EUVD-2008-1528

Malware in sbrugna...

CVE-2015-6017

Multiple cross-site scripting XSS vulnerabilities in Forms/rpAuth1 on ZyXEL P-660HW-T1 2 devices with ZyNOS firmware 3.40AXH.0 allow remote attackers to inject arbitrary web script or HTML via the 1 LoginPassword or 2 hiddenPassword parameter...

PT-2015-7116

Name of the Vulnerable Software and Affected Versions ZyXEL P-660HW-T1 version 3.40AXH.0 Description The issue allows remote attackers to inject arbitrary web script or HTML via the LoginPassword or hiddenPassword parameters in the Forms/rpAuth 1 module. Recommendations For ZyXEL P-660HW-T1 versi...

CVE-2015-6017: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Forms/rpAuth1 on ZyXEL P-660HW-T1 2 devices with ZyNOS firmware 3.40AXH.0 allow remote attackers to inject arbitrary web script or HTML via the 1 LoginPassword or 2 hiddenPassword parameter...

[Asterisk Password Spy] Reveal the hidden password behind asterisks (*****)

Asterisk Password Spy is the FREE tool to instantly reveal the hidden password behind asterisks . It's user friendly interface can help you to easily find the passwords from any Windows based application.You can simply drag the 'search icon' to any password box to find the real password hidden by...

CVE-2008-1527

ZyXEL Prestige routers, including P-660, P-661, and P-662 models with firmware 3.40PE9 and 3.40AGD.2 through 3.40AHQ.3, support authentication over HTTP via a hash string in the hiddenPassword field, which allows remote attackers to obtain access via a replay attack...

CVE-2008-1527

CVE-2008-1527 affects ZyXEL Prestige routers P-660, P-661, and P-662 with firmware versions 3.40(PE9) and 3.40(AGD.2) through 3.40(AHQ.3). The issue arises from HTTP authentication using a hash in the hiddenPassword field, enabling remote attackers to gain access via a replay attack. Reported imp...

CVE-2008-1527: Undefined Security Weakness

ZyXEL Prestige routers, including P-660, P-661, and P-662 models with firmware 3.40PE9 and 3.40AGD.2 through 3.40AHQ.3, support authentication over HTTP via a hash string in the hiddenPassword field, which allows remote attackers to obtain access via a replay attack...