Industrial Secure Routers EDR-810 / EDR-G902 / EDR-G903 - Insecure Configuration Management

No description provided by source...

Industrial Secure Routers EDR-810 / EDR-G902 / EDR-G903 Access Bypass Vulnerabilities

Industrial Secure Routers versions EDR-G903, EDR-G902, and EDR-G903 allow for unauthenticated administrative access. Title: Industrial Secure Routers - Insecure Configuration Management Type: Local/Remote Author: Nassim Asrir Author Company: HenceForth Impact: Insecure Configuration Management...

Industrial Secure Routers EDR-810 EDR-G902 EDR-G903 - Insecure Configuration Management

Industrial Secure Routers EDR-810 EDR-G902 EDR-G903 - Insecure Configuration Management Title: Industrial Secure Routers - Insecure Configuration Management Type: Local/Remote Author: Nassim Asrir Author Company: HenceForth Impact: Insecure Configuration Management Risk: 4/5 Release Date:...

Industrial Secure Routers EDR-810 / EDR-G902 / EDR-G903 - Insecure Configuration Management

Title: Industrial Secure Routers - Insecure Configuration Management Type: Local/Remote Author: Nassim Asrir Author Company: HenceForth Impact: Insecure Configuration Management Risk: 4/5 Release Date: 22.10.2016 Summary: Moxa's EDR series industrial Gigabit-performance secure routers are designe...

Industrial Secure Routers EDR-810 / EDR-G902 / EDR-G903 Access Bypass

Title: Industrial Secure Routers - Insecure Configuration Management Type: Local/Remote Author: Nassim Asrir Author Company: HenceForth Impact: Insecure Configuration Management Risk: 4/5 Release Date: 22.10.2016 Summary: Moxa's EDR series industrial Gigabit-performance secure routers are designe...

Multiple Backdoors found in D-Link DWR-932 B LTE Router

If you own a D-Link wireless router, especially DWR-932 B LTE router, you should get rid of it, rather than wait for a firmware upgrade that never lands soon. D-Link DWR-932B LTE router is allegedly vulnerable to over 20 issues, including backdoor accounts, default credentials, leaky credentials,...

FreeBSD : salt -- Insecure configuration of PAM external authentication service (6d25c306-f3bb-11e5-92ce-002590263bf5)

SaltStack reports : This issue affects all Salt versions prior to 2015.8.8/2015.5.10 when PAM external authentication is enabled. This issue involves passing an alternative PAM authentication service with a command that is sent to LocalClient, enabling the attacker to bypass the configured...

Grandstream Wave Redirection Vulnerability

Grandstream Wave is a suite of free VoIP applications. Grandstream Wave uses an insecure connection to obtain a configuration file, which allows an attacker to impersonate a configuration server with invalid, mismatched, or expired certificates, redirect phone calls, or cause dialed calls to...

salt -- Insecure configuration of PAM external authentication service

SaltStack reports: This issue affects all Salt versions prior to 2015.8.8/2015.5.10 when PAM external authentication is enabled. This issue involves passing an alternative PAM authentication service with a command that is sent to LocalClient, enabling the attacker to bypass the configured...

LG Nortel Disclosure / Insecure Configuration / DoS

Title: LG Nortel ADSL modems - Multiple vulnerabilities Discovered by: Karn Ganeshen Vendor Homepage: NA Version Reported: Board ID: DV2020+Product Version: S1.064B2.3H0-0 + Software Version: 3.04L.02V.sip.LE9500.dspApp3341A2pB022f.d19e Timelines April, 2015: Vulnerabilities found April 2015:...

CVE-2007-1743

suexec in Apache HTTP Server httpd 2.2.3 does not verify combinations of user and group IDs on the command line, which might allow local users to leverage other vulnerabilities to create arbitrary UID/GID owned files if /proc is mounted. NOTE: the researcher, who is reliable, claims that the vend...

CVE-2007-1742

suexec in Apache HTTP Server httpd 2.2.3 uses a partial comparison for verifying whether the current directory is within the document root, which might allow local users to perform unauthorized operations on incorrect directories, as demonstrated using "htmlbackup" and "htmleditor" under an "html...

Java JMX Server Insecure Configuration Java Code Execution

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Java JMX Server Insecure Configuration Java Code Execution', 'Description' = %q This module takes advantage a Java JMX interface...

Exim and Dovecot Insecure Configuration 命令执行漏洞

No description provided by source...

Geeklog <= 1.6.0sr1 Remote Arbitrary File Upload Vulnerability

No description provided by source. ============================================================================== Geeklog = v1.6.0sr1 - Remote Arbitrary File Upload Software Site: http://www.geeklog.net Dork: By Geeklog Created this page in +seconds +powered inurl:publichtml...

RealOne Player for Linux 2.2 Alpha Insecure Configuration File Permission Local Privilege Escalation

No description provided by source. source: http://www.securityfocus.com/bid/8571/info The configuration files for the RealOne Player are installed in the a hidden folder in a users home directory. The issue presents itself, because configuration files stored in this directory are installed with...

Linksys WAP55AG 1.0.7 SNMP Community String Insecure Configuration Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9688/info Linksys WAP55AG appliance has been reported prone to an insecure default configuration vulnerability. It has been reported that all SNMP MIB Management Information Base community strings, even read/write strings...

Mail.ru: [corp.mail.ru] CRLF Injection / Insecure nginx configuration

Сценарий перенаправления с http://corp.mail.ru/ на http://corp.mail.ru/ru/ уязвим к атаки типа CRLF Injection. PoC Установка cookie test=test на .mail.ru Подвержены все браузеры, кроме FireFox http://corp.mail.ru/%0dSet-Cookie:test=test;domain=.mail.ru; Может быть использовано в комбинации с...

Java JMX Server Insecure Configuration Java Code Execution

This module takes advantage a Java JMX interface insecure configuration, which would allow loading classes from any remote HTTP URL. JMX interfaces with authentication disabled com.sun.management.jmxremote.authenticate=false should be vulnerable, while interfaces with authentication enabled will ...

CVE-2011-4896

Tor before 0.2.2.24-alpha continues to use a reachable bridge that was previously configured but is not currently configured, which might allow remote attackers to obtain sensitive information about clients in opportunistic circumstances by monitoring network traffic to the bridge port...