9397 matches found
Multiple D-Link Routers Authentication Bypass Vulnerability
Exploit for unknown platform in category web applications =========================================================== Multiple D-Link Routers Authentication Bypass Vulnerability =========================================================== Multiple D-ÂLink routers suffer from insecure...
D-Link Routers - Authentication Bypass (2)
D-Link Routers - Authentication Bypass 2 Multiple D-Link routers suffer from insecure implementations of the Home Network Administration Protocol which allow unauthenticated and/or unprivileged users to view and configure administrative settings on the router. Further, the mere existence of HN...
D-Link Routers - Authentication Bypass (2)
Multiple D-Link routers suffer from insecure implementations of the Home Network Administration Protocol which allow unauthenticated and/or unprivileged users to view and configure administrative settings on the router. Further, the mere existence of HNAP allows attackers to completely bypass...
New Attack Locates Web Users Via XSS, Google Data
The security researcher who created the MySpace XSS worm in 2005 has developed a technique that enables an attacker to accurately locate a Web user with GPS coordinates, without using IP-based geolocation. Samy Kamkar, the author of the infamous Samy worm that spread through MySpace, on Monday...
3Com OfficeConnect Routers DoS (Content-Type)
Exploit for unknown platform in category dos / poc ============================================= 3Com OfficeConnect Routers DoS Content-Type ============================================= Title: 3Com OfficeConnect Routers DoS Content-Type CVE-ID: OSVDB-ID: Author: Alberto Ortega Published:...
3Com OfficeConnect Routers Remote DoS Exploit
Exploit for unknown platform in category dos / poc ============================================= 3Com OfficeConnect Routers Remote DoS Exploit ============================================= Title: 3Com OfficeConnect Routers Remote DoS Exploit CVE-ID: OSVDB-ID: Author: Alberto Ortega Llamas...
3Com OfficeConnect Routers - Remote Denial of Service
Model - Tested on 3Com OfficeConnect ADSL Wireless 11g Firewall Router 3CRWDR100A-72 and 3CRWDR100Y-72 Software Version - Tested on 2.06T13 Apr 2007, last version for these routers Attacker - Tested from GNU/Linux Sidux and Ubuntu Exploit languaje - Ruby Type - Remote Denial of Service Exploit by...
Cisco ASA 8.x - VPN SSL Module Clientless URL-list control Bypass
============================================= INTERNET SECURITY AUDITORS ALERT 2009-013 - Original release date: December 7th, 2009 - Last revised: December 16th, 2009 - Discovered by: David Eduardo Acosta Rodriguez - Severity: 4/10 CVSS Base Score ============================================= I...
2wire routers DoS
It's possible to reboot device via TCP/50001 https Web interface without authorization...
JVN#13011682 SEIL/X Series and SEIL/B1 denial of service vulnerability
SEIL/X Series and SEIL/B1 are routers. SEIL/X Series and SEIL/B1 contain an issue in the processing by the NAT function, which may lead to a denial of service DoS vulnerability. Impact When processing a specially crafted packet, a remote attacker may cause a denial of service. Solution Update the...
JVN#06362164 SEIL/X Series and SEIL/B1 buffer overflow vulnerability
SEIL/X Series and SEIL/B1 are routers. SEIL/X Series and SEIL/B1 contain an issue in the processing by the URL filtering function, which may lead to a buffer overflow vulnerability. Impact When processing a specially crafted URL, a remote attacker may be able to execute arbitrary code. Solution...
Linksys apply.cgi Buffer Overflow
require 'msf/core' class Metasploit3 'Linksys apply.cgi buffer overflow', 'Description' = %q This module exploits a stack overflow in apply.cgi on the Linksys WRT54G and WRT54GS routers. According to iDefense who discovered this vulnerability, all WRT54G versions prior to 4.20.7 and all WRT54GS...
3COM OfficeConnect routers multiple security vulnerabilities
Backdoor accounts, password stored in clear text, code execution...
2WIRE Routers - CD35_SETUP_01 Access Validation
2WIRE Routers - CD35SETUP01 Access Validation source: https://www.securityfocus.com/bid/36031/info Multiple 2Wire routers are prone to an access-validation vulnerability because they fail to adequately authenticate users before performing certain actions. Unauthenticated attackers can leverage th...
2Wire routers unauthorized access
It's possible to reset password without knowledge of old one...
2WIRE Routers - 'CD35_SETUP_01' Access Validation
source: https://www.securityfocus.com/bid/36031/info Multiple 2Wire routers are prone to an access-validation vulnerability because they fail to adequately authenticate users before performing certain actions. Unauthenticated attackers can leverage this issue to change the router's administrative...
Ubuntu 8.10 : linux regression (USN-661-1)
Version 2.6.27 of the Linux kernel changed the order of options in TCP headers. While this change was RFC-compliant, it was found that some old routers and consumer DSL modems would not route traffic for these systems when TCP timestamps were enabled. As a workaround, TCP timestamps were disabled...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the xslt script in the web-based management interface on the 2wire 1701HG, 1800HW, 2071HG, and 2700HG with firmware 3.17.5, 3.7.1, 4.25.19, or 5.29.51 allows remote attackers to hijack the intranet connectivity of arbitrary users for requests that...
Infrastructure attacks: A growing concern
In an essay published on his personal blog doxpara.com, security researcher Dan Kaminsky is starting to sound the alarm about “the extraordinary damage” we face from infrastructure attacks, warning that the industry needs to treat infrastructure with more security due diligence and care. “Forget...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in multiple Century Systems routers including XR-410 before 1.6.9, XR-510 before 3.5.3, XR-440 before 1.7.8, and other XR series routers from XR-510 to XR-730 allows remote attackers to modify configuration as the administrator via unknown vectors...