4392 matches found
http-qnap-nas-info NSE Script
Attempts to retrieve the model, firmware version, and enabled services from a QNAP Network Attached Storage NAS device. Script Arguments slaxml.debug See the documentation for the slaxml library. http.host, http.max-body-size, http.max-cache-size, http.max-pipeline, http.pipeline,...
Vulnerabilities in D-Link DAP 1150
Hello 3APA3A! I want to warn you about security vulnerabilities in D-Link DAP 1150 WiFi Access Point and Router. These are Predictable Resource Location, Brute Force and Cross-Site Request Forgery vulnerabilities. This is my second advisory from series of advisories about vulnerabilities in D-Lin...
Alice Modem 1111 Cross Site Scripting / Denial Of Service
German ISP 'Alice' has been shipping custom embedded devices DSL modems/routers etc. for the past few years. Their first self-branded DSL modem, Alice Modem 1111, using firmware version 4.19, is prone to at least the following two security vulnerabilities after it has passed initial configuration...
Vulnerabilities in ADSL modem Callisto 821+
Hello 3APA3A! I want to warn you about security vulnerabilities in ADSL modem Callisto 821+ SI2000 Callisto821+ Router. These are Predictable Resource Location and Brute Force vulnerabilities. Predictable Resource Location WASC-34: http://192.168.1.1 web server on 80 and 8008 ports. The control...
Cisco Security Advisory: Cisco RVS4000 and WRVS4400N Web Management Interface Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Cisco RVS4000 and WRVS4400N Web Management Interface Vulnerabilities Advisory ID: cisco-sa-20110525-rvs4000 Revision 1.0 For Public Release 2011 May 25 1600 UTC GMT...
Fiberhome HG-110 Cross Site Scripting / Local File Inclusion
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I found two vulnerabilities on fiberhome hg-110 routers1 and has not been reported nor fixed. XSS: - - http://192.168.1.1:8000/cgi-bin/webproc?getpage=%3Cscript%3Ealert%28this%29%3C/script%3E&var:menu=advanced&var:page=dns Local File Include and...
Encore ENPS-2012 - Cross-Site Scripting
GotGeek Labs http://www.gotgeek.com.br/ Encore ENPS-2012 Cross-site Scripting Vulnerability + Description Encore 3-Port Print Server converts a standalone USB or a parallel printer into a shared printer, through a wired Ethernet connection. As a result, you can save the cost and space for...
[DCA-2011-0001] TP-LINK TL-WR740N Multiple Vulnerabilities - Stored XSS - Web Console and Upnp server DoS
DCA-2011-0001 Discussion - DcLabs Security Research Group advises about following vulnerabilityies: Software/Hardware - TP-LINK TL-WR740N Vendor Product Description - The TL-WR740N is a combined wired/wireless network connection device integrated with internet-sharing router and 4-port switch. Th...
Buffer overflow
Buffer overflow in the PPP Access Concentrator PPPAC on the SEIL/x86 with firmware 1.00 through 1.61, SEIL/B1 with firmware 1.00 through 3.11, SEIL/X1 with firmware 1.00 through 3.11, SEIL/X2 with firmware 1.00 through 3.11, SEIL/Turbo with firmware 1.80 through 2.10, and SEIL/neu 2FE Plus with...
Linksys WAP610N Unauthenticated Root Access Security Vulnerability
Exploit for hardware platform in category remote exploits Vuln name: Linksys WAP610N Unauthenticated Access With Root Privileges Systems affected: WAP610N Firmware Version: 1.0.01 Systems not affected: -- Severity: High Local/Remote: Remote Vendor URL: http://www.linksysbycisco.com Authors: Matte...
D-Link DIR-300 Cross Site Request Forgery
document.exploit.submit;...
D-Link DIR-300 - Cross-Site Request Forgery (Change Admin Account Settings)
document.exploit.submit;...
D-Link DIR-300 - Cross-Site Request Forgery (Change Admin Account Settings)
D-Link DIR-300 - Cross-Site Request Forgery Change Admin Account Settings document.exploit.submit;...
TWSL-2010-008: Clear iSpot/Clearspot CSRF Vulnerabilities
Trustwave's SpiderLabs Security Advisory TWSL2010-008: Clear iSpot/Clearspot CSRF Vulnerabilities https://www.trustwave.com/spiderlabs/advisories/TWSL2010-008.txt Published: 2010-12-10 Version: 1.0 Vendor: Clear http://www.clear.com http://www.clear.com/ Products: iSpot / ClearSpot 4G...
D-Link WBR-2310 1.0.4 - GET Remote Buffer Overflow (PoC)
D-Link WBR-2310 1.0.4 - GET Remote Buffer Overflow PoC source: https://www.securityfocus.com/bid/42153/info D-Link WBR-2310 is prone to a remote buffer-overflow vulnerability because it fails to bounds-check user-supplied input before copying it into an insufficiently sized memory buffer. This...
Dlink WBR-2310 Embedded Web Server 1.04 Denial Of Service
DCA-00014 Software - Dlink WBR-2310 Embedded Web Server Vendor Product Description - The D-Link RangeBooster G WBR-2310 with enhanced 108 features the industrys first default 108Mbps Dynamic Mode that allows clients to always operate at the highest possible speeds while automatically...
IS-2010-004 - D-Link DAP-1160 Unauthenticated Remote Configuration
Security Advisory IS-2010-004 - D-Link DAP-1160 Unauthenticated Remote Configuration Advisory Information -------------------- Published: 2010-06-28 Updated: 2010-06-28 Manufacturer: D-Link Model: DAP-1160 Firmware version: 1.20b06 1.30b10 1.31b01 Vulnerability Details --------------------- Publi...
Huawei EchoLife HG520 - Remote Information Disclosure
Exploit Title: Huawei EchoLife HG520 Remote Information Disclosure Date: 2010-04-19 Author: hkm Product Link: http://www.huawei.com/mobileweb/en/products/view.do?id=660 Firmware Versions: 3.10.18.7-1.0.7.0 3.10.18.5-1.0.7.0 3.10.18.4 Software Versions: V100R001B120Telmex V100R001B121Telmex Exploi...
TANDBERG Video Communication Server 4.2.1/4.3.0 - Multiple Remote Vulnerabilities
source: https://www.securityfocus.com/bid/39389/info TANDBERG Video Communication Server is prone to multiple remote vulnerabilities, including: 1. A file-disclosure vulnerability. 2. A security vulnerability that may allow attackers to conduct server impersonation and man-in-middle attacks. 3. A...
Edimax AR-7084GA Router CSRF + Persistent XSS Exploit
Exploit for hardware platform in category web applications ===================================================== Edimax AR-7084GA Router CSRF + Persistent XSS Exploit ===================================================== 25 die"One or more of the parts can't be longer then 25 characters!";...