Switch Port Mapping Tool 2.81 - SNMP Community Name Denial of Service PoC Exploit

Exploit for windows platform in category dos / poc Exploit Title: Switch Port Mapping Tool 2.81 - 'SNMP Community Name' Denial of Service PoC Discovery by: Luis Martinez Vendor Homepage: https://switchportmapper.com/ Software Link : http://download.switchportmapper.com/spm281.zip Tested Version:...

Switch Port Mapping Tool 2.81 - SNMP Community Name Denial of Service (PoC)

Switch Port Mapping Tool 2.81 - SNMP Community Name Denial of Service PoC Exploit Title: Switch Port Mapping Tool 2.81 - 'SNMP Community Name' Denial of Service PoC Discovery by: Luis Martinez Discovery Date: 2018-07-27 Vendor Homepage: https://switchportmapper.com/ Software Link :...

Switch Port Mapping Tool 2.81 - 'SNMP Community Name' Denial of Service (PoC)

Exploit Title: Switch Port Mapping Tool 2.81 - 'SNMP Community Name' Denial of Service PoC Discovery by: Luis Martinez Discovery Date: 2018-07-27 Vendor Homepage: https://switchportmapper.com/ Software Link : http://download.switchportmapper.com/spm281.zip Tested Version: 2.81 Vulnerability Type:...

Multiple SUSE Products SuSEfirewall2 Package Security Bypass Vulnerability

SUSE Linux Enterprise SLE Desktop and others are products of SUSE Corporation, U.S.A. SUSE Linux Enterprise SLE Desktop is an enterprise Linux desktop edition system.SLE Server is a server edition Linux system. SuSEfirewall2 package is one of the packages with network data filtering. A security...

Moxa Management Protocol Detection

Moxa SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.106693";...

UPnP Internet Gateway Device (IGD) Port Mapping Listing

According to its UPnP data, the remote device is a NAT router that supports the Internet Gateway Device IGD Standardized Device Control Protocol. Nessus was able to list 'port mappings' that redirect ports from the device's external interface to the scanner address. An unauthenticated, remote...

Nextcloud: Server side request forgery (SSRF) on nextcloud implementation.

An admin of nextcloud server can add other trusted nextcloud server in his own installation. The following request passes when a new add request is processed: http POST /nextcloud/index.php/apps/federation/trusted-servers HTTP/1.1 Host: myown.nextcloudserver.com User-Agent: Mozilla/5.0 Macintosh;...

UPnP IGD SOAP Port Mapping Utility

Manage port mappings on UPnP IGD-capable device using the AddPortMapping and DeletePortMapping SOAP requests This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'nokogiri' class MetasploitModule 'UPnP IGD SOAP Por...

NAT-PMP Security Vulnerability Affects 1.2M Routers

Vulnerabilities in embedded devices, in particular small office and home office routers, have been relentless. Another serious issue was discovered this week that affects more than 1.2 million such devices due to improper NAT-PMP protocol implementations, most of which run counter to the...

Incorrect implementation of NAT-PMP in multiple devices

Overview Many NAT-PMP devices are incorrectly configured, allowing them to field requests received on external network interfaces or map forwarding routes to addresses other than that of the requesting host, making them potentially vulnerable to information disclosure and malicious port mapping...

NAT-PMP Detection (remote network)

The remote device has the NAT-PMP protocol enabled. This protocol may allow any application on an internal subnet to request port mappings from the outside to the inside. If this service is reachable from the outside your network, it may allow a remote attacker to gain more information about your...

NAT-PMP Port Mapper

Map forward TCP and UDP ports on NAT devices using NAT-PMP This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'NAT-PMP Port Mapper', 'Description' = 'Map forward TCP and UDP ports on NAT devices...

nat-pmp-mapport NSE Script

Maps a WAN port on the router to a local port on the client using the NAT Port Mapping Protocol NAT-PMP. It supports the following operations: map - maps a new external port on the router to an internal port of the requesting IP unmap - unmaps a previously mapped port for the requesting IP unmapa...

CVE-2011-4505

The UPnP IGD implementation on SpeedTouch 5x6 devices with firmware before 6.2.29 allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an "external forwarding" vulnerability...

CVE-2011-4506

The CVE-2011-4506 entry concerns Thomson/Technicolor TG585 UPnP IGD implementation prior to firmware 7.4.3.2. Affected component: UPnP IGD SOAP AddPortMapping on WAN interface, enabling remote attackers to create arbitrary port mappings via an external forwarding vulnerability. Impact aligns with...

PT-2011-4968

Name of the Vulnerable Software and Affected Versions ZyXEL P-330W affected versions not specified Description The issue concerns the UPnP IGD implementation in the Pseudo ICS UPnP software, allowing remote attackers to establish arbitrary port mappings. This is achieved by sending a UPnP...

PT-2011-4969

Name of the Vulnerable Software and Affected Versions SpeedTouch 5x6 devices with firmware prior to 6.2.29 Description The issue allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface. This is related to an...

CVE-2011-4503: Undefined Security Weakness

The UPnP IGD implementation in Broadcom Linux on the Sitecom WL-111 allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an "external forwarding" vulnerability...

CVE-2011-4505: Undefined Security Weakness

The UPnP IGD implementation on SpeedTouch 5x6 devices with firmware before 6.2.29 allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an "external forwarding" vulnerability...

CVE-2011-4506: Undefined Security Weakness

The UPnP IGD implementation on the Thomson aka Technicolor TG585 with firmware 7.x before 7.4.3.2 allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an "external forwarding" vulnerability...