MIPS-CVE-2014-9222

Disclaimer Tutorials are for informational and educational purposes only. I believe that ethical hacking, information security and cyber security should be familiar subjects to anyone using digital information and computers. I believe that it is impossible to defend yourself from hackers without...

misfortune-cookie

CVE-2014-9222 "Misfortune Cookie" PoC suite Stack overflow in AllegroSoft RomPager's HTTP cookie handling all versions 4.34. A single unauthenticated request with a crafted Cookie: header corrupts memory. Effects: admin auth bypass, DoS/reboot, and with firmware-specific offsets remote code...

MIPS-CVE-2014-9222

Disclaimer Tutorials are for informational and educational purposes only. I believe that ethical hacking, information security and cyber security should be familiar subjects to anyone using digital information and computers. I believe that it is impossible to defend yourself from hackers without...

RomPager Misfortune Cookie Auth Bypass (CVE-2014-9222)

Exploits CVE-2014-9222 in Allegro RomPager: malformed C107373883 cookie bypasses authentication on embedded device admin interfaces. !/usr/bin/env python3 -- coding: utf-8 -- """Allegro RomPager Misfortune Cookie auth bypass CVE-2014-9222.""" from kittysploit import from...

misfortune-cookie

CVE-2014-9222 "Misfortune Cookie" PoC suite Stack overflow in...

RomPager - Misfortune Cookie Detection (CVE-2014-9222)

Detects CVE-2014-9222 by sending Cookie C107373883=/ to /tr069 and matching the token plus RomPager not-found marker. !/usr/bin/env python3 -- coding: utf-8 -- """Allegro RomPager Misfortune Cookie CVE-2014-9222.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient clas...

Allegro RomPager - Panel Detection

Allegro RomPager was detected.This toolkit was commonly used in embedded devices such as routers, cameras, and IoT devices, often on historical hardware with possible default credentials. !/usr/bin/env python3 -- coding: utf-8 -- """Allegro RomPager was detected.""" from kittysploit import from...

ZynOS / RomPager ROM-0 admin password disclosure detection

Detects unauthenticated exposure of /rom-0 on ZynOS / RomPager routers. When present, the blob can be decompressed to recover the administrator password CVE-2014-4019 class issue; D-Link DSL-2600U and related models. !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from...

D-Link / ZynOS ROM-0 admin password disclosure

Unauthenticated download of /rom-0 on ZynOS / RomPager-based routers exposes a compressed configuration blob. LZS decompression at offset 8568 reveals the device administrator password in plaintext. Tested on D-Link DSL-2600U firmware v1.08; affects multiple D-Link, TP-Link, ZyXEL, and ZTE models...

Allegro Software RomPager "Misfortune Cookie"

This module exploits HTTP servers that appear to be vulnerable to the'Misfortune Cookie' vulnerability which affects Allegro SoftwareRompager versions before 4.34 and can allow attackers to authenticateto the HTTP service as an administrator without providing validcredentials. from kittysploit...

EUVD-2000-0469

Malware in sbrugna...

EUVD-2013-6588

Malware in sbrugna...

EUVD-2014-9048

Malware in sbrugna...

EUVD-2024-16315

Malicious code in bioql PyPI...

CVE-2024-0522

A vulnerability was found in Allegro RomPager 4.01. It has been classified as problematic. Affected is an unknown function of the file usertable.htm?action=delete of the component HTTP POST Request Handler. The manipulation of the argument username leads to cross-site request forgery. It is...

Allegro Software RomPager Misfortune Cookie (CVE-2014-9222) Scanner

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "Allegro Software RomPager 'Misfortune Cookie' CVE-2014-9222 Scanner", 'Description' = %q This module scans for HTTP servers that appear to be...

Allegro Software RomPager Misfortune Cookie (CVE-2014-9222) Authentication Bypass

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "Allegro Software RomPager 'Misfortune Cookie' CVE-2014-9222 Authentication Bypass", 'Description' = %q This module exploits HTTP servers that...

CVE-2024-0522

A vulnerability was found in Allegro RomPager 4.01. It has been classified as problematic. Affected is an unknown function of the file usertable.htm?action=delete of the component HTTP POST Request Handler. The manipulation of the argument username leads to cross-site request forgery. It is...

CVE-2024-0522

A vulnerability was found in Allegro RomPager 4.01. It has been classified as problematic. Affected is an unknown function of the file usertable.htm?action=delete of the component HTTP POST Request Handler. The manipulation of the argument username leads to cross-site request forgery. It is...

CVE-2024-0522 Allegro RomPager HTTP POST Request cross-site request forgery

A vulnerability was found in Allegro RomPager 4.01. It has been classified as problematic. Affected is an unknown function of the file usertable.htm?action=delete of the component HTTP POST Request Handler. The manipulation of the argument username leads to cross-site request forgery. It is...