PT-2014-3002

Name of the Vulnerable Software and Affected Versions: ASUS RT-AC68U and other RT series routers versions prior to 3.0.0.4.374.5047 Description: The issue allows remote authenticated users to execute arbitrary commands via shell metacharacters in the destIP parameter in the Target field of the...

DNS SOHO Router Pharming Attack Takes 300,000 Routers

More than 300,000 small office and home office routers, most in Europe and Asia, were compromised in a campaign that started in mid-December, continuing a rash of security incidents involving home and small business networking equipment. Researchers at Team Cymru published a report today on the...

PT-2025-31542 · Linksys · Linksys Wrt120N

Name of the Vulnerable Software and Affected Versions: Linksys WRT120N wireless routers affected versions not specified Description: A stack-based buffer overflow exists in the tmUnblock.cgi endpoint of Linksys WRT120N wireless routers. The issue occurs when processing the TM Block URL parameter...

UPC Ireland Cisco EPC 2425 Router / Horizon Box

Exploit for hardware platform in category web applications The Cisco EPC 2425 routers supplied by UPC are vulnerable to an offline dictionary attack if the WPA-PSK handshake is obtained by an attacker. The WPA-PSK pass phrase has the following features: • Random • A to Z Uppercase only • 8...

TP-Link TL-WR740N TL-WR740ND 150M Wireless Lite N Router - HTTP Denial of Service

TP-Link TL-WR740N TL-WR740ND 150M Wireless Lite N Router - HTTP Denial of Service Exploit title: 150M Wireless Lite N Router HTTP DoS Date: 28.11.2013 Exploit Author: Dino Causevic Hardware Link: http://www.tp-link.com/en/products/details/?model=TL-WR740N Vendor Homepage: http://www.tp-link.com/...

Router ONO Hitron CDE-30364 - Cross-Site Request Forgery

Router ONO Hitron CDE-30364 - Cross-Site Request Forgery Exploit Title: Router ONO Hitron CDE-30364 - CSRF Vulnerability Date: 14-9-2013 Exploit Author: Matias Mingorance Svensson - matias.msatowasp.org Vendor Homepage:...

D-Link DIR-645 getcfg.php Admin Password Disclosure

The remote D-Link DIR-645 router is affected by an information disclosure vulnerability. By sending a specially crafted request to the 'getcfg.php' script, a remote unauthenticated attacker could retrieve the admin password information. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

D-Link DSL-2650U - Denial of Service (PoC)

D-Link DSL-2650U - Denial of Service PoC Exploit Title: Dlink DSL-2650U DoS/PoC Date: July 6th, 2011 Author: Li'el Fridman Software Link: ftp://ftp.dlink.ru/pub/ADSL/DSL-2650UBRUD/Firmware/RU1.20/DSL-2650UBRUD1RU1.2006222011.zip Version: 1.20 Tested on: Default firmware - Linux 2.6.8.1...

DD-WRT Information Disclosure Vulnerability

Exploit for hardware platform in category remote exploits Author: Craig Heffner, /dev/ttyS0 Software Link: http://www.dd-wrt.com Version: v24-preSP2 Tested on: builds 14311, 14896 Remote attackers can gain sensitive information about a DD-WRT router and internal clients, including IP addresses, M...

Cisco IOS Software Processing of SAA Packets - Cisco Systems (Deprecated)

The Service Assurance Agent SAA is the new name for the Response Time Reporter RTR feature. The router is vulnerable only if the RTR responder is enabled. When the router receives a malformed RTR packet, it will crash. RTR is disabled by default. Although RTR was introduced in Cisco IOS Software...

3Com OfficeConnect code execution

Exploit for unknown platform in category remote exploits ================================= 3Com OfficeConnect code execution ================================= Title: 3Com OfficeConnect code execution CVE-ID: OSVDB-ID: Author: Andrea Fabizi Published: 2009-10-19 Verified: yes view source print?...

OptusHuawei E960 HSDPA Router - Sms Cross-Site Scripting

OptusHuawei E960 HSDPA Router - Sms Cross-Site Scripting XSS Attack using SMS to Optus/Huawei E960 HSDPA Router Synopsis -------- Huawei E960 HSDPA Router firmware version 246.11.04.11.110sp04 is vulnerable to XSS attack using SMS. One of the feature of this router is the ability to send and...

Optus/Huawei E960 HSDPA Router SMS XSS Attack

Exploit for hardware platform in category remote exploits ============================================= Optus/Huawei E960 HSDPA Router SMS XSS Attack ============================================= XSS Attack using SMS to Optus/Huawei E960 HSDPA Router Synopsis -------- Huawei E960 HSDPA Router...

Optus/Huawei E960 HSDPA Router Cross Site Scripting

XSS Attack using SMS to Optus/Huawei E960 HSDPA Router Synopsis -------- Huawei E960 HSDPA Router firmware version 246.11.04.11.110sp04 is vulnerable to XSS attack using SMS. One of the feature of this router is the ability to send and receive SMS through its web interface. The SMS text is...

Case combat: the switch password is lost how to restore? - Vulnerability warning-the black bar safety net

Editor's note: the computer password is lost, we can use a password remove the disc and other tools to solve, but a switch, a router password is lost, you cannot use the CD and other tools, and requirements Does not change the original configuration files in case it how to do it? As the Internet...

iDefense Security Advisory 12.07.05: Dell TrueMobile 2300 Wireless Broadband Router Authentication Bypass Vulnerability

Dell TrueMobile 2300 Wireless Broadband Router Authentication Bypass Vulnerability iDefense Security Advisory 12.07.05 www.idefense.com/application/poi/display?id=348&type=vulnerabilities December 7, 2005 I. BACKGROUND The Dell TrueMobile 2300 Wireless Broadband Router is an 802.11b/g wireless...

CVE-2004-2637

The vulnerability CVE-2004-2637 affects the Zonet ZSR1104WE Wireless Router Runtime Code Version 2.41. The NAT implementation converts inbound IP addresses to the router’s IP, allowing remote attackers to bypass intended security restrictions. This is the concrete technical detail documented: the...

CVE-2005-0498

Gigafast router aka CompUSA router allows remote attackers to gain sensitive information and bypass the login page via a direct request to backup.cfg, which reveals the administrator password in plaintext...

ZyXEL Prestige 650 unauthorized access

It's possible remotely reload router's configuration with /rpFWUpload.html...

ZYXEL 3 Prestige Router - HTTP Remote Administration Configuration Reset

source: https://www.securityfocus.com/bid/11723/info ZyXEL Prestige router series is reported prone to an access validation vulnerability. The vulnerability exists because the firmware of the router fails to restrict access to a configuration page that is a part of the ZyXEL Prestige HTTP based...