6496 matches found
CVE-2012-2632
SEIL routers with firmware SEIL/x86 1.00 through 2.35, SEIL/X1 2.30 through 3.75, SEIL/X2 2.30 through 3.75, and SEIL/B1 2.30 through 3.75, when the http-proxy and application-gateway features are enabled, do not properly handle the CONNECT command, which allows remote attackers to bypass intende...
Belkin N150 Wireless Router - Password Disclosure
Belkin N150 Wireless Router - Password Disclosure ============================================ Belkin N150 Wireless MD5 Password Disclosure ============================================ Firmware Version : 1.00.22 Aug 31 2010 14:36:01 Boot Version : 1.20 Hardware : F7D1301 v1 01A Author : Avinash...
Default credentials
The web server on the Siemens Scalance S Security Module firewall S602 V2, S612 V2, and S613 V2 with firmware before 2.3.0.3 does not limit the rate of authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force attack on the administrative password...
CVE-2012-1844
The Quantum Scalar i500 tape library with firmware before i7.0.3 604G.GS00100, also distributed as the Dell ML6000 tape library with firmware before A20-00 590G.GS00100 and the IBM TS3310 tape library with firmware before R6C 606G.GS001, uses default passwords for unspecified user accounts, which...
CVE-2012-1843
Cross-site request forgery CSRF vulnerability in saveRestore.htm on the Quantum Scalar i500 tape library with firmware before i7.0.3 604G.GS00100, also distributed as the Dell ML6000 tape library with firmware before A20-00 590G.GS00100, allows remote attackers to hijack the authentication of use...
CVE-2012-1841
CVE-2012-1841 describes an absolute path traversal vulnerability in logShow.htm on Quantum Scalar i500 tape library (firmware before i7.0.3, 604G.GS00100) and the Dell ML6000 equivalent (firmware before A20-00, 590G.GS00100). The issue allows remote attackers to read arbitrary files by supplying ...
CVE-2012-1841
Absolute path traversal vulnerability in logShow.htm on the Quantum Scalar i500 tape library with firmware before i7.0.3 604G.GS00100, also distributed as the Dell ML6000 tape library with firmware before A20-00 590G.GS00100, allows remote attackers to read arbitrary files via a full pathname in...
CVE-2012-1842
CVE-2012-1842 affects Quantum Scalar i500 (and rebranded/Dell ML6000, IBM TS3310) web interface. The vulnerability is a cross-site scripting flaw in checkQKMProg.htm that allows remote attackers to inject arbitrary script/HTML via unspecified vectors. Affected firmware versions: Quantum i500 befo...
CVE-2012-1844
The Quantum Scalar i500 tape library with firmware before i7.0.3 604G.GS00100, also distributed as the Dell ML6000 tape library with firmware before A20-00 590G.GS00100 and the IBM TS3310 tape library with firmware before R6C 606G.GS001, uses default passwords for unspecified user accounts, which...
Directory traversal
Directory traversal vulnerability in the Local TFTP file-upload application on Cisco SRP 520 series devices with firmware before 1.1.26 and SRP 520W-U and 540 series devices with firmware before 1.2.4 allows remote authenticated users to upload software to arbitrary directories via unspecified...
Design/Logic Flaw
Cisco SRP 520 series devices with firmware before 1.1.26 and SRP 520W-U and 540 series devices with firmware before 1.2.4 allow remote attackers to replace the configuration file via an upload request to an unspecified URL, aka Bug ID CSCtw55495...
CVE-2012-0364
Cisco SRP 520 series devices with firmware before 1.1.26 and SRP 520W-U and 540 series devices with firmware before 1.2.4 allow remote attackers to replace the configuration file via an upload request to an unspecified URL, aka Bug ID CSCtw55495...
Unauthenticated remote code execution on D-Link ShareCenter products
Unauthenticated remote code execution on D-Link ShareCenter products ==================================================================== ADVISORY INFORMATION Title: Unauthenticated remote code execution on D-Link ShareCenter products Release date: 08/02/2012 Last update: 08/02/2012 Credits:...
Researchers: Millions of Printers Vulnerable to Attack
Columbia University researchers say tens of millions of printers may have flawed firmware that could allow hackers to remotely set fires, erase code and infiltrate computer networks, according to a report on MSNBC’s Red Tape Chronicles blog today. Research conducted in the Computer Science...
Millions of printers open to devastating hack attack
Millions of printers open to devastating hack attack Could a hacker from half-way around the planet control your printer and give it instructions so frantic that it could eventually catch fire? Or use a hijacked printer as a copy machine for criminals, making it easy to commit identity theft or...
CVE-2011-4505
The CVE-2011-4505 issue affects SpeedTouch 5x6 devices running firmware before 6.2.29. The UPnP IGD implementation exposes a vulnerability where remote attackers can establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, tied to an "exter...
CVE-2011-4497
QISwizard.htm on the ASUS RT-N56U router with firmware before 1.0.1.4o allows remote attackers to obtain the administrator password via a flag=detect request...
CVE-2011-4005
The CVE-2011-4005 issue affects Cisco Small Business SRP500 Series Services Ready Platforms (SRP521W/SRP526W/SRP527W: firmware < 1.1.24; SRP541W/SRP546W/SRP547W: firmware
New CSRF and XSS vulnerabilities in ADSL modem Callisto 821+
Hello 3APA3A! I want to warn you about security vulnerabilities in ADSL modem Callisto 821+ SI2000 Callisto821+ Router. These are Cross-Site Request Forgery and Cross-Site Scripting vulnerabilities. In April I've already drew attention of Ukrtelecom's representative and this modem was bough at...