1904 matches found
kernel: nl80211: missing check for valid SSID size in scan operations
Multiple buffer overflows in net/wireless/nl80211.c in the Linux kernel before 2.6.39.2 allow local users to gain privileges by leveraging the CAPNETADMIN capability during scan operations with a long SSID value...
kernel: nl80211: missing check for valid SSID size in scan operations
Multiple buffer overflows in net/wireless/nl80211.c in the Linux kernel before 2.6.39.2 allow local users to gain privileges by leveraging the CAPNETADMIN capability during scan operations with a long SSID value...
PT-2011-3911 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.39.2 Description: The issue is related to multiple buffer overflows in the Linux kernel, specifically in the net/wireless/nl80211.c file. This can be exploited by local users who have the CAP NET ADMIN...
SuSE 11.1 Security Update : Linux kernel (SAT Patch Numbers 4884 / 4888 / 4889)
The SUSE Linux Enterprise 11 Service Pack 1 kernel was updated to 2.6.32.43 and fixes various bugs and security issues. The following security issues were fixed : - The normal mmap paths all avoid creating a mapping where the pgoff inside the mapping could wrap around due to overflow. However, an...
Aruba Airwave / ArubaOS crossite scripting
Crossite scripting with SSID...
D-Link DAP-1160 Unauthenticated Remote Configuration
Security Advisory IS-2010-004 - D-Link DAP-1160 Unauthenticated Remote Configuration Advisory Information -------------------- Published: 2010-06-28 Updated: 2010-06-28 Manufacturer: D-Link Model: DAP-1160 Firmware version: 1.20b06 1.30b10 1.31b01 Vulnerability Details --------------------- Publi...
IS-2010-004 - D-Link DAP-1160 Unauthenticated Remote Configuration
Security Advisory IS-2010-004 - D-Link DAP-1160 Unauthenticated Remote Configuration Advisory Information -------------------- Published: 2010-06-28 Updated: 2010-06-28 Manufacturer: D-Link Model: DAP-1160 Firmware version: 1.20b06 1.30b10 1.31b01 Vulnerability Details --------------------- Publi...
Neufbox Cross Site Scripting
0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + Neufbox NB4-R1.5.10-MAIN Persistent XSS + Author : 599eme Man + Contact : [email protected] + Thanks : Moudi, Kim, Neocoderz, Syltrox66, Sheiry, Shimik Root...
Neufbox NB4-R1.5.10-MAIN - Persistent Cross-Site Scripting
Neufbox NB4-R1.5.10-MAIN - Persistent Cross-Site Scripting 0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + Neufbox NB4-R1.5.10-MAIN Persistent XSS + Author : 599eme Man + Contact : [email protected] +...
Neufbox NB4-R1.5.10-MAIN - Persistent Cross-Site Scripting
0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + Neufbox NB4-R1.5.10-MAIN Persistent XSS + Author : 599eme Man + Contact : [email protected] + Thanks : Moudi, Kim, Neocoderz, Syltrox66, Sheiry, Shimik Root...
Neufbox NB4-R1.5.10-MAIN Persistent XSS Vulnerability
Exploit for hardware platform in category remote exploits ===================================================== Neufbox NB4-R1.5.10-MAIN Persistent XSS Vulnerability ===================================================== + Neufbox NB4-R1.5.10-MAIN Persistent XSS + Author : 599eme Man...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in WS-Proxy in Eye-Fi 1.1.2 allow remote attackers to hijack the authentication of users for requests that modify configuration via a SOAPAction parameter of 1 urn:SetOptions for autostart, 2 urn:SetDesktopSync for file upload, or 3...
CVE-2008-7139
Multiple cross-site request forgery CSRF vulnerabilities in WS-Proxy in Eye-Fi 1.1.2 allow remote attackers to hijack the authentication of users for requests that modify configuration via a SOAPAction parameter of 1 urn:SetOptions for autostart, 2 urn:SetDesktopSync for file upload, or 3...
CVE-2008-7139
CVE-2008-7139 covers multiple CSRF vulnerabilities in Eye-Fi’s WS-Proxy (Eye-Fi 1.1.2). The flaws allow remote attackers to hijack user authentication for requests that modify configuration via SOAPAction URIs: urn:SetOptions (autostart), urn:SetDesktopSync (file upload), urn:SetFolderConfig (fil...
Null pointer dereference
cfg80211 in net/wireless/scan.c in the Linux kernel 2.6.30-rc1 and other versions before 2.6.31-rc6 allows remote attackers to cause a denial of service crash via a sequence of beacon frames in which one frame omits an SSID Information Element IE and the subsequent frame contains an SSID IE, whic...
CVE-2009-2844
cfg80211 in net/wireless/scan.c in the Linux kernel 2.6.30-rc1 and other versions before 2.6.31-rc6 allows remote attackers to cause a denial of service crash via a sequence of beacon frames in which one frame omits an SSID Information Element IE and the subsequent frame contains an SSID IE, whic...
Linux Kernel 2.6.30.5 - cfg80211 Remote Denial of Service
Linux Kernel 2.6.30.5 - cfg80211 Remote Denial of Service / cfg80211-remote-dos.c Linux Kernel http://jon.oberheide.org Information: http://patchwork.kernel.org/patch/41218/ These pointers can be NULL, the ismesh case isn't ever hit in the current kernel, but cmpies can be hit under certain...
Multiple Flaws in Huawei D100
Multiple Flaws in Huawei D100 by Filip Palian filip dot palian at pjwstk dot edu dot pl Description: Huawei D100 is a device offered by the polish telecom operator - Play, to provide broadband Internet in CDMA technology and it's already widely in use. Overview: Huawei D100 firmware and its defau...
Pirelli Discus DRG A225 wifi router WPA2PSK Default Algorithm Exploit
Exploit for hardware platform in category remote exploits ===================================================================== Pirelli Discus DRG A225 wifi router WPA2PSK Default Algorithm Exploit ===================================================================== !/usr/bin/python Pirelli Disc...