CVE-2014-0706

CVE-2014-0706 affects Cisco Wireless LAN Controller (WLC) devices: 7.2 before 7.2.115.2, 7.3, and 7.4 before 7.4.110.0. A crafted 802.11 Ethernet frame can be processed in a way that causes a denial of service, resulting in a device restart. Root cause is improper handling of forged/crafted Ether...

CVE-2014-0707

CVE-2014-0707 affects Cisco Wireless LAN Controller (WLC) devices in versions 7.2, 7.3, and 7.4 prior to 7.4.110.0. The vulnerability allows remote attackers to cause a denial of service (device restart) by sending a crafted 802.11 Ethernet frame. Root cause is related to how WLC handles these fr...

CVE-2014-0703

Cisco Wireless LAN Controller WLC devices 7.4 before 7.4.110.0 distribute Aironet IOS software with a race condition in the status of the administrative HTTP server, which allows remote attackers to bypass intended access restrictions by connecting to an Aironet access point on which this server...

CVE-2014-0701

Cisco WLCs are affected by CVE-2014-0701: memory not properly deallocated during WebAuth login handling, enabling remote attackers to cause a DoS reboot by sending WebAuth requests at high rate. Affected versions include 7.0 before 7.0.250.0, 7.2, 7.3, and 7.4 before 7.4.110.0. The issue is tied ...

CVE-2014-0703

Cisco WLC devices running 7.4 before 7.4.110.0 distribute Aironet IOS software that contains a race condition in the status of the administrative HTTP server. This allows remote attackers to bypass access restrictions by connecting to an Aironet AP where the server was disabled ineffectively. The...

CVE-2014-0705

The multicast listener discovery MLD service on Cisco Wireless LAN Controller WLC devices 7.2, 7.3, 7.4 before 7.4.121.0, and 7.5, when MLDv2 Snooping is enabled, allows remote attackers to cause a denial of service device restart via a malformed IPv6 MLDv2 packet, aka Bug ID CSCuh74233...

CVE-2014-0706

Cisco Wireless LAN Controller WLC devices 7.2 before 7.2.115.2, 7.3, and 7.4 before 7.4.110.0 allow remote attackers to cause a denial of service device restart via a crafted 802.11 Ethernet frame, aka Bug ID CSCue87929...

CVE-2014-0701

Cisco Wireless LAN Controller WLC devices 7.0 before 7.0.250.0, 7.2, 7.3, and 7.4 before 7.4.110.0 do not properly deallocate memory, which allows remote attackers to cause a denial of service reboot by sending WebAuth login requests at a high rate, aka Bug ID CSCuf52361...

Cisco Wireless LAN Controller远程拒绝服务漏洞(CVE-2014-0705)

BUGTRAQ ID: 65982 CVECAN ID: CVE-2014-0705 Cisco WLC 负责全系统的无线LAN功能，例如安全策略、入侵保护、RF管理，服务质量和移动性。 Cisco Wireless LAN Controller的MLD服务没有正确解析畸形MLDv2消息，未经身份验证的远程攻击者可利用此漏洞造成拒绝服务。 0 Cisco Wireless LAN Controller 厂商补丁： Cisco ----- Cisco已经为此发布了一个安全公告（cisco-sa-20140305-wlc）以及相应补丁:...

Multiple Vulnerabilities in Cisco Wireless LAN Controllers

The Cisco Wireless LAN Controller WLC product family is affected by the following vulnerabilities: Cisco Wireless LAN Controller Denial of Service Vulnerability Cisco Wireless LAN Controller Unauthorized Access to Associated Access Points Vulnerability Cisco Wireless LAN Controller IGMP Version 3...

Researchers Find Serious Flaws in WeMo Home Automation Devices

UPDATE–There has been a joke going around the tech industry for years about refrigerators and other home appliances one day being connected to the Internet and being able to order more milk for you or allow you to turn off your lights remotely. That day is today, and those Internet-connected...

Linksys系列未明远程代码执行漏洞

No description provided by source. !/usr/bin/php ?php / Exploit for 0day linksys unauthenticated remote code execution vulnerability. As exploited by TheMoon worm; Discovered in the wild on Feb 13, 2013 by Johannes Ullrich. I was hoping this would stay under-wraps until a firmware patch could be...

Linksys E-Series Remote Code Execution

!/usr/bin/php ?php / Exploit for 0day linksys unauthenticated remote code execution vulnerability. As exploited by TheMoon worm; Discovered in the wild on Feb 13, 2013 by Johannes Ullrich. I was hoping this would stay under-wraps until a firmware patch could be released, but it appears the cat is...

Linksys E-series Unauthenticated Remote Code Execution Exploit

Linksys E-Series unauthenticated remote command execution exploit that leverages the same vulnerability as used in the "Moon" worm. !/usr/bin/php ?php / Exploit for 0day linksys unauthenticated remote code execution vulnerability. Currently only working over the LAN. I think there may be an...

Linksys E-series - Remote Code Execution

Linksys E-series - Remote Code Execution !/usr/bin/php ?php / Exploit for 0day linksys unauthenticated remote code execution vulnerability. As exploited by TheMoon worm; Discovered in the wild on Feb 13, 2013 by Johannes Ullrich. I was hoping this would stay under-wraps until a firmware patch cou...

Linksys E-series - Remote Code Execution

!/usr/bin/php ?php / Exploit for 0day linksys unauthenticated remote code execution vulnerability. As exploited by TheMoon worm; Discovered in the wild on Feb 13, 2013 by Johannes Ullrich. I was hoping this would stay under-wraps until a firmware patch could be released, but it appears the cat is...

Cisco Unified Computing System Serial over LAN Static Private Key Vulnerability (CSCte90338)

A vulnerability in the Cisco Unified Computing System Serial over LAN SoL implementation could allow an unauthenticated, remote attacker to perform a man-in-the-middle MITM attack. The vulnerability occurs because the Board Management Controller BMC uses a hard-coded private key. An attacker coul...

Security Advisory: NETGEAR Router D6300B Firmware: V1.0.0.14_1.0.14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory ID: SYSS-2013-001 Product: NETGEAR Router D6300B / Firmware: V1.0.0.141.0.14 latest Vendor: Netgear Affected Versions: until V1.0.0.141.0.14 latest Tested Versions: V1.0.0.141.0.14 latest Vulnerability Type: Root-Shell, OS Command Injection,...

Netgear D6300B Command Injection / Misconfiguration

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory ID: SYSS-2013-001 Product: NETGEAR Router D6300B / Firmware: V1.0.0.141.0.14 latest Vendor: Netgear Affected Versions: until V1.0.0.141.0.14 latest Tested Versions: V1.0.0.141.0.14 latest Vulnerability Type: Root-Shell, OS Command Injection,...

[TYFYP] Massive Telnet Password Tester

Commercial name: TYFYP Thank you for your password, to the honor of ADTRAN telnet banner motd welcome message. Please use it ONLY in LAN IPs. This is a very rudimentary program only for investigation purposes. Developed on Retina Display machine, so there may be UI errors in normal resolution...