A comprehensive study of Huawei 3G routers - XSS, CSRF, DoS, unauthenticated firmware update, RCE

Hello, Please find a text-only version below sent to security mailing-lists. The html version on analysing the vulnerabilities in Huawei 3G routers is posted here: https://pierrekim.github.io/blog/2015-10-07-Huawei-routers-vulnerable-to-multiple-threats.html === text-version of the advisory ===...

Cisco ASR 5000 Series Router GGSN TCP/IP Processing Denial of Service Vulnerability

The Cisco ASR 5000 Series is a carrier-class platform for deploying high-demand 3G networks and migrating to Long Term Evolution LTE. A security vulnerability in the processing of TCP messages in the GPRS Support Node GGSN of the Cisco ASR 50000 Series router gateway allows remote attackers to...

Beckhoff IPC Diagnostics Arbitrary User Creation Vulnerability

Beckhoff IPC Diagnostics is a set of support software pre-installed in all Beckhoff IPCs/PLCs Programmable Logic Controllers running on the Microsoft Windows operating system. Beckhoff IPC Diagnostics fails to properly restrict access to functions in the /config URI, allowing a remote attacker to...

Cisco IOS DoS

The vulnerability of the Cisco IOS operating system allows a remote attacker to trigger a service failure device reboot by sending specially crafted TCP packets over the CIP interface...

Cisco IOS DoS

The vulnerability of the Cisco IOS operating system allows a remote attacker to trigger a service failure device reboot by sending specially crafted UDP packets over the CIP protocol...

Pirelli ADSL2/2+ Wireless Router P.DGA4001N Information Disclosure

Title: CVE-2015-0554 ADB BroadBand Pirelli ADSL2/2+ Wireless Router P.DGA4001N remote information disclosure HomeStation Movistar - Author: Eduardo Novella @enovella [email protected] - Version: Tested on firmware version PDGTEFSP4.06L.6 - Shodan dork : + "Dropbear 0.46 country:es" From now on...

WhatsApp-Remote-Reboot

Custom message with non-printable characters will crash any WhatsApp client v2.11.476 for android. It uses Yowsup library, that provides us with the options of registration, reading/sending messages, and even engaging in an interactive conversation over WhatsApp protocol Mirror:...

WhatsApp 2.11.476 - Remote Reboot/Crash App Android Exploit

Exploit for Android platform in category dos / poc !/usr/bin/python -- coding: utf-8 - Title: WhatsApp Remote Reboot/Crash App Android Product: WhatsApp Vendor Homepage: http://www.whatsapp.com Vulnerable Versions: 2.11.476 Tested on: WhatsApp v2.11.476 on MotoG 2014 -Android 4.4.4 Date: 26/12/20...

WhatsApp 2.11.476 (Android) - Remote RebootCrash App (Denial of Service)

WhatsApp 2.11.476 Android - Remote RebootCrash App Denial of Service Mirror: http://pastebin.com/raw.php?i=CZChGAnG Video: https://www.youtube.com/watch?v=V7bnLOohqqI !/usr/bin/python -- coding: utf-8 - Title: WhatsApp Remote Reboot/Crash App Android Product: WhatsApp Vendor Homepage:...

WhatsApp 2.11.476 (Android) - Remote Reboot/Crash App (Denial of Service)

Mirror: http://pastebin.com/raw.php?i=CZChGAnG Video: https://www.youtube.com/watch?v=V7bnLOohqqI !/usr/bin/python -- coding: utf-8 - Title: WhatsApp Remote Reboot/Crash App Android Product: WhatsApp Vendor Homepage: http://www.whatsapp.com Vulnerable Versions: 2.11.476 Tested on: WhatsApp...

Hitron Technologies CDE-30364 Denial Of Service

!/usr/bin/python ----------------------------------------------------------------------------------------- Description: ----------------------------------------------------------------------------------------- Hitron Technologies CDE-30364 is a famous ONO Router. Scanning certain sensitive urls t...

IBM BladeCenter Management Module - DoS vulnerability

No description provided by source. DSECRG-09-049 IBM BladeCenter Management Module - DoS vulnerability Source: http://www.dsecrg.com/pages/vul/show.php?id=149 This device can be remotely rebooted by sending a malformed TCP packets Digital Security Research Group DSecRG Advisory DSECRG-09-049...

PostgreSQL <= 8.01 Remote Reboot Denial of Service Exploit

No description provided by source. / PostgreSQL Remote Reboot =8.01 writen by ChoiX [email protected] c Unl0ck Research Team www.unl0ck.org info: Server can be rebooted only if plpgsql language is switched on. To compilate exploit you should have libpq library on your box and use command $ cc -o...

AirTies-4450 Unauthorized Remote Reboot

No description provided by source...

CVE-2014-2084

Skybox View Appliances with ISO 6.3.33-2.14, 6.3.31-2.14, 6.4.42-2.54, 6.4.45-2.56, and 6.4.46-2.57 does not properly restrict access to the Admin interface, which allows remote attackers to obtain sensitive information via a request to 1 scripts/commands/getSystemInformation or 2...

Zoom X4/X5 ADSL Modem and Router -Unauthenticated Remote Root Command Execution

Vulnerable Products - Zoom X4 ADSL Modem and Router running Nucleus/4.3 UPnP/1.0Virata-EmWeb/R620 Server All GS Firmware versions Zoom X5 ADSL Modem and Router running Nucleus/4.3 UPnP/1.0Virata-EmWeb/R620 Server All GS Firmware versions Note: A similar vulnerability was reported several years ag...

Zoom Telephonics X4/X5 ADSL Modem - Multiple Vulnerabilities

Vulnerable Products - Zoom X4 ADSL Modem and Router running Nucleus/4.3 UPnP/1.0Virata-EmWeb/R620 Server All GS Firmware versions Zoom X5 ADSL Modem and Router running Nucleus/4.3 UPnP/1.0Virata-EmWeb/R620 Server All GS Firmware versions Note: A similar vulnerability was reported several years ag...

Digi ADDP Remote Reboot Initiator

Reboot Digi International based equipment through the ADDP service This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Digi ADDP Remote Reboot Initiator', 'Description' = 'Reboot Digi International...

Cisco ASA DoS

It's possible to reboot device remotely...

AirTies-4450 Unauthorized Remote Reboot

!/usr/bin/perl Title: AirTies-4450 Unauthorized Remote Reboot DoS. Type: hardware Tested on firmware: AirTiesAir4450RUFW1.1.2.18.bin Author: rigan - imrigan sobachka gmail.com The description of the device from a site of the vendor: With its Access Point and Router functionality, the Air 4450...