Cross site scripting

Cross-site scripting XSS vulnerability in the administration page in Airvana HubBub C1-600-RT and Sprint AIRAVE 2.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-2270

CVE-2013-2270 corresponds to a cross-site scripting (XSS) vulnerability in the Airvana HubBub C1-600-RT and Sprint AIRAVE 2.5 router administration page. The linked Neohapsis advisory indicates this is a stored XSS flaw that can be exploited by an attacker who has authenticated access to execute ...

CVE-2013-2270

Cross-site scripting XSS vulnerability in the administration page in Airvana HubBub C1-600-RT and Sprint AIRAVE 2.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-2270: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the administration page in Airvana HubBub C1-600-RT and Sprint AIRAVE 2.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2014-2576

Name of the Vulnerable Software and Affected Versions Airvana HubBub C1-600-RT affected versions not specified Sprint AIRAVE version 2.5 Description A cross-site scripting XSS issue exists in the administration page, allowing remote attackers to inject arbitrary web script or HTML. This can be...

Updated kernel-rt packages fix security vulnerability

This kernel update provides an update to 3.12.9 and fixes the following critical security issue: Pageexec reported a bug in the Linux kernel's recvmmsg syscall when called from code using the x32 ABI. An unprivileged local user could exploit this flaw to cause a denial of service system crash or...

CVE-2014-0254

The IPv6 implementation in Microsoft Windows 8, Windows Server 2012, and Windows RT does not properly validate packets, which allows remote attackers to cause a denial of service system hang via crafted ICMPv6 Router Advertisement packets, aka "TCP/IP Version 6 IPv6 Denial of Service Vulnerabilit...

CVE-2014-0254

The CVE-2014-0254 issue affects Microsoft Windows 8, Windows Server 2012, and Windows RT, where the IPv6 TCP/IP stack does not properly validate ICMPv6 Router Advertisement packets, allowing remote denial-of-service that can cause a system hang. Affected component: IPv6 implementation in Windows ...

Microsoft XML Core Services信息泄露漏洞(CVE-2014-0266)(MS14-005)

BUGTRAQ ID: 65407 CVECAN ID: CVE-2014-0266 Microsoft XML Core Services MSXML提供了一组服务，使用户可以使用JScript、VBScript和其它微软的开发工具开发基于XML的本机应用程序。 Microsoft XML Core Services在实现上存在安全漏洞，可使攻击者读取用户本地文件系统上的文件或者经过身份验证的Web域内容。当用户查看特制的Web内容时会通过IE触发MSXML，此时攻击者即可以利用此漏洞。 0 Microsoft Windows Windows Server 2012 Microsoft...

Microsoft Windows TCP/IP IPv6路由器广播数据包拒绝服务漏洞（MS14-006）

BUGTRAQ ID: 65409 CVECAN ID: CVE-2014-0254 Windows是一款由美国微软公司开发的窗口化操作系统。 Windows内TCP/IP IPv6实现存在拒绝服务漏洞，成功利用后可造成受影响系统停止响应。如果用户发送大量的特制 IPv6数据包到受影响系统，该漏洞可造成拒绝服务。要利用此漏洞，攻击者的系统必须和目标系统属于同一个子网。 0 Microsoft Windows Windows Server 2012 Microsoft Windows RT Microsoft Windows 8 厂商补丁： Microsoft ---------...

Microsoft Windows Kernel 'Win32k.sys'本地权限提升漏洞(CVE-2013-3881)(MS13-081)

BUGTRAQ ID: 62830 CVECAN ID: CVE-2013-3881 Windows是一款由美国微软公司开发的窗口化操作系统。 Windows内核模式驱动程序处理内存对象时存在本地权限提升漏洞，成功利用后可在内核模式中运行任意代码。 0 Microsoft Windows XP Microsoft Windows Windows Server 2012 Microsoft Windows Windows RT Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows Server 200...

CVE-2014-0254: Improper Input Validation

The IPv6 implementation in Microsoft Windows 8, Windows Server 2012, and Windows RT does not properly validate packets, which allows remote attackers to cause a denial of service system hang via crafted ICMPv6 Router Advertisement packets, aka "TCP/IP Version 6 IPv6 Denial of Service Vulnerabilit...

PT-2014-1028

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version Windows Server 2012 versions prior to the fixed version Windows RT versions prior to the fixed version Description The issue is related to the IPv6 implementation in Microsoft Windows, whic...

rt42 -- denial-of-service attack via the email gateway

The RT development team reports: Versions of RT between 4.2.0 and 4.2.2 inclusive are vulnerable to a denial-of-service attack via the email gateway; any installation which accepts mail from untrusted sources is vulnerable, regardless of the permissions configuration inside RT. This vulnerability...

PT-2014-3097

Name of the Vulnerable Software and Affected Versions ASUS RT-N56U and RT-AC66U routers with firmware 3.0.0.4.374 979 Description The issue is related to multiple buffer overflows in the httpd web.c component. Remote attackers can execute arbitrary code by manipulating the apps name or apps flag...

CVE-2013-6343: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in web.c in httpd on the ASUS RT-N56U and RT-AC66U routers with firmware 3.0.0.4.374979 allow remote attackers to execute arbitrary code via the 1 appsname or 2 appsflag parameter to APPInstallation.asp...

ASUS RT-N56U缓冲区溢出漏洞

No description provided by source...

ASUS RT-N56U - Remote Root Shell Buffer Overflow (ROP)

ASUS RT-N56U remote root shell buffer overflow exploit. !/usr/bin/env python from time import sleep from sys import exit import urllib2, signal, struct, base64, socket, ssl Title: ASUS RT-N56U Remote Root Shell Exploit - appsname Discovered and Reported: October 2013 Discovered/Exploited By: Jaco...

ASUS RT-N56U - Remote Buffer Overflow (ROP)

ASUS RT-N56U - Remote Buffer Overflow ROP !/usr/bin/env python from time import sleep from sys import exit import urllib2, signal, struct, base64, socket, ssl Title: ASUS RT-N56U Remote Root Shell Exploit - appsname Discovered and Reported: October 2013 Discovered/Exploited By: Jacob Holcomb/Gimp...

ASUS RT-N56U - Remote Buffer Overflow (ROP)

!/usr/bin/env python from time import sleep from sys import exit import urllib2, signal, struct, base64, socket, ssl Title: ASUS RT-N56U Remote Root Shell Exploit - appsname Discovered and Reported: October 2013 Discovered/Exploited By: Jacob Holcomb/Gimppy - Security Analyst @ ISE Contact: Twitt...