TP-LINK Model No. TL-WR841N / TL-WR841ND - Multiple Vulnerabilities

TP-LINK TL-WR841N / TL-WR841ND are vulnerable to many CSRF and XSS attacks because of no CSRF prevention technique and poor parameters filtration. Attacker is able to compromise router and steal config & log files. Title: TP-LINK Model No. TL-WR841N / TL-WR841ND - Multiple Vulnerabilities Date:...

Thomson TWG87OUIR - POST Password CSRF Vulnerability

Exploit for hardware platform in category web applications Author: nopesled Date: 24/06/14 Vulnerability: POST Password Reset CSRF Tested on: Thomson TWG87OUIR Hardware Version Thomson TWG87OUIR CSRF document.exploit.submit; 0day.today 2018-03-01...

CVE-2014-3427 CRLF Injection and CVE-2014-3428 XSS Injection in Yealink VoIP Phones

I. ADVISORY CVE-2014-3427 CRLF Injection in Yealink VoIP Phones CVE-2014-3428 XSS vulnerabilities in Yealink VoIP Phones Date published: 06/12/2014 Vendor Contacted: 05/08/2014 II. BACKGROUND Yealink is a manufacturer of VoIP and Video products. To minimize noise read more at:...

Sagem 2604 Password Disclosure Vulnerability

Sagem 2604 suffers from a password disclosure vulnerability. +Title: Sagem 2604 Password Discolusre vulnerability +Author: TUNISIAN CYBER +Date: 6/JUN/2014 +Type:WebApp +Risk:High +Affected Version: v2604 Hardware Version: 253251193 Software Version: 3.21a4G +Overview: Sagem modem suffers, from a...

Sagem 2604 Password Disclosure

+Title: Sagem 2604 Password Discolusre vulnerability +Author: TUNISIAN CYBER +Date: 6/JUN/2014 +Type:WebApp +Risk:High +Affected Version: v2604 Hardware Version: 253251193 Software Version: 3.21a4G +Overview: Sagem modem suffers, from a password discolsure vulnerability. +Proof Of Concept:...

DIR-605L Disclosure / Bypass

DIR-605L Hardware version Ax, firmware 1.14 has two severe security bug: 1. The login password is printed out in clear text in the "Current Network Setting" page just after login "Device Info" section. 2. The router can be controlled using a crafted URL GET request, even without login e.g. use an...

Error "Unable to communicate with the remote host, since it is disconnected." with replication or restore

Article Applicability The error, "Unable to communicate with the remote host, since it is disconnected. " may occur for many reasons, some more straightforward than others. This article is specifically related to a more obscure scenario where the destination ESXi host runs a vSphere version that...

D-Link DIR-600L跨站请求伪造漏洞

D-Link DIR-600L是款无线路由器产品。 D-Link DIR-600L修订版A1固件版本1.0、修订版B1固件版本2.0，没有正确检查某些请求的合法性，这可使某些用户通过HTTP请求执行未授权操作。 0 D-Link DIR-600L 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.dlink.com/ Exploit Title: Dlink DIR-600L Hardware Version AX Firmware Version 1.00 CSRF Vulnerability Google Dork:...

D-Link DIR-600L Cross Site Request Forgery

Exploit Title: Dlink DIR-600L Hardware Version AX Firmware Version 1.00 CSRF Vulnerability Google Dork: N/A Date: 20/03/2014 Exploit Author: Dhruv Shah Vendor Homepage: http://www.dlink.com/us/en/home-solutions/connect/routers/dir-600l-wireless-n-150-home-cloud-router Software Link: N/A Hardware...

D-LINK DIR-615 Cross Site Request Forgery

Exploit Title: Dlink DIR-615 Hardware Version E4 Firmware Verion 5.10 CSRF Vulnerability Google Dork: N/A Date: 19/02/2014 Exploit Author: Dhruv Shah Vendor Homepage: http://www.dlink.com/us/en/home-solutions/connect/routers/dir-615-wireless-n-300-router Software Link: N/A Hardware Version:E4...

D-Link DSL-2750B ADSL Router跨站请求伪造漏洞

No description provided by source. Exploit Title : D-Link DSL-2750B ADSL Router CSRF Vulnerability Date : 10-02-2014 Author : [email protected] Vendor site : http://www.d-link.com Version : DSL-2750B Tested on : Firmware Version: EU2.02; Hardware Version: B1 The D-Link DSL-2750B's web interface...

D-Link DSL-2750B ADSL Route - Cross-Site Request Forgery

D-Link DSL-2750B ADSL Route - Cross-Site Request Forgery Exploit Title : D-Link DSL-2750B ADSL Router CSRF Vulnerability Date : 10-02-2014 Author : [email protected] Vendor site : http://www.d-link.com Version : DSL-2750B Tested on : Firmware Version: EU2.02; Hardware Version: B1 The D-Link...

D-Link DSL-2750B ADSL Route' - Cross-Site Request Forgery

Exploit Title : D-Link DSL-2750B ADSL Router CSRF Vulnerability Date : 10-02-2014 Author : [email protected] Vendor site : http://www.d-link.com Version : DSL-2750B Tested on : Firmware Version: EU2.02; Hardware Version: B1 The D-Link DSL-2750B's web interface listening on tcp/ip port 80 is pron...

Feixun Wireless Router FWR-604H - Remote Code Execution Exploit

Exploit for hardware platform in category web applications Exploit Title: Feixun FWR-604H Wireless Router Remote Code Execution Date: 2014-01-09 Exploit Author: Arash Abedian Vendor Homepage: http://feixun.com.cn Version: Hardware Version 1.0, Firmware Build: 7642 Tested on: Hardware Version 1.0,...

TP-Link TL-WR740N Wireless Router - Denial of Service

!/usr/local/bin/perl TP-Link TL-WR740N Wireless Router Remote Denial Of Service Exploit Vendor: TP-LINK Technologies Co., Ltd. Product web page: http://www.tp-link.us Affected version: - Firmware version: 3.16.4 Build 130205 Rel.63875n Released: 2/5/2013 - Hardware version: WR740N v4 00000000...

TL-WR340G wireless router denial of service vulnerability-vulnerability warning-the black bar safety net

TL-WR340G TP-Link produced a lightweight wireless router, recently, a foreign hacker found this router on a denial of service vulnerability, just sending a simple malformation of the packet to the router, you can enable the router to stop working, need to manually reboot the router to get back to...

Controller with bus number X was not found.

Challenge Replication job fails with the following error: timestamp Error Controller with BusNumber X was not found at Veeam.Backup.ViSoap.CVirtualController.GetByBusNumberCVirtualController controllers, Int32 busNumber timestamp Error at...

D-Link DSL-2640B (ADSL Router) CSRF flaws and fixes-vulnerability warning-the black bar safety net

Title: D-Link DSL-2640B ADSL Router CSRF Vulnerability Author: Ivano Binetti www.badguest.cn http://ivanobinetti.com Program website: http://www.d-link.com Affected version: DSL-2640B Test platform: Firmware Version: EU4. 0 0; Hardware Version: B2 +-----------------------------------------------...

D-Link DSL-2640B (ADSL Router) CSRF Vulnerability

Exploit for hardware platform in category web applications +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : D-Link DSL-2640B ADSL Router CSRF Vulnerability Date : 19-02-2012 Author : Ivano Binetti...

D-Link DSL-2640B Cross Site Request Forgery

+--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : D-Link DSL-2640B ADSL Router CSRF Vulnerability Date : 19-02-2012 Author : Ivano Binetti http://ivanobinetti.com Vendor site : http://www.d-link.com...