在缓冲区溢出，远程攻击者可以利用漏洞以链接此库的应用程序权限执行任意指令。 问题存在于MFC库包含的FindFile函数中，FindFile函数管理垮文件系统文件搜索，可指定文件类型进行搜索。FindFile函数为buffer1分配内存，buffer1用于存储function2的第一个参数，而没有对其大小进行检查。这个数据用于开始一个搜索。...

Microsoft Visual Basic 6.0 - VBP_Open OLE Local CodeExec

!/usr/bin/perl ' ++ Microsoft Visual Basic 6.0 Code Execution 0-Day ++ ' ++++++++++++++++++++++++++++++++++++++++++++++++++++++ '++ Author: Koshi + '++ Email: heykoshi at gmail dot com + '++ Application: Microsoft Visual Basic 6.0 + '++ + '++ Tested on Microsoft Windows XP Home Edition SP2 + '++...

Through the Asp's invasion Webserver-vulnerability warning-the black bar safety net

Through the asp's invasion of the web server,steal the files to destroy the system, which solve the non-sensational... iis security issues 1. iis3/pws vulnerability I experimented, win98+pws running on ASP program, you'll be in the browser address bar within a decimal point of the ASP program wil...

Stack overflow

Multiple stack-based buffer overflows in 1 CCEpinyin.c and 2 xlpinyin.c in ImmModules/cce/ in unicon-imc2 3.0.4, as used by zhcon and other applications, allow local users to gain privileges via a long HOME environment variable...

DEBIAN-CVE-2007-2835

Multiple stack-based buffer overflows in 1 CCEpinyin.c and 2 xlpinyin.c in ImmModules/cce/ in unicon-imc2 3.0.4, as used by zhcon and other applications, allow local users to gain privileges via a long HOME environment variable...

CVE-2007-2835

Multiple stack-based buffer overflows in 1 CCEpinyin.c and 2 xlpinyin.c in ImmModules/cce/ in unicon-imc2 3.0.4, as used by zhcon and other applications, allow local users to gain privileges via a long HOME environment variable...

CVE-2007-2835

Multiple stack-based buffer overflows in 1 CCEpinyin.c and 2 xlpinyin.c in ImmModules/cce/ in unicon-imc2 3.0.4, as used by zhcon and other applications, allow local users to gain privileges via a long HOME environment variable...

CVE-2007-2835

Multiple stack-based buffer overflows in 1 CCEpinyin.c and 2 xlpinyin.c in ImmModules/cce/ in unicon-imc2 3.0.4, as used by zhcon and other applications, allow local users to gain privileges via a long HOME environment variable...

CVE-2007-2835: Undefined Security Weakness

Multiple stack-based buffer overflows in 1 CCEpinyin.c and 2 xlpinyin.c in ImmModules/cce/ in unicon-imc2 3.0.4, as used by zhcon and other applications, allow local users to gain privileges via a long HOME environment variable...

[Full-disclosure] New Vulnerability against Firefox/ Major Extensions

This information also posted with html link goodness to http://paranoia.dubfire.net/2007/05/remote-vulnerability-in-firefox.html -------------------------- Executive Summary -------------------------- A vulnerability exists in the upgrade mechanism used by a number of high profile Firefox...

CVE-2007-2323

CVE-2007-2323 describes multiple buffer overflows in the WinDVDX ActiveX control used by InterVideo Home Theater (versions 2.1.13.0 and 2.5.13.58). The flaw allows remote attackers to execute arbitrary code by passing a long string to the GetDiscType or AddFileList methods. The vulnerability is r...

CVE-2007-2323: Undefined Security Weakness

Multiple buffer overflows in the WinDVDX ActiveX control in InterVideo Home Theater 2.1.13.0 and 2.5.13.58 allow remote attackers to execute arbitrary code via a long string argument to the 1 GetDiscType or 2 AddFileList method. NOTE: the provenance of this information is unknown; the details are...