Default credentials

The web administration interface on ReadyNet WRT300N-DD devices with firmware 1.0.26 has a default password of admin for the admin account, which allows remote attackers to obtain administrative privileges by leveraging a LAN session...

CVE-2015-7282

The CVE-2015-7282 entry concerns ReadyNet WRT300N-DD devices (firmware 1.0.26) where DNS queries use a fixed source port. This behavior enables a remote attacker to spoof DNS responses by choosing that destination port, potentially affecting LAN clients by redirecting them to attacker-controlled ...

CVE-2015-7280

The web administration interface on ReadyNet WRT300N-DD devices with firmware 1.0.26 has a default password of admin for the admin account, which allows remote attackers to obtain administrative privileges by leveraging a LAN session...

CVE-2015-7281

Cross-site request forgery CSRF vulnerability on ReadyNet WRT300N-DD devices with firmware 1.0.26 allows remote attackers to hijack the authentication of arbitrary users...

CVE-2015-7282

ReadyNet WRT300N-DD devices with firmware 1.0.26 use the same source port number for every DNS query, which makes it easier for remote attackers to spoof responses by selecting that number for the destination port...

CVE-2015-7281

The vulnerability CVE-2015-7281 affects ReadyNet WRT300N-DD devices running firmware 1.0.26. A CSRF flaw allows an attacker to hijack the authentication of arbitrary users, by exploiting requests made within a user’s session, effectively acting with the victim’s privileges. The CNVD entry for Rea...

CVE-2015-7280

The CVE-2015-7280 entry affects ReadyNet WRT300N-DD devices (firmware 1.0.26). The vulnerability arises from default credentials (admin/admin) on the web administration interface, enabling a LAN‑based attacker to obtain administrative privileges. Impact is compatible with a high/severe rating (NV...

Data loss risk with Backup Copy to Data Domain via DDBoost

Challenge Backup Copy job retention processing overlapping with the DD Clean process garbage collection may result in data loss. Cause Backup Copy job retention processing overlapping with the DD Clean process garbage collection may result in data loss due to Data Domain erroneously processing fi...

Migrate Backups from NFS/SMB Data Domain Repository to DDBoost-based Repository

Purpose This article documents how to migrate existing restore points from an existing NFS or SMB repository to an integrated DDBoost-based repository. Use case: During initial deployment of Veeam Backup & Replication, the Data Domain storage appliance was added as an SMB share repository, and th...

Dd-wrt Router Information Disclosure

Remote information disclosure Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

merlix educate servert (bypass/dd) Multiple Vulnerabilities

No description provided by source. Merlix Educate Servert Bypass/DD Multiple Remote Vuln ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Home: www.z0rlu.blogspot.com N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA :...

Power System Of Article Management 3.0 - (DD/XSS) Vulnerabilities

No description provided by source. --------------------------------------------------------- Portal Name: Power System Of Article Management Version : 3.0 Author : PouyaServer , [email protected] Vulnerability : DD/XSS --------------------------------------------------------- DD:...

Linux Kernel <= 2.6.17.4 - (proc) Local Root Exploit

No description provided by source. / Author: h00lyshit Vulnerable: Linux 2.6 ALL Type of Vulnerability: Local Race Tested On : various distros Vendor Status: unknown Disclaimer: In no event shall the author be liable for any damages whatsoever arising out of or in connection with the use or sprea...

DD-WRT 24-preSP2 - Information Disclosure Vulnerability

No description provided by source...

DD-WRT v24-sp1 - (CSRF) Cross Site Reference Forgery Exploit

No description provided by source. Remote root dd-wrt -------------------------------------------------------------------------------- Written by Michael Brooks Special thanks to str0ke Exploits tested on the newist stable version: Firmware: DD-WRT v24-sp1 07/27/08 micro Product Homepage:...

DD-WRT Site Survey SSID Script Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/30573/info DD-WRT is prone to a script-injection vulnerability because it fails to adequately sanitize user-supplied data to the 'Site Survey' section of the administrative web interface. Attackers can exploit this issue ...

wbstreet 1.0 (sql/dd) Multiple Vulnerabilities

No description provided by source. =================================================================== Wbstreet v.1.0 show.php id Remote SQL Injection Vulnerability =================================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' ...

team 1.x (dd/xss) Multiple Vulnerabilities

No description provided by source. --------------------------------------------------------- Portal Name: Team Board Version : all version Google Dork : team5 studio all rights reserved site:cn Author : PouyaServer , [email protected] Vulnerability : DD/XSS...

the net guys aspired2blog (sql/dd) Multiple Vulnerabilities

No description provided by source. --------------------------------------------------------- Portal Name: ASPIred2Blog Vendor : http://thenetguys.us/Home/Blog.asp Author : PouyaServer , [email protected] Vulnerability : SQL,DD --------------------------------------------------------- DD:...

rankem (dd/xss/cm) Multiple Vulnerabilities

No description provided by source. --------------------------------------------------------- Portal Name: RankEm Download : http://www.katywhitton.com/downloads/rankEm/rankEmDL.zip Author : PouyaServer , [email protected] Vulnerability : DD/XSS/CM...