Belkin N150 XSS / CSRF / Session Hijacking

Full Disclosure: Exploit Title : Belkin N150 Wireless Home Router Multiple Vulnerabilities Exploit Author : Rahul Pratap Singh Date : 30/Nov/2015 Home Page Link : http://www.belkin.com Blog Url : 0x62626262.wordpress.com Linkedin : https://in.linkedin.com/in/rahulpratapsingh94 Status : Not Patche...

Belkin N150 XSS / CSRF / Session Hijacking Vulnerabilities

Belkin N150 wireless home routers suffer from cross site request forgery, cross site scripting, session hijacking, and default credential vulnerabilities. Full Disclosure: Exploit Title : Belkin N150 Wireless Home Router Multiple Vulnerabilities Exploit Author : Rahul Pratap Singh Date :...

Brocade Fabric OS 6.3.1b Weak System Configuration

Title: Brocade Fabric OS v6.3.1b - Multiple vulnerabilities Discovered by: Karn Ganeshen Vendor Homepage: www.brocade.com Versions Reported: Kernel 2.6.14.2 + FabOS v6.3.1b + BootProm 1.0.9 version Kernel: 2.6.14.2 Fabric OS: v6.3.1b BootProm: 1.0.9 1 Default diagnostic accounts root and factory...

Cisco ASR 5000 Series Telnetd Denial of Service Vulnerability

The Cisco ASR 5000 Series is a carrier-class platform for deploying high-demand 3G networks and migrating to Long Term Evolution LTE. A denial of service vulnerability exists in Cisco ASR 5000 Series 16.0900. This allows remote attackers to cause a denial of service Telnetd process restart via a...

Code injection

Cisco ASR 5000 devices with software 16.0900 allow remote attackers to cause a denial of service telnetd process restart via a TELNET connection, aka Bug ID CSCuv25815...

CVE-2015-6382

Cisco ASR 5000 devices with software 16.0900 allow remote attackers to cause a denial of service telnetd process restart via a TELNET connection, aka Bug ID CSCuv25815...

CVE-2015-6382

Cisco ASR 5000 devices with software 16.0900 allow remote attackers to cause a denial of service telnetd process restart via a TELNET connection, aka Bug ID CSCuv25815...

CVE-2015-6382

CVE-2015-6382 affects Cisco ASR 5000 Series running 16.0(900). A remote Telnet connection can trigger the telnetd process to restart, causing a partial DoS. The root cause is described as flaws in the Telnet implementation. Cisco’s advisory states no software updates address this vulnerability an...

PT-2015-7212

Name of the Vulnerable Software and Affected Versions Cisco ASR 5000 version 16.0900 Description The issue allows remote attackers to cause a denial of service, resulting in the restart of the telnetd process, via a TELNET connection. Recommendations For Cisco ASR 5000 version 16.0900, consider...

CVE-2015-6382: Undefined Security Weakness

Cisco ASR 5000 devices with software 16.0900 allow remote attackers to cause a denial of service telnetd process restart via a TELNET connection, aka Bug ID CSCuv25815...

Cisco ASR 5000 Series Telnetd Denial of Service Vulnerability

A vulnerability in the Telnet feature of the Cisco Aggregation Services Router ASR 5000 Series could allow an unauthenticated, remote attacker to cause a partial denial of service DoS condition due to an unexpected telnetd process restart. The vulnerability is due to flaws in the Telnet...

Zebra PrintServer Default Credentials (Telnet)

The remote Zebra PrintServer has a default password set. SPDX-FileCopyrightText: 2015 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

CVE-2015-7289

The CVE-2015-7289 entry applies to ARRIS DG860A, TG862A, and TG862G cable modems with firmware TS0703128_100611 through TS0705125D_031115. The root cause is a hardcoded administrator password derived from the device serial number, enabling remote attackers to gain administrative access via the we...

CVE-2015-7289

Arris DG860A, TG862A, and TG862G devices with firmware TS0703128100611 through TS0705125D031115 have a hardcoded administrator password derived from a serial number, which makes it easier for remote attackers to obtain access via the web management interface, SSH, TELNET, or SNMP...

ZTE ADSL ZXV10 W300 Authorization / Disclosure / Backdoor

Exploit Title: ZTE ADSL ZXV10 W300 modems - Multiple vulnerabilities Discovered by: Karn Ganeshen Vendor Homepage: www.zte.com.cn Versions Reported: W300V2.1.0fER7PEO57 and W300V2.1.0hER7PEO57 CVE-ID: CVE-2015-7257 CVE-2015-7258 CVE-2015-7259 Note: Large deployment size, primarily in Peru, used b...

ZTE ZXHN H108N R1A Default Account Privilege Bypass Vulnerability

The ZTE ZXHN H108N R1A is a wireless router product from China's ZTE Corporation. ZTE ZXHN H108N R1A ZTE.bhs.ZXHNH108NR1A.hPE The root account uses the 'root' password, which can be exploited by a remote attacker to take full control of the device when the system is enabled with Telnet service...

Silex USB-device Default Credentials (Telnet)

The remote Silex USB-device Telnet has default credentials set. SPDX-FileCopyrightText: 2015 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

APC Network Management Card Default Credentials (Telnet)

The remote APC Network Management Card has default credentials set. SPDX-FileCopyrightText: 2015 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Telnet 弱口令 PoC

常见的用户名： admin, root, administrator, user, test 常用密码： 123456, admin, password, root, test...

Keri Systems Access Control Systems Detection

This script performs telnet banner based idetection of Keri Systems Access Control systems SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if...