Kerala Computer Emergency Response Team launches operations !

The Kerala Government has announced the launch of the Computer Emergency Response Team, Kerala CERT-K as the nodal agency for monitoring various cyber security related incidents in the State. Chief Minister Shri V S Achuthanandan formally announced the launch of operations today. The agency will...

Internet Meltdowns of 2010 You Need to Know

In what has become a yearly tradition, it's now time for us to present 10 of the most noteworthy incidents on the Internet from this past year. As you'll see, 2010 has been very interesting. Just like previous years, we have included problems ranging from website outages and service issues to...

Vulnerabilidades de Arnet WiFi

Advisory ID Internal CORE-2010-0715 1. Información sobre esta Advertencia de Seguridad Title: Vulnerabilidades de Arnet WiFi Advisory Id: CORE-2010-0715 Advisory URL: https://www.coresecurity.com/advisories/vulnerabilidades-Arnet-wifi Date published: 2010-12-01 Date of last update: 2010-11-26...

Friendly-Tech FriendlyTR69 CPE Remote Management 2.8.9 - SQL Injection

========================================= Yaniv Miron aka "Lament" Advisory March 7, 2010 Friendly-Tech FriendlyTR69 CPE Remote Management V2.8.9 SQL Injection Vulnerability ========================================= ===================== I. BACKGROUND ===================== Based on the company’s...

Comptel InstantLink Cross Site Scripting

-------------------------------------------------------------------- Exploit Title: Comptel InstantLink" XSS vulnerability Date: 24 Feb 2010 Author: thebluegenius Software Link: http://www.comptel.com/ProvisioningActivation/ Version: All CVE : NA --------------------------------------------------...

Comptel InstantLink XSS vulnerability

Exploit for unknown platform in category web applications ===================================== Comptel InstantLink XSS vulnerability ===================================== -------------------------------------------------------------------- Exploit Title: Comptel InstantLink" XSS vulnerability...

Huawei HG510 CSRF, Auth Bypass, DoS

Hello, Huawei HG510 is a device offered by the Serbian telecom operator, to provide ADSL Internet connection. Administration of settings on this device is allowed only from local LAN network but not only from private IP address eg 192.168.1.1 then You can access with public IP address only from...

Atheros Driver Reserved Frame Vulnerability

Title: ------ Atheros Driver Reserved Frame Vulnerability Summary: -------- The wireless driver in some Wi-Fi access points such as the ATHEROS-based Netgear WNDAP330 do not correctly parse malformed reserved management frames. Assigned CVE: ------------- CVE-2009-0052 Details: -------- The bug c...

Marvell Driver Multiple Information Element Overflows

Title: ------ Marvell Driver Multiple Information Element Overflows Summary: -------- The wireless drivers in some Wi-Fi access points such as the MARVELL-based Linksys WAP4400N do not correctly parse information elements included in association requests. Most information elements are used by the...

Marvell Driver Multiple Information Element Overflows

No description provided by source. Title: ------ Marvell Driver Multiple Information Element Overflows Summary: -------- The wireless drivers in some Wi-Fi access points such as the MARVELL-based Linksys WAP4400N do not correctly parse information elements included in association requests. Most...

MyBB 1.4.8 SQL Injection

mybb v1.4.8 search.php blind/query based sql injection vulns author: $qLDoCt0r msn: [email protected] blog: http://full-discl0sure.blogspot.com moderator of: http://hackwarez.net search.php fails to correctly sanitise the user input validation allowing error based and query based sql...

CVE-2008-7165

Cross-site request forgery in cp06wifimnocifr.cgi in the administrator panel in TELECOM ITALIA Alice Gate2 Plus Wi-Fi allows remote attackers to hijack the authentication of administrators for requests that disable Wi-Fi encryption via certain values for the wlChannel and wlRadioEnable parameters...

CVE-2008-7165

Cross-site request forgery in cp06wifimnocifr.cgi in the administrator panel in TELECOM ITALIA Alice Gate2 Plus Wi-Fi allows remote attackers to hijack the authentication of administrators for requests that disable Wi-Fi encryption via certain values for the wlChannel and wlRadioEnable parameters...

CVE-2008-7165

CVE-2008-7165 describes a cross-site request forgery in the cp06_wifi_m_nocifr.cgi admin panel of TELECOM ITALIA Alice Gate2 Plus Wi‑Fi gateways. The underlying issue allows remote attackers to hijack administrator authentication and issue requests that disable Wi‑Fi encryption by crafting specif...

NOKIA Siemens FlexiISN 3.1 Multiple Auth Bypass Vulnerabilities

No description provided by source. NOKIA Siemens FlexiISN GGSN Multiple Authentication bypass Vulnerability: NOKIA Siemens FlexiISN Remote: Yes Local: No Class: Input Validation Error Critical: Moderately critical OS : FlexiISN GGSN FISN 3.1 URL 1 for bypassing authentication on AAA Configuration...

Telecom Italia Alice路由器IP报文非授权访问漏洞

BUGTRAQ ID: 31754 Telecom Italia是意大利最重要的ISP，提供名为Alice的ADSL服务。 如果内网用户向Alice路由器发送了如下IP报文的话： 1 IP协议号255 2 8字节负载大小 3 负载为br0设备MAC地址的MD5数据变形后的前8个字节 4 这些modem中br0拥有相同的eth0 mac 就可以激活路由器的管理接口和telnet/ftp/tftp服务，获得非授权访问。 Telecom Italia AGA/AGB/AG2P-AG3/AGPV-AGPF Telecom Italia --------------...

Telecom Italia Alice Pirelli routers Backdoor from internal LAN/WAN

No description provided by source. saxdax & drpepperONE Discovered embedded backdoor to activate telnet/ftp/tftp/web extended admin interface with Admin privileges, from internal network lan on Alice ADSL CPE Modem/Router, manufactered by Pirelli based on Broadcom platform. saxdax & drpepperONE...

alicetelecom-backdoor.txt

saxdax & drpepperONE Discovered embedded backdoor to activate telnet/ftp/tftp/web extended admin interface with Admin privileges, from internal network lan on Alice ADSL CPE Modem/Router, manufactered by Pirelli based on Broadcom platform. saxdax & drpepperONE Router Vendor: Alice Telecom Italia...

Telecom Italia Alice Pirelli routers - Backdoor from internal LAN/WAN

saxdax & drpepperONE Discovered embedded backdoor to activate telnet/ftp/tftp/web extended admin interface with Admin privileges, from internal network lan on Alice ADSL CPE Modem/Router, manufactered by Pirelli based on Broadcom platform. saxdax & drpepperONE Router Vendor: Alice Telecom Italia...

Telecom Italia Alice Pirelli routers - Backdoor from internal LANWAN

Telecom Italia Alice Pirelli routers - Backdoor from internal LANWAN saxdax & drpepperONE Discovered embedded backdoor to activate telnet/ftp/tftp/web extended admin interface with Admin privileges, from internal network lan on Alice ADSL CPE Modem/Router, manufactered by Pirelli based on Broadco...