MIPS-CVE-2014-9222

Descargo de responsabilidad Los tutoriales son solo con fines informativos y educativos. Creo que el hacking ético, la seguridad de la información y la ciberseguridad deberían ser temas familiares para cualquier persona que use información digital y computadoras. Creo que es imposible defenderse ...

misfortune-cookie

Suite de PoC para CVE-2014-9222 "Misfortune Cookie" Desbordamiento de pila en el manejo de cookies HTTP de AllegroSoft RomPager todas las versiones 4.34. Una única solicitud no autenticada con una cabecera Cookie: manipulada corrompe la memoria. Efectos: bypass de autenticación de administrador,...

MIPS-CVE-2014-9222

Descargo de responsabilidad Los tutoriales son solo para fines informativos y educativos. Creo que el hacking ético, la seguridad de la información y la ciberseguridad deberían ser temas familiares para cualquier persona que utilice información digital y ordenadores. Creo que es imposible...

EUVD-2014-9048

Malware in sbrugna...

Allegro RomPager 缓冲区溢出漏洞

AllegroSoft RomPager是美国AllegroSoft公司的一套嵌入式Web服务器工具包，它允许用户使用通用的Web浏览器管理和控制网络打印机、交换机和路由器等网络设备的万维网（WWW）服务。 AllegroSoft RomPager中存在缓冲区溢出漏洞。远程攻击者可利用该漏洞造成拒绝服务或执行任意代码。 目前厂商已经发布了升级补丁以修复此安全问题，补丁获取链接：...

CVE-2014-9223

Multiple buffer overflows in AllegroSoft RomPager, as used in Huawei Home Gateway products and other vendors and products, allow remote attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors related to authorization...

CVE-2014-9222

AllegroSoft RomPager 4.34 and earlier, as used in Huawei Home Gateway products and other vendors and products, allows remote attackers to gain privileges via a crafted cookie that triggers memory corruption, aka the "Misfortune Cookie" vulnerability...

Buffer overflow

Multiple buffer overflows in AllegroSoft RomPager, as used in Huawei Home Gateway products and other vendors and products, allow remote attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors related to authorization...

Memory corruption

AllegroSoft RomPager 4.34 and earlier, as used in Huawei Home Gateway products and other vendors and products, allows remote attackers to gain privileges via a crafted cookie that triggers memory corruption, aka the "Misfortune Cookie" vulnerability...

CVE-2014-9223

CVE-2014-9223 is a vulnerability in the RomPager embedded web server used by Huawei Home Gateway devices and other vendors. The issue is a digest authentication buffer overflow in RomPager’s cookie/auth processing, enabling a remote attacker to cause a denial of service and potentially execute ar...

CVE-2014-9222

AllegroSoft RomPager 4.34 and earlier, as used in Huawei Home Gateway products and other vendors and products, allows remote attackers to gain privileges via a crafted cookie that triggers memory corruption, aka the "Misfortune Cookie" vulnerability...

CVE-2014-9222

The AllegroSoft RomPager embedded web server (versions 4.34 and earlier , specifically 4.07 ) is vulnerable to a stack overflow via a crafted HTTP cookie in its handling logic. This vulnerability, known as the "Misfortune Cookie ," allows remote attackers to trigger memory corruption , leading to...

CVE-2014-9222: Undefined Security Weakness

AllegroSoft RomPager 4.34 and earlier, as used in Huawei Home Gateway products and other vendors and products, allows remote attackers to gain privileges via a crafted cookie that triggers memory corruption, aka the "Misfortune Cookie" vulnerability...

CVE-2014-9223: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in AllegroSoft RomPager, as used in Huawei Home Gateway products and other vendors and products, allow remote attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors related to authorization...

Vulnerability warning: doom cookie Misfortune Cookie vulnerability affects the global 1 2 0 0 million router-vulnerability warning-the black bar safety net

One called“doom cookie Misfortune Cookie”a serious vulnerability is affecting the global 1 2 0 0 million router security, D-Link, TP-Link, Huawei, ZTE and other brands are affected, the attacker can use a vulnerability of remote control devices and monitoring traffic. Learn about the“doom...