1127 matches found
New Call to Regulate IoT Security By Design
A Washington, D.C. think tank whose mission is critical infrastructure security has joined the call for lawmakers to consider regulating the security of connected devices. In a report published this week, the Institute for Critical Infrastructure Technology pinned the blame for a rash of Mirai...
Zyxel/Eir D1000 DSL Modem NewNTPServer Command Injection Over TR-064
Broadband DSL modems manufactured by Zyxel and distributed by some European ISPs are vulnerable to a command injection vulnerability when setting the 'NewNTPServer' value using the TR-64 SOAP-based configuration protocol. In the tested case, no authentication is required to set this value on...
New Mirai Variant Targets Routers, Knocks 900,000 Offline
Attackers are targeting DSL routers this week with what’s being called a potent new variant of the Mirai malware that knocked offline major Internet companies like Twitter and Spotify last month. According to Germany’s Deutsche Telekom 900,000 of its DSL router customers have already been targete...
Router high-risk vulnerabilities induced the German telecommunications ultra 90 million users suffered network disruption-vulnerability warning-the black bar safety net
! Event overview Last weekend millions of German Internet users suffered a series of network outages, investigate its reason is a failure of the home routers hijacked. Deutsche Telekom's 2000 million users with 90 million users received the interrupt effect from the last Sunday continues to prese...
DLink ADSL Router DSL-2750E SEA_1.01 Remote File Disclosure Vulnerability
D-Link ADSL router DSL-2750E with firmware version SEA1.01 suffers from a file disclosure vulnerability. !/bin/sh D-Link ADSL ROUTER DSL-2750E SEA1.01 Remote File Disclosure Modem Name: DSL-2750E Firmware Version: SEA1.01 Copyright 2016 c Todor Donev https://www.ethical-hacker.org/...
D-Link ADSL Router DSL-2750E SEA_1.04 Remote File Disclosure
!/bin/sh D-Link ADSL ROUTER DSL-2750E SEA1.04 Remote File Disclosure Modem Name: DSL-2750E Firmware Version: SEA1.04 Copyright 2016 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Disclaimer: This or previous programs is for Educational purpose ONLY. Do not...
D-Link ADSL Router DSL-2750E SEA_1.01 Remote File Disclosure
!/bin/sh D-Link ADSL ROUTER DSL-2750E SEA1.01 Remote File Disclosure Modem Name: DSL-2750E Firmware Version: SEA1.01 Copyright 2016 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Disclaimer: This or previous programs is for Educational purpose ONLY. Do not...
ASUS DSL-X11 ADSL Router - Unauthenticated DNS Change
Exploit for cgi platform in category web applications !/bin/bash ASUS DSL-X11 ADSL Router Unauthenticated Remote DNS Change Exploit Copyright 2016 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Description: The vulnerability exist in the web interface, whi...
ASUS DSL-X11 ADSL Router Unauthenticated Remote DNS Changer
!/bin/bash ASUS DSL-X11 ADSL Router Unauthenticated Remote DNS Change Exploit Copyright 2016 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Description: The vulnerability exist in the web interface, which is accessible without authentication. Once modified...
ASUS DSL-X11 ADSL Router - DNS Change
ASUS DSL-X11 ADSL Router - DNS Change !/bin/bash ASUS DSL-X11 ADSL Router Unauthenticated Remote DNS Change Exploit Copyright 2016 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Description: The vulnerability exist in the web interface, which is accessible...
ASUS DSL-X11 ADSL Router - DNS Change
!/bin/bash ASUS DSL-X11 ADSL Router Unauthenticated Remote DNS Change Exploit Copyright 2016 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Description: The vulnerability exist in the web interface, which is accessible without authentication. Once modified...
ASUS DSL-N55U Router Multiple Vulnerabilities (Jun 2016) - Active Check
ASUS DSL-N55U Router is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
ASUS DSL-N55U 3.0.0.4.376_2736 XSS / Information Disclosure
SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: XSS and information disclosure vulnerability product: ASUS DSL-N55U router vulnerable version: 3.0.0.4.3762736 fixed version: 3.0.0.43803679 CVE number: requested impact:...
DSL Flatrate - SD-card access, Suspicious files, Unsafe deleting vulnerabilities
HackApp vulnerability scanner discovered that application DSL Flatrate published at the 'play' market has multiple vulnerabilities...
D-Link DSL-2750B Arbitrary Command Execution Vulnerability
The D-Link DSL-2750B is a Model router product. A security vulnerability exists in the D-Link DSL-2750B that allows remote attackers to submit a special request to execute arbitrary code and retrieve sensitive information...
D-Link DSL-2750B Remote Command Execution
After some playing around I've noticed something interesting during login phase: by sending wrong credentials, user is redirected on an error page with url http://192.168.1.1:666/login.cgi?cli=access%20login%20encrypted%2041544A25DC00170BA90659AD4CBDD9D9$ http://imgur.com/ZG1vU2t In order to see...
[SECURITY] Fedora 22 Update: php-twig-1.23.1-2.fc22
The flexible, fast, and secure template engine for PHP. Fast: Twig compiles templates down to plain optimized PHP code. The overhead compared to regular PHP code was reduced to the very minimum. Secure: Twig has a sandbox mode to evaluate untrusted template code. This allows Twig to be used as a...
[SECURITY] Fedora 23 Update: php-twig-1.23.1-2.fc23
The flexible, fast, and secure template engine for PHP. Fast: Twig compiles templates down to plain optimized PHP code. The overhead compared to regular PHP code was reduced to the very minimum. Secure: Twig has a sandbox mode to evaluate untrusted template code. This allows Twig to be used as a...
[SECURITY] Fedora 21 Update: php-twig-1.20.0-1.fc21
The flexible, fast, and secure template engine for PHP. Fast: Twig compiles templates down to plain optimized PHP code. The overhead compared to regular PHP code was reduced to the very minimum. Secure: Twig has a sandbox mode to evaluate untrusted template code. This allows Twig to be used as a...
[SECURITY] Fedora 23 Update: php-twig-1.20.0-1.fc23
The flexible, fast, and secure template engine for PHP. Fast: Twig compiles templates down to plain optimized PHP code. The overhead compared to regular PHP code was reduced to the very minimum. Secure: Twig has a sandbox mode to evaluate untrusted template code. This allows Twig to be used as a...