AoF and CSRF vulnerabilities in D-Link DAP 1150

Hello 3APA3A! I want to warn you about new security vulnerabilities in D-Link DAP 1150 Wi-Fi Access Point and Router. These are Abuse of Functionality and Cross-Site Request Forgery vulnerabilities. This is my third advisory from series of advisories about vulnerabilities in D-Link products. Abus...

D-Link DAP-1150 1.2.94 - Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/51985/info D-Link DAP-1150 is prone to a cross-site request-forgery vulnerability. Exploiting this issue may allow a remote attacker to perform certain administrative actions and gain unauthorized access to the affected device. Other attacks are also...

D-Link DAP-1150 1.2.94 - Cross-Site Request Forgery

D-Link DAP-1150 1.2.94 - Cross-Site Request Forgery source: https://www.securityfocus.com/bid/51985/info D-Link DAP-1150 is prone to a cross-site request-forgery vulnerability. Exploiting this issue may allow a remote attacker to perform certain administrative actions and gain unauthorized access...

D-Link DAP 1150 CSRF / XSS / Denial Of Service

Hello list! I want to warn you about new security vulnerabilities in D-Link DAP 1150 Wi-Fi Access Point and Router. These are Cross-Site Request Forgery, Denial of Service and Cross-Site Scripting vulnerabilities. This is my fourth advisory from series of advisories about vulnerabilities in D-Lin...

Vulnerabilities in D-Link DAP 1150

Hello 3APA3A! I want to warn you about security vulnerabilities in D-Link DAP 1150 WiFi Access Point and Router. These are Predictable Resource Location, Brute Force and Cross-Site Request Forgery vulnerabilities. This is my second advisory from series of advisories about vulnerabilities in D-Lin...

Download Accelerator plus (DAP) 9.7 M3U File Buffer Overflow Exploit (Unicode SEH)

No description provided by source. !/usr/bin/python +Exploit Title: Download Accelarator plusDAP 9.7 M3U File Buffer Overflow ExploitUNICODE-SEH +Date: 23\07\2011 +Author: C4SS!0 G0M3S +Software Link: http://download.speedbit.com/dap97baix.exe +Version: 9.7 +Tested On: WIN-XP SP3 Brazilian...

Download Accelerator Plus (DAP) 9.7 - '.M3U' File Buffer Overflow (SEH Unicode)

!/usr/bin/python +Exploit Title: Download Accelarator plusDAP 9.7 M3U File Buffer Overflow ExploitUNICODE-SEH +Date: 23\07\2011 +Author: C4SS!0 G0M3S +Software Link: http://download.speedbit.com/dap97baix.exe +Version: 9.7 +Tested On: WIN-XP SP3 Brazilian Portuguese +CVE: N/A import os import sys...

Injecting Fake Updates: Evilgrade

Evilgrade is a modular framework that allows the user to take advantage of poor upgrade implementations by injecting fake updates. It comes with pre-made binaries agents, a working default configuration for fast pentests, and has it’s own WebServer and DNSServer modules. Easy to set up new...

D-Link DAP-1160 Authentication Bypass

Security Advisory IS-2010-005 - D-Link DAP-1160 Authentication Bypass Advisory Information -------------------- Published: 2010-06-29 Updated: 2010-06-29 Manufacturer: D-Link Model: DAP-1160 Firmware version: 1.20b06 1.30b10 1.31b01 Vulnerability Details --------------------- Public References: N...

D-Link DAP-1160 routers unauthroized access

Uhauthorized remote configuration is possible via DCC D-Link Click'n'Connect protocol and Web interface...

D-Link DAP-1160 Unauthenticated Remote Configuration

Security Advisory IS-2010-004 - D-Link DAP-1160 Unauthenticated Remote Configuration Advisory Information -------------------- Published: 2010-06-28 Updated: 2010-06-28 Manufacturer: D-Link Model: DAP-1160 Firmware version: 1.20b06 1.30b10 1.31b01 Vulnerability Details --------------------- Publi...

IS-2010-004 - D-Link DAP-1160 Unauthenticated Remote Configuration

Security Advisory IS-2010-004 - D-Link DAP-1160 Unauthenticated Remote Configuration Advisory Information -------------------- Published: 2010-06-28 Updated: 2010-06-28 Manufacturer: D-Link Model: DAP-1160 Firmware version: 1.20b06 1.30b10 1.31b01 Vulnerability Details --------------------- Publi...

IS-2010-005 - D-Link DAP-1160 Authentication Bypass

Security Advisory IS-2010-005 - D-Link DAP-1160 Authentication Bypass Advisory Information -------------------- Published: 2010-06-29 Updated: 2010-06-29 Manufacturer: D-Link Model: DAP-1160 Firmware version: 1.20b06 1.30b10 1.31b01 Vulnerability Details --------------------- Public References: N...

D-Link DAP-1160 Wireless Access Point - DCC Protocol Security Bypass

D-Link DAP-1160 Wireless Access Point - DCC Protocol Security Bypass source: https://www.securityfocus.com/bid/41187/info The D-Link DAP-1160 wireless access point WAP is prone to a security-bypass vulnerability. Remote attackers can exploit this issue to bypass security restrictions, access...

D-Link DAP-1160 Wireless Access Point - DCC Protocol Security Bypass

source: https://www.securityfocus.com/bid/41187/info The D-Link DAP-1160 wireless access point WAP is prone to a security-bypass vulnerability. Remote attackers can exploit this issue to bypass security restrictions, access certain administrative functions, alter configuration, or trigger a...

CVE-2008-3433

CVE-2008-3433 affects SpeedBit Download Accelerator Plus (DAP) prior to 8.6.3.9. The issue is that DAP does not properly verify update authenticity, enabling a man-in-the-middle to substitute a Trojan-horse update and allow arbitrary code execution. The vulnerability is demonstrated by references...

CVE-2008-3433

SpeedBit Download Accelerator Plus DAP before 8.6.3.9 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning...

CVE-2008-3433: Improper Control of Generation of Code

SpeedBit Download Accelerator Plus DAP before 8.6.3.9 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning...

Download Accelerator Plus - DAP 8.x m3u File Buffer Overflow Exploit (c)

No description provided by source. include stdio.h include stdlib.h / DAP 8.x .m3u File BOF C Exploit for XP SP2,SP3 English SecurityFocus Advisory: Download Accelerator Plus DAP is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied inpu...

Download Accelerator Plus DAP 8.x - .m3u File Buffer Overflow

Download Accelerator Plus DAP 8.x - .m3u File Buffer Overflow include include / DAP 8.x .m3u File BOF C Exploit for XP SP2,SP3 English SecurityFocus Advisory: Download Accelerator Plus DAP is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on...