CVE-2009-4406

Cross-site scripting XSS vulnerability in Forms/login1 in American Power Conversion APC Switched Rack PDU AP7932 B2, running rpdu 3.3.3 or 3.7.0 on AOS 3.3.4, and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the loginusername parameter...

CVE-2009-4406

Cross-site scripting XSS vulnerability in Forms/login1 in American Power Conversion APC Switched Rack PDU AP7932 B2, running rpdu 3.3.3 or 3.7.0 on AOS 3.3.4, and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the loginusername parameter...

CVE-2009-4406

CVE-2009-4406 is an XSS in the APC Network Monitoring/Card web interface. The vulnerability affects the NMC login form: Forms/login1?login_username on AP7932 B2 devices (rpdu 3.3.3 or 3.7.0 on AOS 3.3.4 and possibly other versions) allowing remote attackers to inject arbitrary script/HTML. Conseq...

APC Switched Rack PDU Cross Site Scripting

APC Switched Rack PDU XSS Vulnerability By Jamal Pecou jpecou at gmail dot c0m. Product Info Product InfoTested Versions Model = AP7932 Harware Revision = B2 Application Module Name = rpdu Version = v3.3.3Tested First Version = 3.7.0Current APC OS AOS Name = aos Version = v3.3.4 Vulnerability XSS...

APC Switched Rack PDU crossite scripting

Crossite scripting in Web administration interface...

APC Switched Rack PDU XSS Vulnerability

APC Switched Rack PDU XSS Vulnerability By Jamal Pecou jpecou at gmail dot c0m. Product Info Product InfoTested Versions Model = AP7932 Harware Revision = B2 Application Module Name = rpdu Version = v3.3.3Tested First Version = 3.7.0Current APC OS AOS Name = aos Version = v3.3.4 Vulnerability XSS...

Nortel Switched Firewall产品SNMPv3 HMAC验证绕过漏洞

CNCAN ID：CNCAN-2008091606 Nortel Switched Firewall是一款交换式防火墙产品。 Nortel Switched Firewall不正确处理伪造的SNMPv3报文，远程攻击者可以利用漏洞绕过验证查看和修改设备配置。 SNMPv3的使用keyed-Hash Message Authentication Code HMAC进行验证，构建伪造的SNMPv3报文可绕过验证，读取和修改设备中的任意SNMP对象，导致设备的配置被泄漏和修改。 Nortel Switched Firewall 5100 Series Nortel Switched...

Cell Phone Signal hijacking-vulnerability warning-the black bar safety net

Interesting article, this concept has long been proposed, but very few people described so fine. And to be able to implement the“attacker”requirements, high. GSM in the one-way authentication issues in 3G（WCDMA network will be overwritten, since the certification no longer is a 3-tuple, but the...