Edimax BR6228nSBR6228nC - Multiple Vulnerabilities

Edimax BR6228nSBR6228nC - Multiple Vulnerabilities Title: Edimax BR6228nS/BR6228nC - Multiple vulnerabilities Date: 01.09.15 Vendor: edimax.com Firmware version: 1.22 Author: Smash Contact: smash at devilteam.pl Few vulnerabilities found in Edimax BR6228nS/BR6228nC router firmware. 1/ Cross Site...

Edimax BR6228nS/BR6228nC - Multiple Vulnerabilities

Title: Edimax BR6228nS/BR6228nC - Multiple vulnerabilities Date: 01.09.15 Vendor: edimax.com Firmware version: 1.22 Author: Smash Contact: smash at devilteam.pl Few vulnerabilities found in Edimax BR6228nS/BR6228nC router firmware. 1/ Cross Site Scripting Request: POST /goform/formWizSetup HTTP/1...

The vulnerability of the Internet Explorer browser allows a violator to determine the location of local files.

The vulnerability of the Internet Explorer browser is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to determine the location of local files using a style sheet table...

The vulnerability in the Internet Explorer browser allows a hacker to bypass the ASLR mechanism.

The vulnerability of the Internet Explorer browser is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass the ASLR mechanism by using a specially crafted web page...

The vulnerability of the Cisco Unified Communications Manager system allows a perpetrator to gain root user privileges.

The vulnerability of the Prime Collaboration Deployment component of the Cisco Unified Communications Manager system is related to the lack of protection for service data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain root user privileges through a direc...

The vulnerability of the InfoSphere Information Server software platform, which allows a perpetrator to gain access to protected information

The vulnerability of the InfoSphere Information Server software installer is related to the lack of protection for operational data. Exploiting this vulnerability could allow a malicious actor, operating locally, to gain access to protected information using standard commands...

The vulnerability of the Adobe AIR software platform, which allows a hacker to bypass the ASLR protection mechanism

The vulnerability of the Adobe AIR software platform is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass the ASLR protection mechanism...

The vulnerability of the Flash Player software platform, which allows a violator to circumvent access restrictions

The vulnerability of the Flash Player software is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass access restrictions remotely...

The vulnerability of the Adobe AIR software platform, which allows a hacker to circumvent access restrictions

The vulnerability of the Adobe AIR software platform is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass access restrictions remotely...

The vulnerability of the Flash Player software allows attackers to carry out attacks related to memory cell addressing errors.

The vulnerability of the Flash Player software is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to perform attacks involving memory cell address errors...

The vulnerability of the Adobe AIR software platform allows attackers to carry out attacks related to memory cell addressing errors.

The vulnerability of the Adobe AIR software platform is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to perform attacks related to memory cell address corruption remotely...

The vulnerability of the Moodle learning management system allows a hacker to gain access to user account data.

The vulnerability of the login/confirm.php sub-component of the Moodle learning management system is related to the lack of protection for administrative data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to user account information during attemp...

The vulnerability of the Flash Player software platform, which allows a violator to circumvent access restrictions

The vulnerability of the Flash Player software is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass access restrictions remotely...

The vulnerability of the Security SiteProtector System, a website security protection system, allows attackers to gain access to the protected information.

The vulnerability of the Security SiteProtector System security system lies in the lack of protection for operational data. Exploiting this vulnerability allows a malicious actor, operating locally, to gain access to protected information by reading cached data...

The vulnerability of the microprogrammed software of the LifeCare PCA Infusion System allows a perpetrator to gain access to the device.

The vulnerability of the microprogrammed medical device LifeCare PCA Infusion System is related to the lack of protection for operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to the device...

The vulnerability of the Adobe AIR software platform, which allows a hacker to circumvent access restrictions

The vulnerability of the Adobe AIR software platform is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass access restrictions remotely...

The vulnerability of the Security SiteProtector System’s security protection mechanism allows a hacker to execute arbitrary web or HTML code.

The vulnerability of the Security SiteProtector System security system exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to execute arbitrary web or HTML code remotely...

WordPress Albo Pretorio Online Plugin 3.2 - Multiple Vulnerabilities

There are multiple vulnerabilities in Albo Pretorio Online plugin, such as SQL injection, CSRF and stored XSS. Also, some reflected XSS. Because of these vulnerabilities, the item deletion is unprotected and any element could be deleted, also, eash form input is vulnerable. Solution Upgrade the...

Seagate Central 2014.0410.0026-F - Remote Facebook Access Token

!/usr/bin/python seagatecentralfacebook.py Seagate Central Remote Facebook Access Token Exploit Jeremy Brown jbrown3264/gmail May 2015 -Synopsis- Seagate Central stores linked Facebook account access tokens in /etc/archiveaccounts.ser and this exploit takes advantage of two bugs: 1 Passwordless...

WordPress Video Gallery Plugin 2.8 Arbitrary Mail Relay Vulnerability

Exploit for php platform in category web applications Exploit Title : Wordpress Video Gallery 2.8 Unprotected Mail Page Exploit Author : Claudio Viviani Website Author: http://www.homelab.it http://archive-exploit.homelab.it/1 Full HomelabIT Vulns Archive Vendor Homepage :...