1644 matches found
Pirelli Discus DRG A125g - Remote Change SSID Value Vulnerability
No description provided by source...
Binatone DT 850W Wireless Router - Multiple CSRF Vulnerabilities
No description provided by source. Exploit Title: Binatone DT 850W Wireless Router - Multiple CSRF Vulnerabilities Date: 05/20/2014 Author: Samandeep Singh - SaMaN @samanL33T Vendor Homepage:http://www.binatonetelecom.in/4port-adsl2-wifi-router1.html Category: Hardware/Wireless Router Firmware...
TP-LINK WR842ND Remote Multiple SSID Directory Travesal Exploit
No description provided by source. !/usr/bin/python ''' TP-LINK WR842ND Remote Multiple SSID Directory Travesal Exploit Adam Simuntis :: http://unixjail.com If remote management is on you have full access to router configuration - if not and you're connected to router network you can discover...
Teracom Modem T2-B-Gawv1.4U10Y-BI - Stored XSS Vulnerability
No description provided by source. Exploit Title: Teracom Modem Stored XSS Vulnerability Date: 19-01-2014 Author: Rakesh S Software Link: http://www.teracom.in/ Version: T2-B-Gawv1.4U10Y-BI Tested on: Windows 7 Code : GET...
Broadcom Wireless Driver Probe Response SSID Overflow
No description provided by source. $Id: broadcomwifissid.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...
CVE-2014-4162
Multiple cross-site request forgery CSRF vulnerabilities in the Zyxel P-660HW-T1 v3 wireless router allow remote attackers to hijack the authentication of administrators for requests that change the 1 wifi password or 2 SSID via a request to Forms/WLANGeneral1...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in the Zyxel P-660HW-T1 v3 wireless router allow remote attackers to hijack the authentication of administrators for requests that change the 1 wifi password or 2 SSID via a request to Forms/WLANGeneral1...
CVE-2014-4162
Multiple cross-site request forgery CSRF vulnerabilities in the Zyxel P-660HW-T1 v3 wireless router allow remote attackers to hijack the authentication of administrators for requests that change the 1 wifi password or 2 SSID via a request to Forms/WLANGeneral1...
Binatone DT 850W Router Cross Site Request Forgery Vulnerability
Binatone DT 850W wireless router suffers from multiple cross site request forgery vulnerabilities. Exploit Title: Binatone DT 850W Wireless Router - Multiple CSRF Vulnerabilities Date: 05/20/2014 Author: Samandeep Singh - SaMaN @samanL33T Vendor...
Coremail邮件系统漏洞无脚本攻击劫持指定用户账号
简要描述： 几个小的问题的组合导致可劫持指定用户账号 详细说明： 测试对象： 使用Coremail邮件系统的某大学邮件系统 测试地址： http://mail..edu.cn 问题描述： 这个问题由几个小问题的组合所导致。 第一个问题： Coremail邮件系统在用户登录成功后，会给用户分配一个32位大小写字母混搭的sid用于用户身份验证。只要用户没有logout，这个sid都不会被销毁且会作为参数出现在用户主界面的URL里，如下图所示。我们一旦获取了sid，就意味着我们可以盗用用户身份去登录用户邮箱。 第二个问题：...
Binatone DT 850W Router Cross Site Request Forgery
Exploit Title: Binatone DT 850W Wireless Router - Multiple CSRF Vulnerabilities Date: 05/20/2014 Author: Samandeep Singh - SaMaN @samanL33T Vendor Homepage:http://www.binatonetelecom.in/4port-adsl2-wifi-router1.html Category: Hardware/Wireless Router Firmware Version: T6W-A1.005 and below Tested...
Binatone DT 850W Wireless Router - Multiple CSRF Vulnerabilities
Exploit for hardware platform in category web applications Exploit Title: Binatone DT 850W Wireless Router - Multiple CSRF Vulnerabilities Date: 05/20/2014 Author: Samandeep Singh - SaMaN @samanL33T Vendor Homepage:http://www.binatonetelecom.in/4port-adsl2-wifi-router1.html Category:...
Binatone DT 850W Wireless Router - Multiple Cross-Site Request Forgery Vulnerabilities
Binatone DT 850W Wireless Router - Multiple Cross-Site Request Forgery Vulnerabilities Exploit Title: Binatone DT 850W Wireless Router - Multiple CSRF Vulnerabilities Date: 05/20/2014 Author: Samandeep Singh - SaMaN @samanL33T Vendor...
SNMP Public Community String Zero Day in Routers Disclosed
Researchers have discovered previously unreported problems in SNMP on embedded devices where devices such as secondary market home routers and a popular enterprise-grade load balancer are leaking authentication details in plain text. The data could be extracted by gaining access to the read-only...
Teracom Modem T2-B-Gawv1.4U10Y-BI Cross Site Request Forgery
Exploit Title: Teracom Modem CSRF Vulnerability Date: 20-04-2014 Author: Rakesh S Software Link: http://www.teracom.in/ Version: T2-B-Gawv1.4U10Y-BI The vulnerability exists due to insufficient validation of HTTP request origin. A remote attacker can trick a logged-in administrator to visit a...
Teracom Modem T2-B-Gawv1.4U10Y-BI - Cross-Site Request Forgery
Exploit Title: Teracom Modem CSRF Vulnerability Date: 20-04-2014 Author: Rakesh S Software Link: http://www.teracom.in/ Version: T2-B-Gawv1.4U10Y-BI The vulnerability exists due to insufficient validation of HTTP request origin. A remote attacker can trick a logged-in administrator to visit a...
Teracom Modem T2-B-Gawv1.4U10Y-BI - Cross-Site Request Forgery
Teracom Modem T2-B-Gawv1.4U10Y-BI - Cross-Site Request Forgery Exploit Title: Teracom Modem CSRF Vulnerability Date: 20-04-2014 Author: Rakesh S Software Link: http://www.teracom.in/ Version: T2-B-Gawv1.4U10Y-BI The vulnerability exists due to insufficient validation of HTTP request origin. A...
Teracom Modem T2-B-Gawv1.4U10Y-BI - Stored XSS Vulnerability
Exploit for hardware platform in category web applications Exploit Title: Teracom Modem Stored XSS Vulnerability Date: 19-01-2014 Author: Rakesh S Software Link: http://www.teracom.in/ Version: T2-B-Gawv1.4U10Y-BI Tested on: Windows 7 Code : GET...
Pirelli Discus DRG A125g Remote SSID Change
Exploit Title: Pirelli Discus DRG A125g remote change SSID value vulnerability Hardware: Pirelli Discus DRG A125g Date: 2013/11/23 Exploit Author: Sebastián Magof Tested on: Linux/Windows Twitter: @smagof Greetz: Family, friends && under guys. Special Greetz: / αlpha "" Exploit:...
Pirelli Discus DRG A125g - Remote Change SSID Value Vulnerability
Exploit for hardware platform in category web applications http://10.0.0.2/wlbasic.wl?wlSsidIdx=0&wlSsid=bysmagof info: where the parameter "wlSsid" is where the attacker will enter the new SSID. If the victim clicks on the url your modem / router will reboot automatically with the new SSID...