CVE-2014-0620

Multiple cross-site scripting XSS vulnerabilities in Technicolor formerly Thomson TC7200 STD6.01.12 allow remote attackers to inject arbitrary web script or HTML via the 1 ADDNewDomain parameter to parental/website-filters.asp or 2 VmTracerouteHost parameter to goform/status/diagnostics-route...

Technicolor TC7200多个跨站脚本漏洞

CVECAN ID: CVE-2014-0620 Technicolor TC7200是调制解调器和路由器产品。 Technicolor TC7200在实现上存在多个跨站脚本漏洞，成功利用后可获得敏感信息等。 0 technicolor TC7200 STD6.01.12 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.technicolor.com/en/solutions-services/connected-home/modems-gatew ays/cable-modems-gatewa Exploit...

Technicolor TC7200 Cross Site Scripting

Exploit Title: Technicolor TC7200 - Multiple XSS Vulnerabilities Google Dork: N/A Date: 02-01-2013 Exploit Author: Jeroen - IT Nerdbox Vendor Homepage: http://www.technicolor.com/en/solutions-services/connected-home/modems-gatew ays/cable-modems-gateways/tc7200-tc7300 Software Link: N/A Version:...

Red Hat CloudForms Management Engine 5.1 agent/linuxpkgs Path Traversal

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit4 'Red Hat CloudForms Management Engine 5.1 agent/linuxpkgs Path Traversal', 'Description' = %q This module exploits a path traversal...

Cisco IOS XR Software Route Processor Denial of Service Vulnerability (cisco-sa-20120530-iosxr)

Cisco IOS XR Software contains a vulnerability when handling crafted packets that may result in a denial of service condition. The vulnerability only exists on Cisco 9000 Series Aggregation Services Routers ASR Route Switch Processor RSP-4G and RSP-8G, Route Switch Processor 440 RSP440, and Cisco...

Cisco IOS XR Software Route Processor Denial of Service Vulnerability (cisco-sa-20131023-iosxr)

Cisco IOS XR Software Releases 3.3.0 to 4.2.0 contain a vulnerability when handling fragmented packets that could result in a denial of service DoS condition of the Cisco CRS Route Processor cards listed in the 'Affected Products' section of this advisory. The vulnerability is due to improper...

UBUNTU-CVE-2013-6431

The fib6add function in net/ipv6/ip6fib.c in the Linux kernel before 3.11.5 does not properly implement error-code encoding, which allows local users to cause a denial of service NULL pointer dereference and system crash by leveraging the CAPNETADMIN capability for an IPv6 SIOCADDRT ioctl call...

Dennis Fisher and Mike Mimoso Discuss Do Not Track, We Are the Cavalry and more

Dennis Fisher and Mike Mimoso discuss the major security stories of the last two weeks, including the BGP route hijacking, why Do Not Track doesn’t work and the We Are the Cavalry movement. Download: digitalunderground135.mp3...

CVE-2013-6817

Heap-based buffer overflow in SAP Network Interface Router SAProuter 7.30 allows remote attackers to cause a denial of service and execute arbitrary code via crafted NI Route messages...

Route-Injection Attacks Redirect Internet Traffic

Attackers are accessing routers running on the border gateway protocol BGP and injecting additional hops that redirect large blocks of Internet traffic to locations where it can be monitored and even manipulated before being sent to its intended destination. Internet intelligence company Renesys...

CVE-2013-6817

Heap-based buffer overflow in SAP Network Interface Router SAProuter 7.30 allows remote attackers to cause a denial of service and execute arbitrary code via crafted NI Route messages...

Cisco IOS XR Software Route Processor Denial of Service Vulnerability

Cisco IOS XR Software Releases 3.3.0 to 4.2.0 contain a vulnerability when handling fragmented packets that could result in a denial of service DoS condition of the Cisco CRS Route Processor cards listed in the "Affected Products" section of this advisory. The vulnerability is due to improper...

CVE-2013-4125

The fib6addrt2node function in net/ipv6/ip6fib.c in the IPv6 stack in the Linux kernel through 3.10.1 does not properly handle Router Advertisement RA messages in certain circumstances involving three routes that initially qualified for membership in an ECMP route set until a change occurred for...

UBUNTU-CVE-2013-4125

The fib6addrt2node function in net/ipv6/ip6fib.c in the IPv6 stack in the Linux kernel through 3.10.1 does not properly handle Router Advertisement RA messages in certain circumstances involving three routes that initially qualified for membership in an ECMP route set until a change occurred for...

Oracle Linux 5 : kernel (ELSA-2010-0046)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0046 advisory. - firewire ohci: handle receive packets with zero data Jay Fenlason 547241 547242 CVE-2009-4138 - fs respect flag in docoredump Danny Feng 544188 54418...

CVE-2013-1136

The crypto engine process in Cisco IOS on Aggregation Services Router ASR Route Processor 2 does not properly manage memory, which allows local users to cause a denial of service route processor crash by creating multiple tunnels and then examining encryption statistics, aka Bug ID CSCuc52193...

Design/Logic Flaw

The crypto engine process in Cisco IOS on Aggregation Services Router ASR Route Processor 2 does not properly manage memory, which allows local users to cause a denial of service route processor crash by creating multiple tunnels and then examining encryption statistics, aka Bug ID CSCuc52193...

CVE-2013-1136

The CVE-2013-1136 entry describes a local denial-of-service vulnerability in Cisco IOS on the Aggregation Services Router (ASR) Route Processor 2 where improper memory management of the crypto engine allows a local attacker to crash the route processor by creating multiple tunnels and then inspec...

CVE-2013-1136

The crypto engine process in Cisco IOS on Aggregation Services Router ASR Route Processor 2 does not properly manage memory, which allows local users to cause a denial of service route processor crash by creating multiple tunnels and then examining encryption statistics, aka Bug ID CSCuc52193...

Route Parameter Injection Via Query String in Zend\Mvc

More info at https://framework.zend.com/security/advisory/ZF2013-01...