avm fritz!dsl igd control service 2.2.29 - Directory Traversal information disclosure vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/22093/info The AVM Fritz!DSL IGD Control Service is prone to a remote information-disclosure vulnerability because the application fails to properly sanitize user-supplied input. Exploiting this issue allows remote,...

Ericsson HM220dp DSL Modem World Accessible Web Administration Interface Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6824/info The Ericsson HM220dp DSL Modem uses a web interface for remote administration and configuration. This interface does not require any authentication in order to access. There is no option to enable any...

D-Link DSL-2750U ME_1.09 - CSRF Vulnerability

No description provided by source. Exploit Title: D-Link DSL-2750U CSRF Vulnerability Author: khaledmohdarMysterious guy E-mail: [email protected]/khaledmohdar Category: Hardware Google Dork: N/A Vendor: http://www.dlink.com/ Firmware Version: ME1.09 Product:...

D-Link DSL-320B - Multiple Vulnerabilities

No description provided by source...

CVE-2014-4645

Cross-site scripting XSS vulnerability in dhcpinfo.html in D-link DSL-2760U-E1 allows remote attackers to inject arbitrary web script or HTML via a hostname...

CVE-2014-4645

CVE-2014-4645 is an XSS vulnerability in the D-Link DSL-2760U-E1 where the affected file is the dhcpinfo.html. The root cause is unvalidated user input in the hostname that can be echoed in the web interface, enabling remote attackers to inject arbitrary script/HTML. The NVD entry documents a bro...

CVE-2014-4645

Cross-site scripting XSS vulnerability in dhcpinfo.html in D-link DSL-2760U-E1 allows remote attackers to inject arbitrary web script or HTML via a hostname...

PT-2014-6042 · D Link · Dsl-2760U-E1

Name of the Vulnerable Software and Affected Versions: D-link DSL-2760U-E1 affected versions not specified Description: A cross-site scripting XSS issue exists in the dhcpinfo.html file, allowing remote attackers to inject arbitrary web script or HTML via a hostname. This could potentially lead t...

D-link DSL-2760U-E1 - Persistent XSS Vulnerability

Exploit for hardware platform in category web applications !/bin/bash Written and discovered by Yuval tisf Nativ The page 'dhcpinfo.html' will list all machines connected to the network with hostname, IP, MAC and IP expiration. It is possible to store an XSS in this table by changing hostname...

D-Link DSL-2760U-E1 - Persistent Cross-Site Scripting

D-Link DSL-2760U-E1 - Persistent Cross-Site Scripting !/bin/bash Written and discovered by Yuval tisf Nativ The page 'dhcpinfo.html' will list all machines connected to the network with hostname, IP, MAC and IP expiration. It is possible to store an XSS in this table by changing hostname. Checks ...

D-Link DSL-500T / DAP 1150 / DAP-1320 multiple security vulnerabilities

Web administration interface crossite request forgery, authentication bypass, directory traversal...

Speedport DSL-Router Detection (SIP)

The script attempts to extract the version number from the SIP banner. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Speedport DSL-Router Multiple Vulnerabilities

Speedport DSL-Router is prone to multiple vulnerabilities SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:t-com:speedport"; if...

D-Link DSL-2640U跨站请求伪造漏洞

D-Link DSL-2640U是一款DSL路由器产品。 D-Link DSL-2640U存在一个跨站请求伪造漏洞，允许远程攻击者构建恶意URI，诱使用户解析，可以目标用户上下文执行恶意操作，如更改设置。 0 D-Link DSL-2640U 目前没有详细解决方案提供： http://www.dlink.com/...

D-Link DSL-2750B ADSL Route' - Cross-Site Request Forgery

Exploit Title : D-Link DSL-2750B ADSL Router CSRF Vulnerability Date : 10-02-2014 Author : [email protected] Vendor site : http://www.d-link.com Version : DSL-2750B Tested on : Firmware Version: EU2.02; Hardware Version: B1 The D-Link DSL-2750B's web interface listening on tcp/ip port 80 is pron...

CVE-2013-6786

Cross-site scripting XSS vulnerability in Allegro RomPager before 4.51, as used on the ZyXEL P660HW-D1, Huawei MT882, Sitecom WL-174, TP-LINK TD-8816, and D-Link DSL-2640R and DSL-2641R, when the "forbidden author header" protection mechanism is bypassed, allows remote attackers to inject arbitra...

CVE-2013-6786

CVE-2013-6786 is an XSS vulnerability in Allegro RomPager prior to 4.51 used on ZyXEL P660HW-D1, Huawei MT882, Sitecom WL-174, TP-LINK TD-8816, and D‑Link DSL-2640R/2641R. The flaw arises when the forbidden author header protection is bypassed, allowing remote attackers to inject arbitrary web sc...

PT-2014-3201 · D Link +5 · D-Link Dsl-2641R +6

Name of the Vulnerable Software and Affected Versions: Allegro RomPager versions prior to 4.51 ZyXEL P660HW-D1 affected versions not specified Huawei MT882 affected versions not specified Sitecom WL-174 affected versions not specified TP-LINK TD-8816 affected versions not specified D-Link DSL-264...

ScMM DSL Modem/Router Backdoor Detection

The remote device is a DSL Modem/Router with a backdoor running on port 32764. It is possible for an attacker to run arbitrary commands or access configuration details including passwords on the device. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid71807;...

D-Link DSL-2750U ME_1.09 - CSRF Vulnerability

This router allows an attacker to bypass authentication and login to the setup page after that just make any settings and save or apply it and it's going to say "worng old password" Don't worry just hit ok . now you are in the Router settings you can Download the config file or whatever yuo want!...