Unfixed XSS vulnerability at www.issaquahrobotics.org

Security researcher Feralas, has submitted on 05/09/2008 a cross-site-scripting XSS vulnerability affecting www.issaquahrobotics.org, which at the time of submission ranked 27147623 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/09/2008. It...

D-Link / US Robotics multiple wireless access points DoS

Fragmented sequential UDP packets causes device to reboot...

CVE-2004-1706

The U.S. Robotics USR808054 wireless access point allows remote attackers to cause a denial of service device crash and possibly execute arbitrary code via an HTTP GET request with a long version string...

CVE-2004-1706

The CVE-2004-1706 entry concerns the U.S. Robotics USR808054 wireless access point. The issue is triggered by an HTTP GET request with a long version string, allowing remote attackers to cause a denial of service (device crash) and potentially execute arbitrary code. The connected records confirm...

CVE-2004-1706: Undefined Security Weakness

The U.S. Robotics USR808054 wireless access point allows remote attackers to cause a denial of service device crash and possibly execute arbitrary code via an HTTP GET request with a long version string...

CVE-2004-1706

The U.S. Robotics USR808054 wireless access point allows remote attackers to cause a denial of service device crash and possibly execute arbitrary code via an HTTP GET request with a long version string...

US Robotics Broadband Router 8003 menu.htm Admin Password Disclosure

The remote host appears to be a US Robotics Broadband router. The device's administrator password is stored as plaintext in a JavaScript function in the file '/menu.htm', which can be viewed by anyone. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Ref: Date: Tue, 8 Jun 2004 13:41:11 +0200...

US Robotics Broadband Router 8003 unauthorized access

Password is checked on client side...

U.S. Robotics Broadband Router 8003 admin password visible

Hello. US Robotics Broadband Router 8003 is a small home/SOHO router which is configured using a HTML interface. This interface, as usual, asks for a password in order to let you view or change configuration parameters. But the password is checked first by a javascript function that just compares...

DoS in 'USR848000A-02'

Hi, found a bug for possible DoS-Attacks in firmware v2.5 of US Robotics Broadband-Router 8000A/8000-2 USR848000A-02. Any computer in the intranet can produce a DoS-Attack by sending a overlong GET-Request to the router's built-in webserver. Can anybody reproduce this bug? Maybe older versions ar...

CVE-1999-1389

US Robotics/3Com Total Control Chassis with Frame Relay between 3.6.22 and 3.7.24 does not properly enforce access filters when the "set host prompt" setting is made for a port, which allows attackers to bypass restrictions by providing the hostname twice at the "host: " prompt...

CVE-1999-1389

US Robotics/3Com Total Control Chassis with Frame Relay (versions 3.6.22–3.7.24) has a flaw in the port set host prompt access control. When the hostname is entered twice at the host: prompt, access filters can be bypassed, potentially allowing unauthorized access. The CVSS v2 base score is 7.5 (...

CVE-1999-1389: Undefined Security Weakness

US Robotics/3Com Total Control Chassis with Frame Relay between 3.6.22 and 3.7.24 does not properly enforce access filters when the "set host prompt" setting is made for a port, which allows attackers to bypass restrictions by providing the hostname twice at the "host: " prompt...

CVE-1999-1389

US Robotics/3Com Total Control Chassis with Frame Relay between 3.6.22 and 3.7.24 does not properly enforce access filters when the "set host prompt" setting is made for a port, which allows attackers to bypass restrictions by providing the hostname twice at the "host: " prompt...