DD-WRT v24-sp1 - Cross-Site Reference Forgery

DD-WRT v24-sp1 - Cross-Site Reference Forgery Remote root dd-wrt -------------------------------------------------------------------------------- Written by Michael Brooks Special thanks to str0ke Exploits tested on the newist stable version: Firmware: DD-WRT v24-sp1 07/27/08 micro Product...

Merlix Educate Servert (Bypass/DD) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ================================================================== Merlix Educate Servert Bypass/DD Multiple Remote Vulnerabilities ================================================================== Merlix Educate Servert Bypass/DD Multipl...

Merlix Educate Servert (Bypass/DD) Multiple Remote Vulnerabilities

No description provided by source. Merlix Educate Servert Bypass/DD Multiple Remote Vuln ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Home: www.z0rlu.blogspot.com N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA :...

NightFall Personal Diary 1.0 (XSS/DD) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ===================================================================== NightFall Personal Diary 1.0 XSS/DD Multiple Remote Vulnerabilities =====================================================================...

Template Creature (SQL/DD) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ========================================================== Template Creature SQL/DD Multiple Remote Vulnerabilities ========================================================== ASP Template Creature DD/SQL Multiple Remote Vuln...

Template Creature (SQL/DD) Multiple Remote Vulnerabilities

No description provided by source. ASP Template Creature DD/SQL Multiple Remote Vuln. ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Home: www.z0rlu.blogspot.com N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA :...

Wbstreet v.1.0 (SQL/DD) Multiple Remote Vulnerabilities

No description provided by source. =================================================================== Wbstreet v.1.0 show.php id Remote SQL Injection Vulnerability =================================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' ...

Ocean12 Mailing List Manager Gold (DD/SQL/XSS) Vulnerabilities

No description provided by source. --------------------------------------------------------- Portal Name: Ocean12 Mailing List Manager Gold Vendor : http://ocean12tech.com/products/o12mailgold Author : PouyaServer , [email protected] Vulnerability : DD,SQL,XSS...

Ocean12 Mailing List Manager Gold (DD/SQL/XSS) Vulnerabilities

Exploit for unknown platform in category web applications ============================================================== Ocean12 Mailing List Manager Gold DD/SQL/XSS Vulnerabilities ==============================================================...

CVE-2008-4183: Exposure of Sensitive Information to an Unauthorized Actor

IntegraMOD 1.4.x stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a backup via a direct request to a backup/backup-yyyy-dd-mm.sql filename...

linux/mips (Linksys WRT54G/GL) execve shellcode 60 bytes

No description provided by source. / - MIPS little-endian - linux execve 60 bytes shellcode - execve"/bin/sh","/bin/sh",; - tested on Linksys WRT54G/GL DD-WRT Linux - based on scut paper Writing MIPS/Irix shellcode vaicebine at gmail dot com / include stdio.h char shellcode = "\x50\x73\x06\x24" /...

linux/mips (Linksys WRT54G/GL) port bind shellcode 276 bytes

No description provided by source. / - MIPS little-endian - linux port listener 276 bytes shellcode - execve"/bin/sh","/bin/sh",; - port 0x1337 4919 - tested on Linksys WRT54G/GL DD-WRT Linux - based on scut paper Writing MIPS/Irix shellcode vaicebine at gmail dot com / include stdio.h char...

linux/mips - Linksys WRT54G/GL port bind shellcode 276 bytes

linux/mips Linksys WRT54G/GL port bind shellcode 276 bytes. Shellcode exploit for linuxmips platform / - MIPS little-endian - linux port listener 276 bytes shellcode - execve"/bin/sh","/bin/sh",; - port 0x1337 4919 - tested on Linksys WRT54G/GL DD-WRT Linux - based on scut paper Writing MIPS/Irix...

linux/mips - Linksys WRT54G/GL execve shellcode 60 bytes

linux/mips Linksys WRT54G/GL execve shellcode 60 bytes. Shellcode exploit for linuxmips platform / - MIPS little-endian - linux execve 60 bytes shellcode - execve"/bin/sh","/bin/sh",; - tested on Linksys WRT54G/GL DD-WRT Linux - based on scut paper Writing MIPS/Irix shellcode vaicebine at gmail d...

linux/mips (Linksys WRT54G/GL) execve shellcode 60 bytes

Exploit for linux/mips platform in category shellcode ======================================================== linux/mips Linksys WRT54G/GL execve shellcode 60 bytes ======================================================== / - MIPS little-endian - linux execve 60 bytes shellcode -...

linux/mips (Linksys WRT54G/GL) port bind shellcode 276 bytes

Exploit for linux/mips platform in category shellcode ============================================================ linux/mips Linksys WRT54G/GL port bind shellcode 276 bytes ============================================================ / - MIPS little-endian - linux port listener 276 bytes shellco...

DD-WRT - Site Survey SSID Script Injection

source: https://www.securityfocus.com/bid/30573/info DD-WRT is prone to a script-injection vulnerability because it fails to adequately sanitize user-supplied data to the 'Site Survey' section of the administrative web interface. Attackers can exploit this issue to execute arbitrary script code i...

DD-WRT - Site Survey SSID Script Injection

DD-WRT - Site Survey SSID Script Injection source: https://www.securityfocus.com/bid/30573/info DD-WRT is prone to a script-injection vulnerability because it fails to adequately sanitize user-supplied data to the 'Site Survey' section of the administrative web interface. Attackers can exploit th...

CVE-2007-5027: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in cgi-bin/ddns in the web management panel for the WBR3404TX broadband router with firmware R1.94p0vTIG allow remote attackers to inject arbitrary web script or HTML via the 1 DD or 2 DU parameter...

CVE-2006-4145: Undefined Security Weakness

The Universal Disk Format UDF filesystem driver in Linux kernel 2.6.17 and earlier allows local users to cause a denial of service hang and crash via certain operations involving truncated files, as demonstrated via the dd command...