CVE-2006-2901

The web server for D-Link Wireless Access-Point DWL-2100ap firmware 2.10na and earlier allows remote attackers to obtain sensitive system information via a request to an arbitrary .cfg file, which returns configuration information including passwords...

CVE-2006-2901

The CVE-2006-2901 entry concerns the D-Link DWL-2100ap wireless access point, with firmware 2.10na and earlier. The web server in these devices can be coerced to reveal sensitive configuration data by requesting an arbitrary .cfg file, exposing passwords and other config information. This is a di...

D-Link DSA-3100 wireless access point crossite scripting

Crossite scriptign with username on authentication page...

D-Link DWL-G700AP wireless access point DoS

Device crashes on HTTP "GET nn" request via web interface...

D-Link Wireless Access Point (Fragmented UDP) DoS Exploit

No description provided by source. / Aaron Portnoy silc.thunkers.net, thunkers D-Link Wireless Access Point Fragmented UDP DoS Proof of Concept gcc -o dlinkdos dlinkdos.c -lnet -Wall / include libnet.h define DEVICE "eth0" define SRCIP "127.0.0.1" define DSTIP "127.0.0.1" define SRCPRT 200 define...

D-Link Wireless Access Point - Fragmented UDP Denial of Service

/ Aaron Portnoy silc.thunkers.net, thunkers D-Link Wireless Access Point Fragmented UDP DoS Proof of Concept gcc -o dlinkdos dlinkdos.c -lnet -Wall / include define DEVICE "eth0" define SRCIP "127.0.0.1" define DSTIP "127.0.0.1" define SRCPRT 200 define DSTPRT 11111 void usage char name fprintf...

D-Link Wireless Access Point - Fragmented UDP Denial of Service

D-Link Wireless Access Point - Fragmented UDP Denial of Service / Aaron Portnoy silc.thunkers.net, thunkers D-Link Wireless Access Point Fragmented UDP DoS Proof of Concept gcc -o dlinkdos dlinkdos.c -lnet -Wall / include define DEVICE "eth0" define SRCIP "127.0.0.1" define DSTIP "127.0.0.1" defi...

D-Link Wireless Access Point (Fragmented UDP) DoS Exploit

Exploit for hardware platform in category dos / poc ========================================================= D-Link Wireless Access Point Fragmented UDP DoS Exploit ========================================================= / Aaron Portnoy silc.thunkers.net, thunkers D-Link Wireless Access Point...

Cisco Aironet Wireless Access Points - Memory Exhaustion ARP (Denial of Service)

Cisco Aironet Wireless Access Points - Memory Exhaustion ARP Denial of Service // // Cisco Killer - ciskill.c // // Usage: ./ciskill device // // Author: Pasv pasvninja at gmail.com // // Credit: This exploit takes advantage of a vulnerability that was // discovered by Eric Smith on January 12,...

Access Point Memory Exhaustion from ARP Attacks

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

[Full-disclosure] Cisco Security Advisory: Access Point Memory Exhaustion from ARP Attacks

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: ======================== Access Point Memory Exhaustion from ARP Attacks =============================================== Advisory ID: cisco-sa-20060112-wireless...

Airport Administrative Traffic Detection (192/UDP)

The remote host is an Airport, Airport Extreme or Airport Express wireless access point. It is possible to gather information about the remote base station such as its connection type or connection time by sending packets to UDP port 192. An attacker connected to this network may also use this...

CVE-2004-2557

CVE-2004-2557 affects NetGear WG602 (WG602v1) Wireless Access Point 1.7.14, which contains a hardcoded admin account: username "superman" and password "21241036". This permits remote configuration changes by an attacker. Connected documents confirm the concrete details; exploitation status and fi...

CVE-2004-2556

CVE-2004-2556 affects NetGear WG602 (WG602v1) Wireless Access Point firmware 1.04.0 and 1.5.67, which contain a hardcoded administrator account (username: super, password: 5777364). This flaw allows remote attackers to modify the device configuration. The issue is rooted in a hardcoded credential...

CVE-2004-2557

NetGear WG602 aka WG602v1 Wireless Access Point 1.7.14 has a hardcoded account of username "superman" and password "21241036", which allows remote attackers to modify the configuration...

CVE-2002-2149

CVE-2002-2149 describes a buffer overflow in Lucent Access Point 300, 600, and 1500 Service Routers. A remote attacker can cause a denial-of-service reboot by sending a long HTTP request to the device’s administrative interface. Documented in NVD/Red Hat CVE entries; CVSS v2 base score 5.0 (Netwo...

CVE-2002-2149

Buffer overflow in Lucent Access Point 300, 600, and 1500 Service Routers allows remote attackers to cause a denial of service reboot via a long HTTP request to the administrative interface...

AirConnect Default Password (HTTP)

This AirConnect wireless access point still has the default password set for the web interface. SPDX-FileCopyrightText: 2002 Digital Defense Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2005-2410

Format string vulnerability in the nminfohandler function in Network Manager may allow remote attackers to execute arbitrary code via format string specifiers in a Wireless Access Point identifier, which is not properly handled in a syslog call...

CVE-2005-2410

Format string vulnerability in the nminfohandler function in Network Manager may allow remote attackers to execute arbitrary code via format string specifiers in a Wireless Access Point identifier, which is not properly handled in a syslog call...