Cross site request forgery (csrf)

cp06wifimnocifr.cgi in the admin panel on the Alice Gate 2 Plus Wi-Fi router does not verify authentication credentials, which allows remote attackers to disable Wi-Fi encryption via a certain request...

CVE-2008-1269

cp06wifimnocifr.cgi in the admin panel on the Alice Gate 2 Plus Wi-Fi router does not verify authentication credentials, which allows remote attackers to disable Wi-Fi encryption via a certain request...

CVE-2008-1269

The CVE-2008-1269 entry concerns the Alice Gate 2 Plus Wi‑Fi router. Affects the admin panel via cp06_wifi_m_nocifr.cgi, where authentication credentials are not verified, allowing remote attackers to disable Wi‑Fi encryption through a specific request. The available documentation states the vuln...

Airscanner Mobile Security Advisory #07122001: Eye-Fi Multiple Vulnerabilities

Airscanner Mobile Security Advisory 07122001: Eye-Fi Solution Multiple Vulnerabilities Product: Eye-Fi 1.1.2 Platform: NA Requirements: NA Credits: Seth Fogie Airscanner Mobile Security http://www.airscanner.com December 20, 2007 Risk Level: Medium - Spoofed image injection, redirection of upload...

Eye-Fi multiple security vulnerabilities

Multiple vulnerabilities in TCP/59278 Web server...

Eye-Fi Version Detection

Binary data 4408.prm...

Alice Gate2 Plus Wi-Fi Router - Cross-Site Request Forgery

Alice Gate2 Plus Wi-Fi Router - Cross-Site Request Forgery source: https://www.securityfocus.com/bid/27374/info Alice Gate2 Plus Wi-Fi routers are prone to a cross-site request-forgery vulnerability. An attacker can exploit this issue to alter administrative configuration on affected devices...

Alice Gate2 Plus Wi-Fi Router - Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/27374/info Alice Gate2 Plus Wi-Fi routers are prone to a cross-site request-forgery vulnerability. An attacker can exploit this issue to alter administrative configuration on affected devices. Specifically, altering the wireless encryption settings on...

Unfixed XSS vulnerability at iem-fi-candidate.adeccoweb.net

Security researcher DerickTham, has submitted on 21/12/2007 a cross-site-scripting XSS vulnerability affecting iem-fi-candidate.adeccoweb.net, which at the time of submission ranked 71272 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

Unfixed XSS vulnerability at koulukirjasto.kerimaki.fi

Security researcher c4psl0ck, has submitted on 06/10/2007 a cross-site-scripting XSS vulnerability affecting koulukirjasto.kerimaki.fi, which at the time of submission ranked 6217977 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/10/2007. I...

Broadcom Wireless Driver - Probe Response SSID Overflow (Metasploit)

$Id: broadcomwifissid.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Intel PRO/Wireless网络连接驱动远程代码执行漏洞

Intel PRO/Wireless网络连接是Intel迅驰移动技术所集成的WLAN解决方案。 Intel 2200BG和2915ABG PRO/Wireless网络连接硬件的Microsoft Windows驱动处理某些帧的方式存在内存破坏漏洞，远程攻击者可能利用此漏洞在机器执行任意指令。 Wi-Fi站范围内的攻击者可以通过发送特制的报文来触发这个漏洞，导致以内核级权限执行任意代码。 Intel 2200BG/2915ABG http://support.intel.com/support/wireless/wlan/sb/cs-010623.htm...

FiWin SS28S Wi-Fi phones backdoor account

Phone has debug console with telnet access and hardcoded account 1 with password 1...

[Full-disclosure] PocketPC MMS - Remote Code Injection/Execution Vulnerability and Denial-of-Service

Vulnerability Report ----------------------------- Vendor: Microsoft and ArcSoft Product: PocketPC OS and MMS Composer Versions: MMS Composer: 1.5.5.6, 2.0.0.13 possible others Platform: PocketPC tested on: WinCE 4.2 and WinCE 4.21, possible others Architecture: ARM Devices: HP iPAQ h6315, i-mate...

Senao SI-680H wirieless Wi-Fi VoIP phones unauthorized access

VxWorks debugger is available with UDP/17185...

Multiple Hitachi Wi-Fi VoIP phones vulnerabilities

Information leak, SNMP access, built-in hardware password, unauthenticated Web access TCP/8080 and shell access TCP/3390...

Multiple UTstarcom F1000 wirieless Wi-Fi VoIP phones vulnerabilities

SNMP access, unauthenticated telnet TCP/21 and rlogin TCP/513 access...

Multiple Zyxel P2000W wirieless Wi-Fi VoIP phones vulnerabilities

Information leak, external DNS servers access...

PHP/FI mylog.html/mlog.html < 3.0 Arbitrary File Read Vulnerability - Active Check

PHP/FI is prone to an arbitrary file read vulnerability. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows XP - Wireless Zero Configuration Service Information Disclosure

Microsoft Windows XP - Wireless Zero Configuration Service Information Disclosure source: https://www.securityfocus.com/bid/15008/info WZCSVC is affected by an information disclosure vulnerability. Reportedly, the Pairwise Master Key PMK of the Wi-Fi Protected Access WPA preshared key...