Sagem Fast 3304-V2 - Authentication Bypass (1)

Title : Sagem F@st 3304-V2 Authentication Bypass Vendor : http://www.sagemcom.com Severity : High Tested on : Firefox, Google Chrome, Internet Explorer Tested Router : Sagem F@st 3304-V2 3304, 3464, 3504 may also be affected Date : 2014-09-04 Author : Yassine Aboukir Contact : [email protected]...

Zyxel P660系列路由器拒绝服务漏洞

Bugtraq ID:66570 CVE ID:CVE-2013-3588 Zyxel P660是路由器系列产品。 Zyxel P660系列路由器的Web管理接口在解析大量SYN数据包时，在实现上存在拒绝服务漏洞，这可造成设备重载，导致拒绝服务。 0 ZyXEL P660 目前没有详细解决方案： http://www.zyxel.com/index.php...

Code injection

The web management interface on Zyxel P660 devices allows remote attackers to cause a denial of service reboot via a flood of TCP SYN packets...

CVE-2013-3588

The CVE-2013-3588 entry concerns Zyxel P660 series devices where the web management interface is vulnerable to a denial of service caused by a flood of TCP SYN packets. Remote attackers can trigger a reboot, effectively taking the device offline via a network-based SYN flood. The NVD and CERT ref...

3Com Web Management Interface Default Credentials

The remote 3Com Web Management Interface that uses a set of known, default credentials. Knowing these, an attacker can gain control of the device. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid73190;...

Design/Logic Flaw

The web management interface on the Cisco RV110W firewall with firmware 1.2.0.9 and earlier, RV215W router with firmware 1.1.0.5 and earlier, and CVR100W router with firmware 1.0.1.19 and earlier does not prevent replaying of modified authentication requests, which allows remote attackers to obta...

Reflected cross-site scripting (XSS) vulnerability in Mediatrix Web Management Interface login page

Advisory ID: hag201476 Product: Mediatrix Web Management Interface Vendor: Media5 Corporation Vulnerable Versions: Mediatrix 4402 Device with Firmware Dgw 1.1.13.186 and probably prior Tested Version: Mediatrix 4402 Device with Firmware Dgw 1.1.13.186 Advisory Publication: January 23, 2014 Vendor...

CVE-2014-1612

Cross-site scripting XSS vulnerability in login.esp in the Web Management Interface in Media5 Mediatrix 4402 VoIP Gateway with firmware Dgw 1.1.13.186 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in login.esp in the Web Management Interface in Media5 Mediatrix 4402 VoIP Gateway with firmware Dgw 1.1.13.186 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter...

CVE-2013-5554

Cisco WAAS Mobile Server prior to version 3.5.5 is affected by a directory-traversal vulnerability in the web-management interface that allows remote attackers to upload and execute arbitrary files via a crafted HTTP POST request (Bug ID CSCuh69773). The issue enables remote code execution with t...

Cisco Unified Computing System Fabric Interconnect Cross-Site Request Forgery Vulnerability

A vulnerability in the fabric interconnect FI web management interface of the Cisco Unified Computing System could allow an unauthenticated, remote attacker to conduct cross-site request forgery CSRF attacks. The vulnerability occurs because the web interface relies on cookies to authenticate...

CVE-2012-4084

Cross-site request forgery CSRF vulnerability in the web-management interface in the fabric interconnect FI component in Cisco Unified Computing System UCS allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCtg20755...

CVE-2012-4084

Cisco UCS Fabric Interconnect web management interface CSRF vulnerability (CVE-2012-4084) allows unauthenticated remote attackers to hijack user authentication via cookie-based session handling. Exploitation would enable the attacker to perform actions as the affected user; Cisco notes that softw...

CVE-2012-4084

Cross-site request forgery CSRF vulnerability in the web-management interface in the fabric interconnect FI component in Cisco Unified Computing System UCS allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCtg20755...

Router ONO Hitron CDE-30364 - CSRF Vulnerability

Exploit for hardware platform in category web applications Exploit Title: Router ONO Hitron CDE-30364 - CSRF Vulnerability Date: 14-9-2013 Exploit Author: Matias Mingorance Svensson - matias.msatowasp.org Vendor Homepage:...

Router ONO Hitron CDE-30364 Cross Site Request Forgery

Exploit Title: Router ONO Hitron CDE-30364 - CSRF Vulnerability Date: 14-9-2013 Exploit Author: Matias Mingorance Svensson - matias.msatowasp.org Vendor Homepage: http://www.ono.es/clientes/te-ayudamos/dudas/internet/equipos/hitron/hitron-cde-30364/ Tested on: Hitron Technologies CDE-30364 Versio...

Cisco Email Security Appliance Web Detection

The web management interface for Cisco Email Security Appliance was detected on the remote host. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid69074; scriptversion"1.12"; scriptsetattributeattribute:"pluginmodificationdate", value:"2025/10/02";...

Citrix NetScaler Web Management Interface Default Administrator Credentials

The remote Citrix NetScaler Web Management Interface uses a default password 'nsroot' for the administrator account 'nsroot'. With this information, an attacker can gain complete administrative access to the Citrix NetScaler appliance. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Puppet Enterprise Console Detection

Puppet Enterprise Console, a web management interface for Puppet Enterprise, was detected on the remote web server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid66234; scriptversion"1.5"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"Puppet Enterprise Console...

D-Link DSL-2740B ADSL Router - Authentication Bypass

D-Link DSL-2740B ADSL Router - Authentication Bypass +------------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : D-Link DSL-2740B ADSL Router Authentication Bypass Date : 10-02-2013 Author : Ivano...