1355 matches found
Security Advisory-WPS PIN Offline Brute Force Cracking Vulnerability in Huawei Home Gateway Products
Some Huawei home gateways are affected by the PIN offline brute force cracking vulnerability of the WPS protocol because the random number generator RNG used in the supplier’s solution is not random enough. As a result, brute force cracking the PIN code is easier. After an attacker cracks the PIN...
TIPASK问答系统SQL注入三（有多个大型互联网企业案例）
简要描述： TIPASK问答系统SQL注入三（影响天极网、戴尔中国、WPS office、小米等网站） 详细说明： 部分案例： 通过源代码发现/control/gift.php存在注入，部分代码如下 function onadd ifisset$this-post'realname' $realname = $this-post'realname'; $email = $this-post'email'; $phone = $this-post'phone'; $addr = $this-post'addr'; $postcode = $this-post'postcode'; $qq ...
Mandriva Linux Security Advisory : wpa_supplicant (MDVSA-2014:211)
Updated wpasupplicant packages fix security vulnerability : A vulnerability was found in the mechanism wpacli and hostapdcli use for executing action scripts. An unsanitized string received from a remote device can be passed to a system call resulting in arbitrary command execution under the...
MGASA-2014-0429 Updated wpa_supplicant and hostapd packages fix security vulnerability
A vulnerability was found in the mechanism wpacli and hostapdcli use for executing action scripts. An unsanitized string received from a remote device can be passed to a system call resulting in arbitrary command execution under the privileges of the wpacli/hostapdcli process which may be root in...
Updated wpa_supplicant and hostapd packages fix security vulnerability
A vulnerability was found in the mechanism wpacli and hostapdcli use for executing action scripts. An unsanitized string received from a remote device can be passed to a system call resulting in arbitrary command execution under the privileges of the wpacli/hostapdcli process which may be root in...
WPS Implementation Issue Exposes Wi-Fi Routers to Attack
A number of popular home and small office routers suffer from an implementation problem that could lead an experienced hacker down the road toward learning the devices’ eight-digit Wi-Fi Protected Setup WPS PINs in one guess. The attack, developed by Dominique Bongard, founder of 0xcite of...
Sagemcom F@st 3184 2.1.11 - Multiple Vulnerabilities
No description provided by source. +------------------------------------------------------------------------------+ | HOTBOX is the leading router/modem appliance of | | HOT Cable communication company in israel. | | The Appliance is manufactured by SAGEMCOM | | and carries the model name F@st...
NetGear DGN2200 N300 Wireless Router - Multiple Vulnerabilities
No description provided by source. Title: Multiple vulnerabilities in NETGEAR N300 WIRELESS ADSL2+ MODEM ROUTER DGN2200 ==================================================================================== Notification Date: 11 February 2014 Affected Vendor: NetGear Affected Hardware: NetGear...
WPS Office Wpsio.dll - Stack Buffer Overflow Vulnerability
No description provided by source...
Microsoft Works 8.0 File Converter Field Length Remote Code Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27659/info Microsoft Works File Converter is prone to a remote code-execution vulnerability because it fails to adequately validate user-supplied input. An attacker could exploit this issue by enticing a victim to open a...
NetGear DGN2200 N300无线路由器多个漏洞
Title: Multiple vulnerabilities in NETGEAR N300 WIRELESS ADSL2+ MODEM ROUTER DGN2200 ==================================================================================== Notification Date: 11 February 2014 Affected Vendor: NetGear Affected Hardware: NetGear DGN2200 N300 Wireless ADSL2+ Modem Rout...
CVE-2012-4886
Stack-based buffer overflow in wpsio.dll in Kingsoft WPS Office 2012 possibly 8.1.0.3238 allows remote attackers to execute arbitrary code via a long BSTR string...
Stack overflow
Stack-based buffer overflow in wpsio.dll in Kingsoft WPS Office 2012 possibly 8.1.0.3238 allows remote attackers to execute arbitrary code via a long BSTR string...
CVE-2012-4886
Stack-based buffer overflow in wpsio.dll in Kingsoft WPS Office 2012 possibly 8.1.0.3238 allows remote attackers to execute arbitrary code via a long BSTR string...
CVE-2012-4886
CVE-2012-4886 describes a stack-based buffer overflow in Kingsoft WPS Office 2012’s wpsio.dll (likely version 8.1.0.3238 or similar). A long BSTR string copied into a stack buffer enables a remote attacker to execute arbitrary code. Public PoCs and exploits exist (e.g., Exploit-DB, PoC binaries, ...
CVE-2012-4886: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in wpsio.dll in Kingsoft WPS Office 2012 possibly 8.1.0.3238 allows remote attackers to execute arbitrary code via a long BSTR string...
PT-2014-2286
Name of the Vulnerable Software and Affected Versions Kingsoft WPS Office version 8.1.0.3238 Description A stack-based buffer overflow issue in the wpsio.dll component of Kingsoft WPS Office allows remote attackers to execute arbitrary code via a long BSTR string. Recommendations For Kingsoft WPS...
Huawei E5331安全绕过和信息泄漏漏洞
Bugtraq ID:66065 Huawei E5331 MiFi mobile hotspot是一款3G路由器设备。 Huawei E5331 MiFi mobile hotspot缺少正确的访问验证，允许远程攻击者无需验证访问WEB接口URL，获取配置信息。或提交特制的POST请求，更改设备配置。 0 Huawei E5331 MiFi mobile hotspot 21.344.11.00.414 厂商补丁： Huawei ----- Huawei E5331 MiFi mobile hotspot 21.344.27.00.414已经修复该漏洞，建议用户下载更新：...
Microsoft Works WPS File Field Length Handling Stack Overflow (MS08-011) - Ver2 (CVE-2008-0108)
Microsoft Works is home productivity software suite with fewer features than the Microsoft Office suite. The Microsoft Works Converter allows the user to open, edit, and save files in the Microsoft Works file format. CVE-2007-0216: The vulnerability is due to an error in the Microsoft Works...
NetGear DGN2200 N300 Wireless Router Multiple Vulnerabilities (Feb 2014) - Active Check
NetGear DGN2200 N300 Wireless Routers are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...