Buffer overflow

Buffer overflow in the PPP Access Concentrator PPPAC on the SEIL/x86 with firmware 1.00 through 1.61, SEIL/B1 with firmware 1.00 through 3.11, SEIL/X1 with firmware 1.00 through 3.11, SEIL/X2 with firmware 1.00 through 3.11, SEIL/Turbo with firmware 1.80 through 2.10, and SEIL/neu 2FE Plus with...

CVE-2011-0454

SEIL Series routers (PPPoE PPPoE PPPAC) contain a buffer overflow vulnerability in the PPP Access Concentrator when processing PPPoE packets. Affected firmware ranges include SEIL/x86 1.00–1.61, SEIL/B1 1.00–3.11, SEIL/X1 1.00–3.11, SEIL/X2 1.00–3.11, SEIL/Turbo 1.80–2.10, and SEIL/neu 2FE Plus 1...

CVE-2011-0454: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the PPP Access Concentrator PPPAC on the SEIL/x86 with firmware 1.00 through 1.61, SEIL/B1 with firmware 1.00 through 3.11, SEIL/X1 with firmware 1.00 through 3.11, SEIL/X2 with firmware 1.00 through 3.11, SEIL/Turbo with firmware 1.80 through 2.10, and SEIL/neu 2FE Plus with...

PT-2011-2357

Name of the Vulnerable Software and Affected Versions SEIL/x86 versions 1.00 through 1.61 SEIL/B1 versions 1.00 through 3.11 SEIL/X1 versions 1.00 through 3.11 SEIL/X2 versions 1.00 through 3.11 SEIL/Turbo versions 1.80 through 2.10 SEIL/neu 2FE Plus versions 1.80 through 2.10 Description A buffe...

CVE-2010-2363

CVE-2010-2363 affects SEIL/X1, SEIL/X2, and SEIL/B1 routers (firmware 1.00–2.73). In strict mode, IPv6 Unicast Reverse Path Forwarding (RPF) fails to drop certain packets, potentially allowing remote spoofed-IP traffic to bypass access restrictions. Connected sources (NVD, JVN/JVNDB) confirm the ...

CVE-2010-2363: Undefined Security Weakness

The IPv6 Unicast Reverse Path Forwarding RPF implementation on the SEIL/X1, SEIL/X2, and SEIL/B1 routers with firmware 1.00 through 2.73, when strict mode is used, does not properly drop packets, which might allow remote attackers to bypass intended access restrictions via a spoofed IP address...

Discuz! X1某页面存在XSS漏洞

简要描述： 页面对取到的参数没有过滤，直接echo到了html里。 详细说明： api/db/dbbak.php页面，对$apptype缺少必要的过滤，调用apimsg函数时直接将$apptype echo到了html中。 漏洞证明： http://www.discuz.net/api/db/dbbak.php?apptype=1%22%3E%3Cscript%3Ealert1%3C/script%3E%3C%22...

Abyss Web Server X1 - Cross-Site Request Forgery

Abyss Web Server X1 - Cross-Site Request Forgery http://osvdb.org/show/osvdb/64693 http://cross-site-scripting.blogspot.com/2010/05/abyss-web-server-x1-xsrf.html : Abyss Web Server X1 XSRF A cross-site request forgery vunlerability in the Abyss Web Server X1 management console can be exploited to...

Abyss Web Server X1 Cross Site Request Forgery

!--========================================================================================================= //\ /\ /\ /\ /\ /\ ///\ //\ /\ /\///\ // \ // //\ \ / //\ \ / // //\ \ /\\ \ \ \ / / / / // \ \ // // // // \ // //\ \\ \ // /// \ \ / \ / // / // / / / / / \ \ / / / ...

Code injection

Internet Initiative Japan SEIL/X1, SEIL/X2, and SEIL/B1 firmware 2.30 through 2.51, when NAT is enabled, allows remote attackers to cause a denial of service system restart via crafted GRE packets...

CVE-2009-4292

Buffer overflow in the URL filtering function in Internet Initiative Japan SEIL/X1, SEIL/X2, and SEIL/B1 firmware 2.40 through 2.51 allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2009-4292

CVE-2009-4292 corresponds to a buffer overflow in the URL filtering function of Internet Initiative Japan SEIL/X1, SEIL/X2, and SEIL/B1 firmware versions 2.40–2.51. The vulnerability may allow a remote attacker to execute arbitrary code when processing specially crafted URLs. Public details consi...

CVE-2009-4293: Undefined Security Weakness

Internet Initiative Japan SEIL/X1, SEIL/X2, and SEIL/B1 firmware 2.30 through 2.51, when NAT is enabled, allows remote attackers to cause a denial of service system restart via crafted GRE packets...

CVE-2009-4292: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the URL filtering function in Internet Initiative Japan SEIL/X1, SEIL/X2, and SEIL/B1 firmware 2.40 through 2.51 allows remote attackers to execute arbitrary code via unspecified vectors...

Unfixed XSS vulnerability at tool.studio-x1.com

Security researcher kusomiso.com, has submitted on 22/09/2007 a cross-site-scripting XSS vulnerability affecting tool.studio-x1.com, which at the time of submission ranked 2244986 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/09/2007. It i...