CVE-2011-0746

Cross-site request forgery CSRF vulnerability in Forms/PortForwardingEdit1 on the ZyXEL O2 DSL Router Classic allows remote attackers to hijack the authentication of administrators for requests that insert cross-site scripting XSS sequences via the PortRuleName parameter...

CVE-2011-0746

The CVE-2011-0746 entry documents a CSRF/XSS vulnerability in the ZyXEL O2 DSL Router Classic. The issue is in the web form /Forms/PortForwarding_Edit_1 where the PortRule_Name parameter can be used to insert XSS payloads, enabling remote attackers to hijack administrator authentication for craft...

PT-2011-2605

Name of the Vulnerable Software and Affected Versions ZyXEL O2 DSL Router Classic affected versions not specified Description A cross-site request forgery CSRF issue exists in the Forms/PortForwarding Edit 1 component, allowing remote attackers to hijack administrator authentication for requests...

CVE-2011-0746: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Forms/PortForwardingEdit1 on the ZyXEL O2 DSL Router Classic allows remote attackers to hijack the authentication of administrators for requests that insert cross-site scripting XSS sequences via the PortRuleName parameter...

O2 DSL Router Classic router crossite scripting

Crossite scripting in administration interface...

RomPager 4.07 Denial Of Service

Software: "RomPager/4.07 UPnP/1.0" Issue: A reboot can be caused when a special crafted http request is sent. Other Details: This version of RomPager is seen on a number of residential routers that are shipped by a number of different ISP's. The router I personal know it effects is the d-link...

Have We Lost the Desktop Security Battle?

For years, security experts, analysts and even users have been lamenting the state of desktop security. Viruses, spam, Trojans and rootkits have added up to create an ugly picture. But, the good news is that the desktop security battle may be over. The less-than-good news, however, is that we may...

Virata EmWeb R6.0.1 Denial Of Service

Exploit Title: Virata EmWeb R6.0.1 Remote Crash Vulnerability Date: 06/04/10 Author: Jobert Abma Online 24 Email: j.abmaatonline24dotnl Version: R6.0.1 Tested on: linux CVE : Code : This was written for educational purpose. Use it at your own risk. Author will be not responsible for any damage. -...

Virata EmWeb R6.0.1 Remote Crash Vulnerability

Exploit for linux platform in category dos / poc ============================================== Virata EmWeb R6.0.1 Remote Crash Vulnerability ============================================== Exploit Title: Virata EmWeb R6.0.1 Remote Crash Vulnerability Date: 06/04/10 Author: Jobert Abma Online 24...

Millenium MP3 Studio v1.X (.m3u File) Local Stack Overflow

Exploit for unknown platform in category local exploits ========================================================== Millenium MP3 Studio v1.X .m3u File Local Stack Overflow ========================================================== !/usr/bin/perl Exploit Title: MP3 Studio v1.X .m3u File Local Stac...

Millenium MP3 Studio 1.x - .m3u Local Stack Overflow

Millenium MP3 Studio 1.x - .m3u Local Stack Overflow !/usr/bin/perl Exploit Title: MP3 Studio v1.X .m3u File Local Stack Overflow Date: 19.01.2010 - 01/19/2010 Author: NeoCortex Software Link: http://www.freewarezoom.com/archives/millennium-mp3-studio Version: 1.X Tested on: Windows XP SP3 de-de...

Millenium MP3 Studio 1.x - '.m3u' Local Stack Overflow

!/usr/bin/perl Exploit Title: MP3 Studio v1.X .m3u File Local Stack Overflow Date: 19.01.2010 - 01/19/2010 Author: NeoCortex Software Link: http://www.freewarezoom.com/archives/millennium-mp3-studio Version: 1.X Tested on: Windows XP SP3 de-de Original exploit found by HACK4LOVE...

DSL router remotely controlled by URL

From The H Security Security researcher Michal Sajdak revealed at CONFidence 2009 in Krakow in mid-May that it’s relatively easy to make the Linksys WAG54G2 WLAN DSL router execute arbitrary shell commands. He has now published securitum.pl further details. Sajdak discovered that it’s easy to add...

Ubuntu 8.10 : linux regression (USN-661-1)

Version 2.6.27 of the Linux kernel changed the order of options in TCP headers. While this change was RFC-compliant, it was found that some old routers and consumer DSL modems would not route traffic for these systems when TCP timestamps were enabled. As a workaround, TCP timestamps were disabled...

3Com OfficeConnect Wireless Cable/DSL Router Authentication Bypass

==================================================== Security Research Advisory Vulnerability name: "3Com OfficeConnect Wireless Cable/DSL Router Authentication Bypass" Advisory number: LC-2008-05 Advisory URL: http://www.ikkisoft.com ==================================================== 1 Affecte...

Deutsch Telekomm T-Sinus 130 DSL Default Password (deprecated)

Binary data 4853.prm...

sinatra

Sinatra...

2wire-dos.txt

2WIRE ROUTER DSL DENIAL OF SERVICE VULNERABLE Model: 1701HG, 1800HW, 2071HG, 2700HG Gateway Firmware: v3.17.5, 3.7.1, 4.25.19, 5.29.51 The DSL connection of some 2wire routers is droped when a request to /xslt with the value %X where X is any non alfa numeric character. PoC: this can be set in an...

2WIRE DSL Router (xslt) Denial of Service Vulnerability

No description provided by source. 2WIRE ROUTER DSL DENIAL OF SERVICE VULNERABLE Model: 1701HG, 1800HW, 2071HG, 2700HG Gateway Firmware: v3.17.5, 3.7.1, 4.25.19, 5.29.51 The DSL connection of some 2wire routers is droped when a request to /xslt with the value %X where X is any non alfa numeric...

2WIRE DSL Router (xslt) Denial of Service Vulnerability

Exploit for hardware platform in category dos / poc ======================================================= 2WIRE DSL Router xslt Denial of Service Vulnerability ======================================================= 2WIRE ROUTER DSL DENIAL OF SERVICE VULNERABLE Model: 1701HG, 1800HW, 2071HG,...