125 matches found
[RouterPassView] Recover lost password from router backup file
Most modern routers allow you to backup the configuration of the router into a file, and then restore the configuration from the file when it's needed. The backup file of the router usually contains important data like your ISP user name/password, the login password of the router, and wireless...
TP-Link Wireless Lite N Access Point Directory Traversal (CVE-2012-5687)
A directory traversal vulnerability has been reported in TP-LINK TL-WR841N Wireless Router Web-Based Management. The vulnerability is due to lack of sanitization of the URL paramaters. A remote attacker can exploit this issue by viewing the router configuration and password files...
Netgear WPN824v3 Unauthorized Config Download
Title: ====== Netgear WPN824v3 Unauthorized Config Download Date: ===== 2013-06-03 Introduction: ============= The Netgear RangeMax Wireless Router model WPN824v3 allows to download the config file without authorization. Status: ======== Published Affected Products: ================== Netgear...
TP-Link WR842ND - Remote Multiple SSID Directory Traversals
TP-Link WR842ND - Remote Multiple SSID Directory Traversals !/usr/bin/python ''' TP-LINK WR842ND Remote Multiple SSID Directory Travesal Exploit Adam Simuntis :: http://unixjail.com If remote management is on you have full access to router configuration - if not and you're connected to router...
Linksys WRT54GL - 'apply.cgi' Command Execution (Metasploit)
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Linksys WRT54GL apply.cgi Command...
Linksys WRT54GL apply.cgi Command Execution
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Linksys WRT54GL apply.cgi Command...
Linksys WRT54GL apply.cgi Command Execution
Exploit for hardware platform in category remote exploits require 'msf/core' class Metasploit3 'Linksys WRT54GL apply.cgi Command Execution', 'Description' = %q Some Linksys Routers are vulnerable to an authenticated OS command injection in the Web Interface. Default credentials are admin/admin o...
CentOS 6 : vino (CESA-2013:0169)
An updated vino package that fixes several security issues is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...
RedHat Update for vino RHSA-2013:0169-01
Check for the Version of vino OpenVAS Vulnerability Test RedHat Update for vino RHSA-2013:0169-01 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...
SpeedStream 5200 Authentication Bypass Config Download Vulnerability
No description provided by source. SpeedStream 5200 Authentication Bypass - hkm 12/10/2008 Server: NetPort Software 1.1 It is posible to bypass authentication by modifying the Host header. If you use a Host that is not the authentic one it will not require authentication. http://189.255.255.255./...
speedstream-bypass.txt
SpeedStream 5200 Authentication Bypass - hkm 12/10/2008 Server: NetPort Software 1.1 It is posible to bypass authentication by modifying the Host header. If you use a Host that is not the authentic one it will not require authentication. http://189.255.255.255./ - This would bypass authentication...
Telecom Italia Alice Pirelli routers Backdoor from internal LAN/WAN
Exploit for hardware platform in category remote exploits =================================================================== Telecom Italia Alice Pirelli routers Backdoor from internal LAN/WAN =================================================================== saxdax & drpepperONE Discovered...
Linksys WRT54G Firmware 1.00.9 - Security Bypass (2)
| l/ l j| \ / \ | \l j| \ | T l j| \ | | / \ | ' / | T | YY Y| o | T | Yl/ | | T | Y| jY Y | \ | | | | || Q || / | | | | || j | | | | || l | O | | Y | | | | || || | | | | | || / | | | | | || | | | . | j l | | |l || | j l | | || || T j l | | || T l ! lj\j|jljj ,jlj |jljjljlj|jljjlj / Hacking the...
BT Home Hub 6.2.2.6 - Login procedure Authentication Bypass
BT Home Hub 6.2.2.6 - Login procedure Authentication Bypass source: https://www.securityfocus.com/bid/26333/info BT Home Hub is prone to an authentication-bypass vulnerability. An attacker could exploit this issue to gain unauthorized access to the affected device. BT Home Hub firmware 6.2.2.6 is...
BT Home Hub 6.2.2.6 - Login procedure Authentication Bypass
source: https://www.securityfocus.com/bid/26333/info BT Home Hub is prone to an authentication-bypass vulnerability. An attacker could exploit this issue to gain unauthorized access to the affected device. BT Home Hub firmware 6.2.2.6 is vulnerable; other versions may also be affected. This explo...
CVE-2002-2402
SURECOM broadband router EP-4501 uses a default SNMP read community string of "public" and a default SNMP read/write community string of "secret," which allows remote attackers to read and modify router configuration information...
CVE-2006-5711
ECI Telecom B-FOCuS Wireless 802.11b/g ADSL2+ Router allows remote attackers to read arbitrary files via a certain HTTP request, as demonstrated by a request for a router configuration file, related to the /html/defs/ URI...
CVE-2005-1828
D-Link DSL-504T stores usernames and passwords in cleartext in the router configuration file, which allows remote attackers to obtain sensitive information...
PT-2005-2795 · D Link · D-Link Dsl-504T
Name of the Vulnerable Software and Affected Versions: D-Link DSL-504T affected versions not specified Description: The issue allows remote attackers to obtain sensitive information because usernames and passwords are stored in cleartext in the router configuration file. Recommendations: At the...