CentOS 6 : kernel (CESA-2013:1801)

Updated kernel packages that fix multiple security issues, several bugs, and add two enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores,...

CVE-2013-7043

Multiple cross-site request forgery CSRF vulnerabilities on Cisco Scientific Atlanta DPR2320R2 routers with software 2.0.2r1262-090417 allow remote attackers to hijack the authentication of administrators for requests that 1 change a password via the Password parameter to goform/RgSecurity; 2...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities on Cisco Scientific Atlanta DPR2320R2 routers with software 2.0.2r1262-090417 allow remote attackers to hijack the authentication of administrators for requests that 1 change a password via the Password parameter to goform/RgSecurity; 2...

CVE-2013-7043

Multiple cross-site request forgery CSRF vulnerabilities on Cisco Scientific Atlanta DPR2320R2 routers with software 2.0.2r1262-090417 allow remote attackers to hijack the authentication of administrators for requests that 1 change a password via the Password parameter to goform/RgSecurity; 2...

kernel security update

CentOS Errata and Security Advisory CESA-2013:1790 Updated kernel packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring Syste...

CentOS 5 : kernel (CESA-2013:1790)

Updated kernel packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix three security issues and several bugs are now available for Red Hat Enterprise Linux 6.3 Extended Update Support. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores,...

DPR2320R2 [Scientific-Atlanta, Inc. Cisco ] - Multiple CSRF Vulnerability

Exploit for hardware platform in category web applications 1 Attacker can change the modem authentication password using CSRF vulnerability .check the below POC POC by sajith shetty document.getElementById'formid'.submit; 2Attacker can reboot modem using CSRF vulnerabilitycheck below POC POC by...

Medium: kernel

Issue Overview: The Linux kernel before 3.12, when UDP Fragmentation Offload UFO is enabled, does not properly initialize certain data structures, which allows local users to cause a denial of service memory corruption and system crash or possibly gain privileges via a crafted application that us...

TPLINK WR740N/WR740ND - Multiple CSRF Vulnerabilities

Exploit for hardware platform in category web applications Exploit Title: TPLINK WR740N Multiple CSRF Vulnerabilities Date: 11/24/2013 Author: SaMaN @samanL33T Vendor Homepage: http://tplink.com Category: Hardware/Wireless Router Firmware Version: 3.16.6 Build 130529 Rel.47286n and below Tested o...

Pirelli Discus DRG A125g Remote SSID Change

Exploit Title: Pirelli Discus DRG A125g remote change SSID value vulnerability Hardware: Pirelli Discus DRG A125g Date: 2013/11/23 Exploit Author: Sebastián Magof Tested on: Linux/Windows Twitter: @smagof Greetz: Family, friends && under guys. Special Greetz: / αlpha "" Exploit:...

Pirelli Discus DRG A125g - Remote Change WiFi Password Vulnerability

Exploit for hardware platform in category web applications http://10.0.0.2/wladv.wl?wlSsidIdx=0&wlHide=0&wlAuthMode=psk2&wlAuth=0&wlWep=disabled&wlWpaPsk=PASSWORDHERE&wlWpaGtkRekey=0&wlKeyBit=1&wlPreauth=1&wlWpa=tkip info: where the parameter wlWpaPsk=PASSWORDHERE is where we will enter the...

Pirelli Discus DRG A125g - Remote Change SSID Value

Pirelli Discus DRG A125g - Remote Change SSID Value Exploit Title: Pirelli Discus DRG A125g remote change SSID value vulnerability Hardware: Pirelli Discus DRG A125g Date: 2013/11/23 Exploit Author: Sebastián Magof Tested on: Linux/Windows Twitter: @smagof Greetz: Family, friends && under guys...

Pirelli Discus DRG A125g - Remote Change WiFi Password

Pirelli Discus DRG A125g - Remote Change WiFi Password Exploit Title: Pirelli Discus DRG A125g remote change wifi password vulnerability Hardware: Pirelli Discus DRG A125g Date: 2013/11/23 Exploit Author: Sebastián Magof Tested on: Linux/Windows Twitter: @smagof Greetz: Family, friends && under...

Pirelli Discus DRG A125g - Remote Change SSID Value

Exploit Title: Pirelli Discus DRG A125g remote change SSID value vulnerability Hardware: Pirelli Discus DRG A125g Date: 2013/11/23 Exploit Author: Sebastián Magof Tested on: Linux/Windows Twitter: @smagof Greetz: Family, friends && under guys. Special Greetz: / αlpha "" Exploit:...

Pirelli Discus DRG A125g - Remote Change WiFi Password

Exploit Title: Pirelli Discus DRG A125g remote change wifi password vulnerability Hardware: Pirelli Discus DRG A125g Date: 2013/11/23 Exploit Author: Sebastián Magof Tested on: Linux/Windows Twitter: @smagof Greetz: Family, friends && under guys. Special Greetz: / αlpha "" Exploit:...

openSUSE: Security Advisory for MozillaFirefox (openSUSE-SU-2013:0825-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2013-5558

The WIL-A module in Cisco TelePresence VX Clinical Assistant 1.2 before 1.21 changes the admin password to an empty password upon a reboot, which makes it easier for remote attackers to obtain access via the administrative interface, aka Bug ID CSCuj17238...

Scientific Linux Security Update : kernel on SL5.x i386/x86_64 (20131022)

A flaw was found in the way the Linux kernel handled the creation of temporary IPv6 addresses. If the IPv6 privacy extension was enabled /proc/sys/net/ipv6/conf/eth0/usetempaddr is set to '2', an attacker on the local network could disable IPv6 temporary address generation, leading to a potential...

CentOS 5 : kernel (CESA-2013:1449)

Updated kernel packages that fix multiple security issues and one bug are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...