华为SmartAX MT880跨站请求伪造漏洞

SmartAX MT880是一款小型的ADSL调制解调器。 SmartAX MT880基于Web的管理界面允许用户通过提交HTTP请求执行某些操作。由于没有对请求执行重复的验证检查，如果已登录的管理用户访问了恶意网页，就可能导致添加管理用户或更改某些配置。 0 Huawei SmartAX MT880 厂商补丁： Huawei ------ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.huawei.com/...

Multiple Flaws in Huawei SmartAX MT880 [was: Multiple Flaws in Huawei D100]

Description: Huawei MT880 is a device offered by the algerian telecom operator - FAWRI, to provide ADSL Internet connexion and it's already widely in use. Overview: Huawei MT880 firmware and its default configuration has flaws, which allows LAN users to gain unauthorized full access to device. He...

Absolute Software Computrace LoJack for Laptops安全绕过漏洞

Bugraq ID: 35889 Absolute Software Computrace LoJack for Laptop是一款笔记本防盗解决方案，笔记本被偷后可向监听中心提供笔记本的IP地址或者电话号码。 程序存在安全绕过问题，攻击者可以方便的修改配置，控制应用程序的通信到恶意IP或URL，导致未授权的负载直接定向到笔记本电脑上。 目前没有详细的漏洞细节提供。 Absolute Software Computrace LoJack for Laptops 目前没有详细解决方案提供： http://www.absolute.com/...

“Broiler”get the insider Secret's to exploit system vulnerabilities-vulnerability warning-the black bar safety net

It has been, by a large number of“broiler”is composed of the zombiesweb, all the time not a threat to all web users safe.“ Chicken”, refers to those who are the attacker full control of a computer network, it is the composition of the botnet of the main factors. Therefore, in order to eliminate t...

Exclusive tells the story: use the Lcx to the internal network port forwarding-bug warning-the black bar safety net

Through this case study you can learn to: 1learn about port forwarding the relevant knowledge 2Using the toolsoftwarelcx to perform port forwarding Lcx. exe is a port forwarding tool, equivalent to the broiler on A 3 3 8 9 port forwarding to an external network IP address of B machine, so the...

Tandberg MXP F7.0 - 'USER' Remote Buffer Overflow (PoC)

TANDBERG BoF v0.1 - Tandberg MXP F7.0 Buffer Overflow Vulnerability PoC By otokoyama + We crash the process FtpCt00 by sending a 251 char string of /x20 commonly known as a blank space.very simple + The BOF happens due to the system passing all usernames:passwords to a log file. + Vendor has fixe...

Command injection

The connectionedgeprocessrelaycellnotopen function in src/or/relay.c in Tor 0.2.x before 0.2.0.35 and 0.1.x before 0.1.2.8-beta allows exit relays to have an unspecified impact by causing controllers to accept DNS responses that redirect to an internal IP address via unknown vectors. NOTE: some o...

CVE-2009-2426

The connectionedgeprocessrelaycellnotopen function in src/or/relay.c in Tor 0.2.x before 0.2.0.35 and 0.1.x before 0.1.2.8-beta allows exit relays to have an unspecified impact by causing controllers to accept DNS responses that redirect to an internal IP address via unknown vectors. NOTE: some o...

CVE-2009-2426

The connectionedgeprocessrelaycellnotopen function in src/or/relay.c in Tor 0.2.x before 0.2.0.35 and 0.1.x before 0.1.2.8-beta allows exit relays to have an unspecified impact by causing controllers to accept DNS responses that redirect to an internal IP address via unknown vectors. NOTE: some o...

CVE-2009-2426

The connectionedgeprocessrelaycellnotopen function in src/or/relay.c in Tor 0.2.x before 0.2.0.35 and 0.1.x before 0.1.2.8-beta allows exit relays to have an unspecified impact by causing controllers to accept DNS responses that redirect to an internal IP address via unknown vectors. NOTE: some o...

tor-devel -- DNS resolution vulnerability

The Tor Project reports: A malicious exit relay could convince a controller that the client's DNS question resolves to an internal IP address...

New attack class exploits intranet weaknesses

A security researcher has developed an interesting new class of attacks that exploit the problems caused by organizations using non-routable IP space on their internal networks, including one attack that compromises VPN users through the use of a persistent JavaScript backdoor. The attacks rely o...

CVE-2008-6123

The netsnmpudpfmtaddr function snmplib/snmpUDPDomain.c in net-snmp 5.0.9 through 5.4.2.1, when using TCP wrappers for client authorization, does not properly parse hosts.allow rules, which allows remote attackers to bypass intended access restrictions and execute SNMP queries, related to...

FreeBSD : phpBB IP address spoofing (cfe17ca6-6858-4805-ba1d-a60a61ec9b4d)

The common.php script always trusts the X-Forwarded-For' header in the client's HTTP request. A remote user could forge this header in order to bypass any IP address access control lists ACLs. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

Design/Logic Flaw

Unspecified vulnerability in Epona 1.5rc3 allows remote attackers to obtain the real IP address of users via unknown vectors...

CVE-2008-6601

Unspecified vulnerability in Epona 1.5rc3 allows remote attackers to obtain the real IP address of users via unknown vectors...

CVE-2008-6601

Unspecified vulnerability in Epona 1.5rc3 allows remote attackers to obtain the real IP address of users via unknown vectors...

CVE-2008-6601

CVE-2008-6601 concerns an unspecified vulnerability in Epona 1.5rc3 that allows remote attackers to obtain the real IP address of users via unknown vectors. The NVD entry lists a network attack vector with low attack complexity and no authentication required, and indicates a partial confidentiali...

Vulnerabilities in DNS and WINS Server Could Allow Spoofing (962238)

This host is missing a critical security update according to Microsoft Bulletin MS09-008. OpenVAS Vulnerability Test $Id: secpodms09-008.nasl 5363 2017-02-20 13:07:22Z cfi $ Vulnerabilities in DNS and WINS Server Could Allow Spoofing 962238 Authors: Chandan S Updated By: Madhuri D on 2010-12-03 -...

CVE-2009-0362

filter.d/wuftpd.conf in Fail2ban 0.8.3 uses an incorrect regular expression that allows remote attackers to cause a denial of service forced authentication failures via a crafted reverse-resolved DNS name rhost entry that contains a substring that is interpreted as an IP address, a different...