703 matches found
New CSRF and XSS vulnerabilities in ADSL modem Callisto 821+
Hello 3APA3A! I want to warn you about security vulnerabilities in ADSL modem Callisto 821+ SI2000 Callisto821+ Router. These are Cross-Site Request Forgery and Cross-Site Scripting vulnerabilities. In April I've already drew attention of Ukrtelecom's representative and this modem was bough at...
New CSRF and XSS vulnerabilities in ADSL modem Callisto 821+
Hello 3APA3A! I want to warn you about security vulnerabilities in ADSL modem Callisto 821+ SI2000 Callisto821+ Router. These are Cross-Site Request Forgery and Cross-Site Scripting vulnerabilities. In April I've already drew attention of Ukrtelecom's representative and this modem was bough at...
New CSRF and XSS vulnerabilities in ADSL modem Callisto 821+
Hello 3APA3A! I want to warn you about security vulnerabilities in ADSL modem Callisto 821+ SI2000 Callisto821+ Router. These are Cross-Site Request Forgery and Cross-Site Scripting vulnerabilities. Which I've found in your modem. In April I've already drew attention of Ukrtelecom's representativ...
New CSRF and XSS vulnerabilities in ADSL modem Callisto 821+
Hello 3APA3A! I want to warn you about security vulnerabilities in ADSL modem Callisto 821+ SI2000 Callisto821+ Router. These are Cross-Site Request Forgery and Cross-Site Scripting vulnerabilities. Which I've found in your modem. In April I've already drew attention of Ukrtelecom's representativ...
New CSRF and XSS vulnerabilities in ADSL modem Callisto 821+
Hello 3APA3A! I want to warn you about security vulnerabilities in ADSL modem Callisto 821+ SI2000 Callisto821+ Router. These are Cross-Site Request Forgery and Cross-Site Scripting vulnerabilities. In April I've already drew attention of Ukrtelecom's representative and this modem was bough at...
CSRF and XSS vulnerabilities in ADSL modem Callisto 821+
Hello 3APA3A! I want to warn you about security vulnerabilities in ADSL modem Callisto 821+ SI2000 Callisto821+ Router. These are Cross-Site Request Forgery and Cross-Site Scripting vulnerabilities. These attacks should be conducted on modem owner, which is logged into control panel. Taking into...
Vulnerabilities in ADSL modem Callisto 821+
Hello 3APA3A! I want to warn you about security vulnerabilities in ADSL modem Callisto 821+ SI2000 Callisto821+ Router. These are Predictable Resource Location and Brute Force vulnerabilities. Predictable Resource Location WASC-34: http://192.168.1.1 web server on 80 and 8008 ports. The control...
Ubuntu 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : x11-xserver-utils vulnerability (USN-1107-1)
Sebastian Krahmer discovered that the xrdb utility incorrectly filtered crafted hostnames. An attacker could use this flaw with a malicious DHCP server or with a remote xdmcp login and execute arbitrary code, resulting in root privilege escalation. Note that Tenable Network Security has extracted...
PRTG Network Monitor Default Credentials
It is possible to log into the remote PRTG Network Monitor installation by providing the default credentials. A remote attacker could exploit this to gain administrative control of the PRTG Network Monitor installation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
RoadRunner Cablemodem Remote Root
Hello. This is the introduction to a large-scale RoadRunner Cable-Router exploit on the Ambit U10C019 CableModem. Basically, the default Cable Router that RoadRunner/TimeWarner gives to its customers by default: 1 Allows for remote login with user: admin, password: cableroot. 2 Allows remote acce...
Debian OpenSSL Predictable PRNG Bruteforce SSH Exploit to the exploit-vulnerability warning-the black bar safety net
From su bun's blog Very early on saw through this vulnerability, but since Y is a bruteforce, just don't be too concerned about yesterday and a friend chat to this vulnerability, look carefully at the next, hazard is still quite large, although the need for certain conditions before they can be...
Al3jeb Script SQL Injection
'/ -.- --------------------oOO------OOo------------------- | al3jeb script Remote Login Bypass Exploit | | works only with magicquotesgpc = off | ------------------------------------------------------ ! Discovered: cr4wl3r ! Download:...
al3jeb script Remote Login Bypass Exploit
Exploit for unknown platform in category web applications ========================================= al3jeb script Remote Login Bypass Exploit ========================================= '/ -.- --------------------oOO------OOo------------------- | al3jeb script Remote Login Bypass Exploit | | works...
MoME CMS 0.8.5 SQL Injection
'/ -.- --------------------oOO------OOo------------------- | MoME CMS ! Download: http://sourceforge.net/projects/mome/files/ ! Date: 16.01.2010 ! Remote: yes ! Code : //controllo user e passwd da login ifisset$POST'postedusername' && isset$POST'postedpassword' $query="SELECT FROM users WHERE...
MoME CMS 0.8.5 - Remote Authentication Bypass
'/ -.- --------------------oOO------OOo------------------- | MoME CMS ! Download: http://sourceforge.net/projects/mome/files/ ! Date: 16.01.2010 ! Remote: yes ! Code : //controllo user e passwd da login ifisset$POST'postedusername' && isset$POST'postedpassword' $query="SELECT FROM users WHERE...
RoseOnlineCMS <= 3 B1 Remote Login Bypass Exploit
Exploit for unknown platform in category web applications ================================================= RoseOnlineCMS " method="post" Username: Password: ?php ifisset$POST'submit' // username and password sent from signup form $USER = $POST'user'; $PASS = md5$POST'pass'; $sql = "SELECT FROM...
MoME CMS <= 0.8.5 Remote Login Bypass Exploit
Exploit for unknown platform in category web applications ============================================= MoME CMS = 0.8.5 Remote Login Bypass Exploit ============================================= '/ -.- --------------------oOO------OOo------------------- | MoME CMS = 0.8.5 Remote Login Bypass...
Exclusive tells the story: use the Lcx to the internal network port forwarding-bug warning-the black bar safety net
Through this case study you can learn to: 1learn about port forwarding the relevant knowledge 2Using the toolsoftwarelcx to perform port forwarding Lcx. exe is a port forwarding tool, equivalent to the broiler on A 3 3 8 9 port forwarding to an external network IP address of B machine, so the...
CVE-2009-0171
The CVE-2009-0171 entry concerns Sun SPARC Enterprise M4000 and M5000 servers within a certain serial-number range. The issue allows remote attackers to use the manufacturing root password to log in to the eXtended System Control Facility Unit (XSCFU/Service Processor), enabling root access and r...
2532|Gigs 1.2.2 Stable Login Bypass
/ ------------------------------------------------------------------------------------------------ 2532|Gigs 1.2.2 Stable Remote Login Bypass Vulnerability ------------------------------------------------------------------------------------------------ by athos - stakerathotmaildotit...