Huawei EchoLife HG520 Remote Information Disclosure

Exploit for hardware platform in category remote exploits =================================================== Huawei EchoLife HG520 Remote Information Disclosure =================================================== Exploit Title: Huawei EchoLife HG520 Remote Information Disclosure Date: 2010-04-19...

JVN#87730223 Multiple Cybozu products vulnerable to authentication bypass

Multiple Cybozu products contain an issue in which the login page for mobile devices is not properly restrcited, leading to an authentication bypass vulnerability. As a result, an attacker may impersonate a user of a Cybozu product. Impact A remote attacker may view or modify information stored b...

CVE-2010-1189

MediaWiki before 1.15.2 does not prevent wiki editors from linking to images from other web sites in wiki pages, which allows editors to obtain IP addresses and other information of wiki users by adding a link to an image on an attacker-controlled web site, aka "CSS validation issue."...

CVE-2010-1189

MediaWiki before 1.15.2 does not prevent wiki editors from linking to images from other web sites in wiki pages, which allows editors to obtain IP addresses and other information of wiki users by adding a link to an image on an attacker-controlled web site, aka "CSS validation issue."...

DEBIAN-CVE-2010-1189

MediaWiki before 1.15.2 does not prevent wiki editors from linking to images from other web sites in wiki pages, which allows editors to obtain IP addresses and other information of wiki users by adding a link to an image on an attacker-controlled web site, aka "CSS validation issue."...

CVE-2010-1189

MediaWiki prior to 1.15.2 is affected by a CSS validation issue that allows editors to link to images on attacker‑controlled sites, enabling collection of IP addresses and other user information. The root cause is the CSS validation check not preventing this behavior. Impact is limited to disclos...

CVE-2010-1189: Improper Input Validation

MediaWiki before 1.15.2 does not prevent wiki editors from linking to images from other web sites in wiki pages, which allows editors to obtain IP addresses and other information of wiki users by adding a link to an image on an attacker-controlled web site, aka "CSS validation issue."...

Design/Logic Flaw

The Standard Remember method in TikiWiki CMS/Groupware 3.x before 3.5 allows remote attackers to bypass access restrictions related to "persistent login," probably due to the generation of predictable cookies based on the IP address and User agent in userslib.php...

eDisplay Personal FTP server 1.0.0 Multiple Post-Authentication Stack BOF

Exploit for windows platform in category remote exploits ========================================================================= eDisplay Personal FTP server 1.0.0 Multiple Post-Authentication Stack BOF ========================================================================= Exploit Title :...

Google to Issue GMail Suspicious Activity Warnings

Google has added a nifty new security feature to warn GMail users when there are suspicious log-ins to their e-mail accounts. The feature, now being rolled into Firefox and Internet Explorer, will flag GMail log-ins from multiple locations and flash the following warning to an affected user:...

Spoofing

The "IP address range limitation" function in OpenPNE 1.6 through 1.8, 2.0 through 2.8, 2.10 through 2.14, and 3.0 through 3.4, when mobile device support is enabled, allows remote attackers to bypass the "simple login" functionality via unknown vectors related to spoofing...

CVE-2010-1040

The "IP address range limitation" function in OpenPNE 1.6 through 1.8, 2.0 through 2.8, 2.10 through 2.14, and 3.0 through 3.4, when mobile device support is enabled, allows remote attackers to bypass the "simple login" functionality via unknown vectors related to spoofing...

CVE-2010-1040

The "IP address range limitation" function in OpenPNE 1.6 through 1.8, 2.0 through 2.8, 2.10 through 2.14, and 3.0 through 3.4, when mobile device support is enabled, allows remote attackers to bypass the "simple login" functionality via unknown vectors related to spoofing...

CVE-2010-1040

OpenPNE contains an authentication bypass vulnerability related to the IP address range limitation function when mobile device support is enabled. The flaw in the IP address range limitation may allow remote attackers to bypass the simple login feature, potentially enabling access to or modificat...

CVE-2010-1040: Improper Authentication

The "IP address range limitation" function in OpenPNE 1.6 through 1.8, 2.0 through 2.8, 2.10 through 2.14, and 3.0 through 3.4, when mobile device support is enabled, allows remote attackers to bypass the "simple login" functionality via unknown vectors related to spoofing...

CVE-2010-0962

The FTP proxy server in Apple AirPort Express, AirPort Extreme, and Time Capsule with firmware 7.5 does not restrict the IP address and port specified in a PORT command from a client, which allows remote attackers to leverage intranet FTP servers for arbitrary TCP forwarding via a crafted PORT...

CVE-2010-0962

The CVE-2010-0962 case concerns the FTP proxy server in Apple AirPort Express, AirPort Extreme, and Time Capsule firmware 7.5. The root cause is that the FTP proxy does not restrict the IP address and port specified in a PORT command, allowing a client to trigger forwarding to an intranet FTP ser...

JVN#06874657 OpenPNE authentication bypass vulnerability

OpenPNE is an open source SNS Social Networking Service software. OpenPNE provides an "IP address range limitation" function to provide access to certain pages only to mobile devices. OpenPNE has an issue with the IP address range limitation function that may lead to an authentication bypass...

RCA DCM425 Cable Modem - 'micro_httpd' Denial of Service (PoC)

!/usr/bin/python Title: RCA DCM425 Cable Modem microhttpd DoS/PoC Date: 02/27/10 Author: ad0nis [email protected] Info: This script causes a Denial of Service on a DCM425 cable modem. Sending 1040 bytes causes a reboot of the device after a few seconds of it freezing up. I believe this may le...

RCA DCM425 Cable Modem micro_httpd DoS/PoC

No description provided by source. !/usr/bin/python Title: RCA DCM425 Cable Modem microhttpd DoS/PoC Date: 02/27/10 Author: ad0nis Info: This script causes a Denial of Service on a DCM425 cable modem. Sending 1040 bytes causes a reboot of the device after a few seconds of it freezing up. I believ...