DD-WRT Information Disclosure Vulnerability

Exploit for hardware platform in category remote exploits Author: Craig Heffner, /dev/ttyS0 Software Link: http://www.dd-wrt.com Version: v24-preSP2 Tested on: builds 14311, 14896 Remote attackers can gain sensitive information about a DD-WRT router and internal clients, including IP addresses, M...

DD-WRT 24-preSP2 - Information Disclosure

Exploit Title: DD-WRT Information Disclosure Vulnerability Date: 26-Dec-2010 Author: Craig Heffner, /dev/ttyS0 Software Link: http://www.dd-wrt.com Version: v24-preSP2 Tested on: builds 14311, 14896 Remote attackers can gain sensitive information about a DD-WRT router and internal clients,...

Web@all 1.1 - Remote Admin Settings Change

Web@all 1.1 - Remote Admin Settings Change =========================================== Web@all Date: 27/12/2010 Site: http://www.giudinvx.altervista.org/ -------------------------------------------------------- Application Info: web@all 1.1 web@all is a CMS which is not similar to general CMS, yo...

D-Link WBR-1310 - Authentication Bypass

D-Link WBR-1310 - Authentication Bypass Exploit Title: D-Link WBR-1310 Authentication Bypass Vulnerability Shodan Dork: Embedded HTTP Server 2.00 Date: 22-Dec-2010 Author: Craig Heffner, /dev/ttyS0 Software Link: http://www.dlink.com/products/?pid=474 Version: 2.00 Tested on: WBR-1301, firmware...

D-Link WBR-1310 - Authentication Bypass

Exploit Title: D-Link WBR-1310 Authentication Bypass Vulnerability Shodan Dork: Embedded HTTP Server 2.00 Date: 22-Dec-2010 Author: Craig Heffner, /dev/ttyS0 Software Link: http://www.dlink.com/products/?pid=474 Version: 2.00 Tested on: WBR-1301, firmware version 2.00 The CGI scripts in the D-Lin...

netbus-brute NSE Script

Performs brute force password auditing against the Netbus backdoor "remote administration" service. See also: netbus-auth-bypass.nse Script Arguments passdb, unpwdb.passlimit, unpwdb.timelimit, unpwdb.userlimit, userdb See the documentation for the unpwdb library. Example Usage nmap -p 12345...

Linksys Routers - Cross-Site Request Forgery

Linksys Routers - Cross-Site Request Forgery It seems to be fairly well known that there are multiple unpatched CSRF vulnerabilities in the administration interfaces for various Linksys routers. Since the initial reports of these are from a few years ago, and since some exploits are available, I...

Linksys Routers - Cross-Site Request Forgery

It seems to be fairly well known that there are multiple unpatched CSRF vulnerabilities in the administration interfaces for various Linksys routers. Since the initial reports of these are from a few years ago, and since some exploits are available, I have written additional proof of concept...

Linksys Router Cross Site Request Forgery

It seems to be fairly well known that there are multiple unpatched CSRF vulnerabilities in the administration interfaces for various Linksys routers. Since the initial reports of these are from a few years ago, and since some exploits are available, I have written additional proof of concept...

JBoss Administration Console Default Credentials

The JBoss Administration Console installed on the remote host uses the default username and password. Knowing these, an attacker can gain administrative control of the affected application. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid47714; scriptversion"1.11";...

DEBIAN-CVE-2009-4402

The default configuration of SQL-Ledger 2.8.24 allows remote attackers to perform unspecified administrative operations by providing an arbitrary password to the admin interface...

phpBazar-2.1.1fix Remote Administration-Panel Vulnerability

No description provided by source. phpBazar-2.1.1fix Remote Administration-Panel Vulnerability ! Found by? :? kurdish hackers team ! C0ntact : pshela at YaHoo .com ?????????????????? ! Groups : Kurd-Team ! site?? : www.kurdteam.org =======================================================...

phpBazar 2.1.1fix Administrative Access

====================================================== phpBazar-2.1.1fix all Version Remote Administration-Panel Vulnerability Found by : kurdish hackers team C0ntact : pshela at YaHoo .com Groups : Kurd-Team site : www.kurdteam.org =======================================================...

phpBazar 2.1.1fix Remote Administration-Panel Vulnerability

Exploit for unknown platform in category web applications =========================================================== phpBazar-2.1.1fix Remote Administration-Panel Vulnerability =========================================================== =======================================================...

phpBazar-2.1.1fix - Remote Administration-Panel

phpBazar-2.1.1fix Remote Administration-Panel Vulnerability Found by? :? kurdish hackers team C0ntact : pshela at YaHoo .com ?????????????????? Groups : Kurd-Team site?? : www.kurdteam.org ======================================================= +++++++++++++++++++ Script...

Practical analysis once the WinRoute Backdoor offensive and defensive live-vulnerability warning-the black bar safety net

The school through the Windows 2 0 0 0 and the winroute proxy way to access the Internet. These two days, the proxy server always appears some strange phenomenon, running the program seems to be very slow, but it will also automatically restart. Could it be a virus? Or in a Trojan. Anyway, go and...

CVE-2008-6974

Multiple cross-site request forgery CSRF vulnerabilities in apply.cgi in DD-WRT 24 sp1 and earlier allow remote attackers to hijack the authentication of administrators for requests that 1 execute arbitrary commands via the pingip parameter; 2 change the administrative credentials via the...

CVE-2008-6975

Multiple cross-site request forgery CSRF vulnerabilities in apply.cgi in DD-WRT 24 sp2 allow remote attackers to hijack the authentication of administrators for requests that 1 execute arbitrary commands via the pingip parameter; 2 change the administrative credentials via the httpusername and...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in apply.cgi in DD-WRT 24 sp1 and earlier allow remote attackers to hijack the authentication of administrators for requests that 1 execute arbitrary commands via the pingip parameter; 2 change the administrative credentials via the...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in apply.cgi in DD-WRT 24 sp2 allow remote attackers to hijack the authentication of administrators for requests that 1 execute arbitrary commands via the pingip parameter; 2 change the administrative credentials via the httpusername and...