Huawei Flybox B660 - (POST SMS) CSRF Web Vulnerability

Document Title: =============== Huawei Flybox B660 - POST SMS CSRF Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2026 Release Date: ============= 2017-01-12 Vulnerability Laboratory ID VL-ID: ==================================== 2026...

Google Patches Android 'Custom Boot Mode' Vulnerability

A high-risk Android custom boot mode vulnerability was one of many bugs patched by Google as part of its January Android Security Bulletin released earlier this week. On Thursday, the IBM security team that discovered the vulnerability disclosed details about the flaw which leaves Nexus 6 and 6P...

Zyxel / Eir D1000 DSL Modem NewNTPServer Command Injection Over TR-064 Exploit

Broadband DSL modems manufactured by Zyxel and distributed by some European ISPs are vulnerable to a command injection vulnerability when setting the 'NewNTPServer' value using the TR-64 SOAP-based configuration protocol. In the tested case, no authentication is required to set this value on...

Zyxel/Eir D1000 DSL Modem NewNTPServer Command Injection Over TR-064

require 'msf/core' class MetasploitModule 'Zyxel/Eir D1000 DSL Modem NewNTPServer Command Injection Over TR-064', 'Description' = %q Broadband DSL modems manufactured by Zyxel and distributed by some European ISPs are vulnerable to a command injection vulnerability when setting the 'NewNTPServer'...

Irancell WIMAX Modem WIXFMM-130 CSRF Accounting User Password Viewer Vulnerability

Exploit for cgi platform in category web applications Exploit Title: Irancell WIMAX Modem WIXFMM-130 CSRF Accounting User Password Viewer Vendor Homepage: http://wimax.irancell.ir/Portal/Home/ Version: WIXFMM-130 Exploit : http://192.168.1.1/ajax.cgi?action=taginitwimaxauth.php Result :...

Linksys WAG120N ADSL2 + Modem Router Download Config File Vulnerability

Exploit for cgi platform in category web applications Exploit Title: Linksys WAG120N ADSL2 + Modem Router Download Config File Vulnerability Vendor Homepage: http://www.linksys.com/in/support-product?pid=01t80000003prsQAAQ Exploit : http://192.168.1.1/Routercfg.cfg Open Routercfg.cfg with Notepad...

Eagle Speed USB Modem Software Privilege Escalation Exploit

Eagle Speed USB modem software suffers from a privilege escalation vulnerability. !/usr/bin/python -w Title : Eagle Speed USB MODEM SOFTWARE Privilege Escalation Date : 28/11/2016 Author : R-73eN Tested on : Windows 7 Latest version of the software Software : N/A Comes with the USB Modem...

Tenda / Dlink / Tplink TD-W8961ND - DHCP Cross-Site Scripting Vulnerability

Exploit for hardware platform in category web applications Document Title: =============== Tenda, Dlink & Tplink TD-W8961ND - DHCP XSS Vulnerability Abstract Advisory Information: ============================== The vulnerability laboratory research team discovered a persistent xss vulnerability i...

Router high-risk vulnerabilities induced the German telecommunications ultra 90 million users suffered network disruption-vulnerability warning-the black bar safety net

! Event overview Last weekend millions of German Internet users suffered a series of network outages, investigate its reason is a failure of the home routers hijacked. Deutsche Telekom's 2000 million users with 90 million users received the interrupt effect from the last Sunday continues to prese...

Eagle Speed USB Modem Software Privilege Escalation

!/usr/bin/python -w Title : Eagle Speed USB MODEM SOFTWARE Privilege Escalation Date : 28/11/2016 Author : R-73eN Tested on : Windows 7 Latest version of the software Software : N/A Comes with the USB Modem Vulnerability Description: When the Eagle Speed software is installed a service with name...

TendaDlinkTplink TD-W8961ND - DHCP Cross-Site Scripting

TendaDlinkTplink TD-W8961ND - DHCP Cross-Site Scripting Document Title: =============== Tenda, Dlink & Tplink TD-W8961ND - DHCP XSS Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1990 Release Date: ============= 2016-11-28 Vulnerability...

Tenda / D-Link / TP-Link DHCP Cross Site Scripting

Document Title: =============== Tenda, Dlink & Tplink TD-W8961ND - DHCP XSS Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1990 Release Date: ============= 2016-11-28 Vulnerability Laboratory ID VL-ID: ====================================...

Tenda, Dlink & Tplink TD-W8961ND - DHCP XSS Vulnerability

Document Title: =============== Tenda, Dlink & Tplink TD-W8961ND - DHCP XSS Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1990 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-20372...

Tenda, Dlink & Tplink TD-W8961ND - DHCP XSS Vulnerability

Document Title: =============== Tenda, Dlink & Tplink TD-W8961ND - DHCP XSS Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1990 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-20372...

Huawei Flybox B660 3G/4G Router Authentication Bypass

Document Title: =============== Huawei Flybox B660 3G/4G Router - Auth Bypass Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2010 Huawei ID: 558969357627813 Release Date: ============= 2016-11-18 Vulnerability Laboratory ID VL-ID:...

Huawei Flybox B660 3G/4G Router Authentication Bypass Vulnerability

Huawei Flybox B660 3G/4G router suffers from an authentication bypass vulnerability. Document Title: =============== Huawei Flybox B660 3G/4G Router - Auth Bypass Vulnerability Product & Service Introduction: =============================== The Huawei B660 has a web interface for configuration. Y...

Eir D1000 Modem CWMP Remote Command Execution

The Eir D1000 Modem has bugs that allow an attacker to gain full control of the modem from the Internet. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

DLink ADSL Router DSL-2730U IN_1.02 Remote File Disclosure Vulnerability

Exploit for hardware platform in category remote exploits !/bin/sh D-Link ADSL ROUTER DSL-2730U IN1.02 Remote File Disclosure Modem Name: DSL-2730U Time and Date: 2012-05-23 09:51:16 HardwareVersion: U1 Firmware Version: IN1.02 Copyright 2016 c Todor Donev https://www.ethical-hacker.org/...

DLink ADSL Router DSL-2750U IN_1.02 Remote File Disclosure Vulnerability

D-Link ADSL router DSL-2750U with firmware version IN1.02 suffers from a file disclosure vulnerability. !/bin/sh D-Link ADSL ROUTER DSL-2750U IN1.02 Remote File Disclosure Modem Name: DSL-2750U Firmware Version: IN1.02 Copyright 2016 c Todor Donev https://www.ethical-hacker.org/...

DLink ADSL Router DSL-2750E SEA_1.04 Remote File Disclosure Vulnerability

Exploit for hardware platform in category remote exploits !/bin/sh D-Link ADSL ROUTER DSL-2750E SEA1.04 Remote File Disclosure Modem Name: DSL-2750E Firmware Version: SEA1.04 Copyright 2016 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Disclaimer: This or...