Alcatel-Lucent OmniSwitch - Cross-Site Request Forgery

Advisory: Alcatel-Lucent OmniSwitch Web Interface Cross-Site Request Forgery During a penetration test, RedTeam Pentesting discovered a vulnerability in the management web interface of an Alcatel-Lucent OmniSwitch 6450. The management web interface has no protection against cross-site request...

PT-2014-3331

Name of the Vulnerable Software and Affected Versions Nisuta NS-WIR150NE router version 5.07.41 Nisuta NS-WIR300N router version 5.07.36 NIS01 Description The issue allows remote attackers to bypass authentication on the management web interface of the affected routers by using a specific HTTP...

Cisco Wireless LAN Controller Cross-Site Request Forgery Vulnerability

Cisco Wireless LAN Controller WLC Software contains a vulnerability that could allow an unauthenticated, remote attacker to conduct cross-site request forgery attacks on a targeted system. The vulnerability is due to insufficient sanitization of user-supplied input processed by the WLC management...

PT-2012-6219

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller WLC versions 7.2.110.0 Description The issue is related to cross-site request forgery CSRF vulnerabilities. An unauthenticated, remote attacker could exploit this by convincing a targeted user to follow a maliciou...

CVE-2002-0393

Buffer overflow in Red-M 1050 Bluetooth Access Point management web interface allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long administration password...