Planet VC-200M DSL router DoS

Inaccessible administration interface on HTTP GET request with missed Host: header...

Design Flaw in Deutsche Telekom Speedport w700v broadband router

Hi, I'd like to inform you about a vulnerability in the Deutsche Telekom Speedport w700v DSL router. Currently it's the standard device that is shipped with new DSL contracts. I - TITLE Security advisory: Weaknesses in the login process of the web interface of the Speedport w700v DSL Router and...

D-Link DSL-G624T - Var:RelaodHref Cross-Site Scripting

D-Link DSL-G624T - Var:RelaodHref Cross-Site Scripting source: https://www.securityfocus.com/bid/23802/info D-Link DSL-G624T is prone to a cross-site scripting vulnerability. This issue is due to a failure to properly sanitize user-supplied input. An attacker may leverage this issue to have...

D-Link DSL-G624T - Var:RelaodHref Cross-Site Scripting

source: https://www.securityfocus.com/bid/23802/info D-Link DSL-G624T is prone to a cross-site scripting vulnerability. This issue is due to a failure to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an...

avm-traversal.txt

Description The "AVM IGD CTRL Service", a Universal Plug and Play UPNP service for windows, which is part of the software package "Fritz!DSL Software 02.02.29" provides the possibility to read any file on the windows system partition for any user - no matter how much restricted rights the user...

Directory traversal

Directory traversal vulnerability in the AVM IGD CTRL Service in Fritz!DSL 02.02.29 allows remote attackers to read arbitrary files via ..%5C URL-encoded dot dot backslash sequences in a URI requested from the AR7 webserver...

CVE-2007-0357

Directory traversal vulnerability in the AVM IGD CTRL Service in Fritz!DSL 02.02.29 allows remote attackers to read arbitrary files via ..%5C URL-encoded dot dot backslash sequences in a URI requested from the AR7 webserver...

avm fritz!dsl igd control service 2.2.29 - Directory Traversal Information Disclosure

source: https://www.securityfocus.com/bid/22093/info The AVM Fritz!DSL IGD Control Service is prone to a remote information-disclosure vulnerability because the application fails to properly sanitize user-supplied input. Exploiting this issue allows remote, unauthenticated attackers to retrieve t...

avm fritz!dsl igd control service 2.2.29 - Directory Traversal Information Disclosure

avm fritz!dsl igd control service 2.2.29 - Directory Traversal Information Disclosure source: https://www.securityfocus.com/bid/22093/info The AVM Fritz!DSL IGD Control Service is prone to a remote information-disclosure vulnerability because the application fails to properly sanitize user-suppli...

INCA_IM-204Dsl.txt

======================================== INCA IM-204 Dsl several vulnerabilities ======================================== Found By CrackersChild [email protected] ========================================== Directory transversal...

CVE-2006-5537

Multiple cross-site scripting XSS vulnerabilities in cgi-bin/webcm in D-Link DSL-G624T firmware 3.00B01T01.YA-C.20060616 allow remote attackers to inject arbitrary web script or HTML via the 1 upnp:settings/state or 2 upnp:settings/connection parameters...

CVE-2006-5536

Directory traversal vulnerability in cgi-bin/webcm in D-Link DSL-G624T firmware 3.00B01T01.YA-C.20060616 allows remote attackers to read arbitrary files via a .. dot dot in the getpage parameter...

CVE-2006-5537

Multiple cross-site scripting XSS vulnerabilities in cgi-bin/webcm in D-Link DSL-G624T firmware 3.00B01T01.YA-C.20060616 allow remote attackers to inject arbitrary web script or HTML via the 1 upnp:settings/state or 2 upnp:settings/connection parameters...

CVE-2006-5537

The CVE-2006-5537 issue affects D-Link DSL-G624T firmware (cgi-bin/webcm) version 3.00B01T01.YA-C.20060616. It describes multiple cross-site scripting (XSS) vulnerabilities that allow remote attackers to inject arbitrary web script or HTML via the upnp:settings/state or upnp:settings/connection p...

CVE-2006-5536

CVE-2006-5536: A directory traversal vulnerability exists in the D-Link DSL-G624T firmware 3.00B01T01.YA-C.20060616, specifically in the cgi-bin/webcm script. Remote attackers can read arbitrary files by supplying a .. (dot dot) in the getpage parameter. This is documented across multiple sources...

CVE-2006-5538

The CVE-2006-5538 issue affects D-Link DSL-G624T firmware 3.00B01T01.YA-C.20060616. It enables remote attackers to list the contents of the cgi-bin directory through unspecified vectors (likely a direct request), indicating an information disclosure risk. The specific exploit method, affected com...

Multiple D-Link DSL-G624T ADSL Router security vulnjerabilities

Crossite scripting, dfirectory traversal and another Web-interface vulnerabilities...

D-Link DSL-G624T several vulnerabilities

D-Link DSL-G624T ADSL Router is vulnerable to several securities. Directory transversal http://router/cgi-bin/webcm?getpage=/./././././././etc/passwd http://router/cgi-bin/webcm?getpage=/./././././././etc/config.xml Cross Site Scripting Url:: http://router/cgi-bin/webcm Method:: POST Variable::...

INCA IM-204 DSL router multilpe security vulnerabilities

Directory traversal, information leak...

INCA IM-204 Dsl several vulnerabilities

======================================== INCA IM-204 Dsl several vulnerabilities ======================================== Found By CrackersChild crackerschild at sibersavascilar dot com email concealed ========================================== Directory transversal...