Outlook Web Access 2003 CSRF Vulnerability

No description provided by source. Exploit Title: Microsoft Office Outlook Web Access for Exchange Server 2003 XSRF Vulnerability Date: 07/20/2010 Author: anonymous Tested on: Microsoft Office Outlook Web Access for Exchange Server 2003 A cross-site request forgery vulnerability in Microsoft Offi...

DD-WRT v24-sp1 - (CSRF) Cross Site Reference Forgery Exploit

No description provided by source. Remote root dd-wrt -------------------------------------------------------------------------------- Written by Michael Brooks Special thanks to str0ke Exploits tested on the newist stable version: Firmware: DD-WRT v24-sp1 07/27/08 micro Product Homepage:...

David Harris Pegasus Mail 3.12 File Forwarding Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1738/info It is possible for a malicious website operator to obtain copies of known files on a remote system if a website visitor is running Pegasus Mail client. If the following code were to be inserted into a HTML...

Fortech Proxy+ 2.30 Remote Administration Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1226/info By default, Fortech Proxy+ can be remotely administered by any user possessing no authorization simply by connecting to http://target:4400/admin. In addition, the telnet gateway is open by default which can...

SuSE 11.3 Security Update : openssh (SAT Patch Number 9357)

This update for OpenSSH fixes the following issues : - Exit sshd normally when port is already in use. bnc832628 - Use hardware crypto engines where available. bnc826427 - Use correct options for login when it is used. bnc833605 - Move FIPS messages to higher debug level. bnc862875 - Fix forwardi...

openSUSE Security Update : tor (openSUSE-SU-2014:0719-1) (Heartbleed)

tor 0.2.4.22 bnc878486 Tor was updated to the recommended version of the 0.2.4.x series. - major features in 0.2.4.x : - improved client resilience - support better link encryption with forward secrecy - new NTor circuit handshake - change relay queue for circuit create requests from size-based...

openSUSE Security Update : roundcubemail (openSUSE-SU-2013:1420-1)

roundcubemail was updated to version 0.9.3 bnc837436 CVE-2013-5645 - Optimized UI behavior for touch devices - Fix setting refreshinterval to 'Never' in Preferences - Fix purge action in folder manager - Fix base URL resolving on attribute values with no quotes - Fix wrong handling of links with...

Linksys E4200 Vulnerability Enables Authentication Bypass

The Lynksys E4200 V2 dual band router contains a vulnerability that an attacker could exploit, bypassing the Web panel authentication mechanism and gaining administrative privileges on affected devices. Linksys has provided a firmware update that resolves the vulnerability. However, as is nearly...

[SECURITY] Fedora 19 Update: miniupnpc-1.9-1.fc19

miniupnpc is an implementation of a UPnP client library, enabling applications to access the services provided by an UPnP "Internet Gateway Device" present on the network. In UPnP terminology, it is a UPnP Control Point. This package includes upnpc, a UPnP client application for configuring port...

CVE-2012-5032: Improper Authentication

The Flex-VPN load-balancing feature in the ipsec-ikev2 implementation in Cisco IOS before 15.11SY3 does not require authentication, which allows remote attackers to trigger the forwarding of VPN traffic to an attacker-controlled destination, or the discarding of this traffic, by arranging for an...

Cisco IOS Software远程拒绝服务漏洞

Bugtraq ID:66515 CVE ID:CVE-2014-2131 Cisco IOS是多数思科系统路由器和网络交换机上使用的互联网络操作系统。 攻击者可以发送特殊的Virtual Switching Systems VSS或Bidirectional Forwarding Detection BFD报文给受影响设备，可导致拒绝服务攻击。 0 Cisco IOS 目前厂商已经发布了升级补丁以修复漏洞，请下载使用： http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2131...

CVE-2014-2131

The packet driver in Cisco IOS allows remote attackers to cause a denial of service device reload via a series of 1 Virtual Switching Systems VSS or 2 Bidirectional Forwarding Detection BFD packets, aka Bug IDs CSCug41049 and CSCue61890...

CVE-2014-2131: Undefined Security Weakness

The packet driver in Cisco IOS allows remote attackers to cause a denial of service device reload via a series of 1 Virtual Switching Systems VSS or 2 Bidirectional Forwarding Detection BFD packets, aka Bug IDs CSCug41049 and CSCue61890...

Security Advisory: NETGEAR Router D6300B Firmware: V1.0.0.14_1.0.14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory ID: SYSS-2013-001 Product: NETGEAR Router D6300B / Firmware: V1.0.0.141.0.14 latest Vendor: Netgear Affected Versions: until V1.0.0.141.0.14 latest Tested Versions: V1.0.0.141.0.14 latest Vulnerability Type: Root-Shell, OS Command Injection,...

Netgear D6300B Command Injection / Misconfiguration

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory ID: SYSS-2013-001 Product: NETGEAR Router D6300B / Firmware: V1.0.0.141.0.14 latest Vendor: Netgear Affected Versions: until V1.0.0.141.0.14 latest Tested Versions: V1.0.0.141.0.14 latest Vulnerability Type: Root-Shell, OS Command Injection,...

CVE-2013-3098

Multiple cross-site request forgery CSRF vulnerabilities in TRENDnet TEW-812DRU router with firmware before 1.0.9.0 allow remote attackers to hijack the authentication of administrators for requests that 1 change admin credentials in a request to setSysAdm.cgi, 2 enable remote management or 3...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in TRENDnet TEW-812DRU router with firmware before 1.0.9.0 allow remote attackers to hijack the authentication of administrators for requests that 1 change admin credentials in a request to setSysAdm.cgi, 2 enable remote management or 3...

CVE-2013-6003: Improper Input Validation

CRLF injection vulnerability in Cybozu Garoon 3.1 through 3.5 SP5, when Phone Messages forwarding is enabled, allows remote authenticated users to inject arbitrary e-mail headers via unspecified vectors...

Cisco IOS XE Software IP Header Sanity Check Denial of Service Vulnerability

A vulnerability in the Cisco Express Forwarding processing module that checks the sanity of IP headers on Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, leading to a denial of service DoS condition. The vulnerability is due to improper...

CVE-2013-6706

The Cisco Express Forwarding processing module in Cisco IOS XE allows remote attackers to cause a denial of service device reload via crafted MPLS packets that are not properly handled during IP header validation, aka Bug ID CSCuj23992...