NAT-PMP Security Vulnerability Affects 1.2M Routers

Vulnerabilities in embedded devices, in particular small office and home office routers, have been relentless. Another serious issue was discovered this week that affects more than 1.2 million such devices due to improper NAT-PMP protocol implementations, most of which run counter to the...

Incorrect implementation of NAT-PMP in multiple devices

Overview Many NAT-PMP devices are incorrectly configured, allowing them to field requests received on external network interfaces or map forwarding routes to addresses other than that of the requesting host, making them potentially vulnerable to information disclosure and malicious port mapping...

MediaCoder PMP Edition 0.8.17 (.m3u) - Buffer Overflow Exploit

No description provided by source. print +Exploit Title: MediaCoder PMP Edition 0.8.17 Buffer Overflow Exploit SEH +Download link: http://www.mediacoderhq.com/device/mpx.htm +Vulnerable Product: MediaCoder Personal Media Player Edition +Date found: 21.06.2013 +Date publish: 21.06.2013 +Founder:...

NAT-PMP Detection (remote network)

The remote device has the NAT-PMP protocol enabled. This protocol may allow any application on an internal subnet to request port mappings from the outside to the inside. If this service is reachable from the outside your network, it may allow a remote attacker to gain more information about your...

NAT-PMP Detection (local network)

The remote device has the NAT-PMP protocol enabled. This protocol allows any application on the local subnet to request port mappings from the outside to the inside. Make sure the use of this service is done in accordance to your security policy. Letting any application create dynamic mappings is...

MediaCoder PMP Edition 0.8.17 Buffer Overflow Vulnerability

MediaCoder PMP Edition version 0.8.17 buffer overflow exploit that generates a malicious .m3u file. print """ +Exploit Title: MediaCoder PMP Edition 0.8.17 Buffer Overflow Exploit SEH +Download link: http://www.mediacoderhq.com/device/mpx.htm +Vulnerable Product: MediaCoder Personal Media Player...

MediaCoder PMP Edition 0.8.17 Buffer Overflow

print """ +Exploit Title: MediaCoder PMP Edition 0.8.17 Buffer Overflow Exploit SEH +Download link: http://www.mediacoderhq.com/device/mpx.htm +Vulnerable Product: MediaCoder Personal Media Player Edition +Date found: 21.06.2013 +Date publish: 21.06.2013 +Founder: metacom +RST +Tested on: Windows...

NAT-PMP External Address Scanner

Scan NAT devices for their external address using NAT-PMP This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'NAT-PMP External Address Scanner', 'Description' = 'Scan NAT devices for their external...

nat-pmp-mapport NSE Script

Maps a WAN port on the router to a local port on the client using the NAT Port Mapping Protocol NAT-PMP. It supports the following operations: map - maps a new external port on the router to an internal port of the requesting IP unmap - unmaps a previously mapped port for the requesting IP unmapa...

Nmap NSE net: nat-pmp-info

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Nmap NSE net: nat-pmp-info

Queries a NAT-PMP service for its external address. OpenVAS Vulnerability Test $Id: gbnmapnatpmpinfonet.nasl 5499 2017-03-06 13:06:09Z teissa $ Autogenerated NSE wrapper Authors: NSE-Script: Patrik Karlsson NASL-Wrapper: autogenerated Copyright: NSE-Script: The Nmap Security Scanner http://nmap.o...

CVE-2009-4387

The cross-site scripting XSS protection mechanism in ShowInContentAreaAction.do in ManageEngine Password Manager Pro PMP before 6.1 Build 6104 uses case-sensitive checks for malicious inputs, which allows remote attackers to inject arbitrary web script or HTML via the searchtext parameter and oth...

PT-2007-6210 · Phpmyadmin · Phpmyprofiler

Name of the Vulnerable Software and Affected Versions: phpmyProfiler version 0.9.6b Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the pmp rel path parameter in the include/plugin/block.t.php file. This is due to a remote file inclusion vulnerability. No...

CVE-2007-2429

ManageEngine PasswordManager Pro PMP allows remote attackers to obtain administrative access to a database by injecting a certain command line for the mysql program, as demonstrated by the "-port 2345" and "-u root" arguments. NOTE: the provenance of this information is unknown; the details are...

CVE-2007-2429

CVE-2007-2429 affects ManageEngine PasswordManager Pro (PMP). The available records indicate that remote attackers could gain administrative access to the PMP database by injecting a specific command line for the mysql client (demonstrated by -port 2345 and -u root). This description is sourced f...