CVE-2014-4645

CVE-2014-4645 is an XSS vulnerability in the D-Link DSL-2760U-E1 where the affected file is the dhcpinfo.html. The root cause is unvalidated user input in the hostname that can be echoed in the web interface, enabling remote attackers to inject arbitrary script/HTML. The NVD entry documents a bro...

CVE-2014-4645: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in dhcpinfo.html in D-link DSL-2760U-E1 allows remote attackers to inject arbitrary web script or HTML via a hostname...

PT-2014-6042 · D Link · Dsl-2760U-E1

Name of the Vulnerable Software and Affected Versions: D-link DSL-2760U-E1 affected versions not specified Description: A cross-site scripting XSS issue exists in the dhcpinfo.html file, allowing remote attackers to inject arbitrary web script or HTML via a hostname. This could potentially lead t...

D-link DSL-2760U-E1 - Persistent XSS Vulnerability

Exploit for hardware platform in category web applications !/bin/bash Written and discovered by Yuval tisf Nativ The page 'dhcpinfo.html' will list all machines connected to the network with hostname, IP, MAC and IP expiration. It is possible to store an XSS in this table by changing hostname...

D-Link DSL-2760U-E1 - Persistent Cross-Site Scripting

D-Link DSL-2760U-E1 - Persistent Cross-Site Scripting !/bin/bash Written and discovered by Yuval tisf Nativ The page 'dhcpinfo.html' will list all machines connected to the network with hostname, IP, MAC and IP expiration. It is possible to store an XSS in this table by changing hostname. Checks ...

WebBoard CMS Cross Site Scripting

. ,;' / . ,'/ .' . X /.' .-;--''--.. .' / , IeDb.ir ' Q ' , , . \ ,.| ' -.;' : . ; --,..; ' , .' . , ' / ; ,''-,;' - -..-- Exploit Title : WebBoard CMS Multiple Vulnerability Author : IeDb Security Team Discovered By : Bl4ck M4n Home : http://www.iedb.ir/acc Security Risk : High...

Mybb All Version Denial of Service Vulnerability

Mybb All Version Denial of Service Vulnerability !/usr/bin/perl @@@ @@@@@@@@@@@ @@@@@ @@@@@@@@@@ @@@ @@@@@@@ @@@ @@@@@@@@@@@ @@@ @@ @@@ @@ @@@ @@@@@@@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@@@@@@@@@ @@@ @ @@@@@@@@@@ @@@ @@@@@@ @@@ @@@@@@@@@@@ @@@ @@ @@@ @@ @@@...

CVE-2012-3918

Cisco IOS before 15.31T on Cisco 2900 devices, when a VWIC2-2MFT-T1/E1 card is configured for TDM/HDLC mode, allows remote attackers to cause a denial of service serial-interface outage via certain Frame Relay traffic, aka Bug ID CSCub13317...

CVE-2012-3918

Cisco IOS

CVE-2012-3918: Undefined Security Weakness

Cisco IOS before 15.31T on Cisco 2900 devices, when a VWIC2-2MFT-T1/E1 card is configured for TDM/HDLC mode, allows remote attackers to cause a denial of service serial-interface outage via certain Frame Relay traffic, aka Bug ID CSCub13317...

PT-2014-2273

Name of the Vulnerable Software and Affected Versions Cisco IOS versions prior to 15.31T on Cisco 2900 devices Description The issue allows remote attackers to cause a denial of service, resulting in a serial-interface outage, via certain Frame Relay traffic when a VWIC2-2MFT-T1/E1 card is...

CVE-2013-5223: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in D-Link DSL-2760U Gateway Rev. E1 allow remote authenticated users to inject arbitrary web script or HTML via the 1 ntpServer1 parameter to sntpcfg.cgi, username parameter to 2 ddnsmngr.cmd or 3 todmngr.tod, 4 TodUrlAdd parameter to urlfilter.cm...

Cisco IOS Software Queue Wedge Denial of Service Vulnerability (cisco-sa-20130925-wedge)

A vulnerability in the T1/E1 driver queue implementation of Cisco IOS Software could allow an unauthenticated, remote attacker to cause an interface wedge condition, which could lead to loss of connectivity, loss of routing protocol adjacency, and could result in a denial of service DoS scenario...

CVE-2013-5477

The T1/E1 driver-queue functionality in Cisco IOS 12.2 and 15.0 through 15.3, when an HDLC32 driver is used, allows remote attackers to cause a denial of service interface queue wedge via bursty network traffic, aka Bug ID CSCub67465...

CVE-2013-5477

The T1/E1 driver-queue functionality in Cisco IOS 12.2 and 15.0 through 15.3, when an HDLC32 driver is used, allows remote attackers to cause a denial of service interface queue wedge via bursty network traffic, aka Bug ID CSCub67465...

CVE-2013-5477

Cisco IOS Software vulnerability CVE-2013-5477 affects T1/E1 driver queue logic in Cisco IOS 12.2 and 15.0–15.3 when using the HDLC32 driver. The flaw in the T1/E1 driver queue implementation allows remote, unauthenticated attackers to trigger a denial-of-service via bursty traffic, causing an in...

CVE-2013-5477: Improper Input Validation

The T1/E1 driver-queue functionality in Cisco IOS 12.2 and 15.0 through 15.3, when an HDLC32 driver is used, allows remote attackers to cause a denial of service interface queue wedge via bursty network traffic, aka Bug ID CSCub67465...

PT-2013-5565

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2, 15.0 through 15.3 Description A vulnerability in the T1/E1 driver queue implementation could allow an unauthenticated, remote attacker to cause an interface wedge condition, leading to loss of connectivity and routing...

Unfixed XSS vulnerability at ru.espacenet.com

Security researcher E1, has submitted on 27/01/2012 a cross-site-scripting XSS vulnerability affecting ru.espacenet.com, which at the time of submission ranked 29656 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/02/2012. It is currently...

Unfixed XSS vulnerability at computex.ws

Security researcher E1, has submitted on 13/01/2009 a cross-site-scripting XSS vulnerability affecting computex.ws, which at the time of submission ranked 38672 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 22/12/2011. It is currently unfixed...