D-Link DIR-615H - OS Command Injection (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'D-Link DIR615h OS Command Injection',...

D-Link DIR615h OS Command Injection Vulnerability

Some D-Link Routers are vulnerable to an authenticated OS command injection on their web interface, where default credentials are admin/admin or admin/password. Since it is a blind os command injection vulnerability, there is no output for the executed command when using the cmd generic payload...

D-Link DIR615h OS Command Injection

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'D-Link DIR615h OS Command Injection',...

Glibc 2.11.3 / 2.12.x LD_AUDIT libmemusage.so Local Root

!/bin/sh + Glibc /tmp/payload.c /dev/null echo "+ Filling the lib file with lib contents." cat /tmp/exploit /lib/sploit.so rm /tmp/payload.c /tmp/exploit echo "+ Executing payload.." LDAUDIT="sploit.so" ping...

Security fix for the ALT Linux 8 package krb5 version 1.11.2-alt2

May 14, 2013 Ivan A. Melnikov 1.11.2-alt2 - add patch 23 from upstream git to fix kpasswd udp ping-pong CVE-2002-2443...

Security fix for the ALT Linux 9 package krb5 version 1.11.2-alt2

May 14, 2013 Ivan A. Melnikov 1.11.2-alt2 - add patch 23 from upstream git to fix kpasswd udp ping-pong CVE-2002-2443...

Security fix for the ALT Linux 7 package krb5 version 1.11.2-alt2

May 14, 2013 Ivan A. Melnikov 1.11.2-alt2 - add patch 23 from upstream git to fix kpasswd udp ping-pong CVE-2002-2443...

D-Link DIR-635 Cross Site Request Forgery / Cross Site Scripting

Device Name: DIR-635 Vendor: D-Link ============ Vulnerable Firmware Releases: ============ Firmwareversion: 2.34EU Hardware-Version: B1 Produktseite: DIR-635 ============ Vulnerability Overview: ============ Stored XSS - Status - WLAN - SSID Injecting scripts into the parameter...

Netgear DGN2200B pppoe.cgi Remote Command Execution Vulnerability

Some Netgear Routers are vulnerable to an authenticated OS command injection on their web interface. Default credentials for the web interface are admin/admin or admin/password. Since it is a blind os command injection vulnerability, there is no output for the executed command when using the cmd...

Netgear DGN2200B pppoe.cgi Remote Command Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Netgear DGN2200B pppoe.cgi Remote...

DLink DIR-645 / DIR-815 Command Execution Vulnerability

Exploit for hardware platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core...

DLink DIR-645 / DIR-815 diagnostic.php Command Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'DLink DIR-645 / DIR-815 diagnostic.ph...

Linksys WRT54GL - 'apply.cgi' Command Execution (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Linksys WRT54GL apply.cgi Command...

Linksys WRT54GL apply.cgi Command Execution

Exploit for hardware platform in category remote exploits require 'msf/core' class Metasploit3 'Linksys WRT54GL apply.cgi Command Execution', 'Description' = %q Some Linksys Routers are vulnerable to an authenticated OS command injection in the Web Interface. Default credentials are admin/admin o...

Netgear DGN1000B setup.cgi Remote Command Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Netgear DGN1000B setup.cgi Remote...

Netgear DGN1000B setup.cgi Remote Command Execution Vulnerability

Some Netgear Routers are vulnerable to authenticated OS Command injection. The vulnerability exists in the web interface, specifically in the setup.cgi component, when handling the TimeToLive parameter. Default credentials are always a good starting point, admin/admin or admin/password could be a...

Linksys E1500/E2500 apply.cgi Remote Command Injection

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Linksys E1500/E2500 apply.cgi Remote...

Linksys E1500/E2500 apply.cgi Remote Command Injection Vulnerability

Some Linksys Routers are vulnerable to an authenticated OS command injection. Default credentials for the web interface are admin/admin or admin/password. Since it is a blind os command injection vulnerability, there is no output for the executed command when using the cmd generic payload. A ping...

HP LeftHand Virtual SAN Appliance hydra Ping Processing Buffer Overflow (CVE-2012-3285)

A stack buffer overflow vulnerability exists in HP LeftHand Virtual SAN Appliance. The vulnerability is due to insufficient input validation on target hostname or IP address of a Ping request sent to the hydra service which listens by default on port 13838/TCP. A remote attacker can exploit this...

[SECURITY] [DSA 2645-1] inetutils security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2645-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez March 14, 2013 http://www.debian.org/security/faq -...