ZYXEL Prestig P-660HNU-T1 - ISP Credentials Disclosure

ZYXEL Prestig P-660HNU-T1 - ISP Credentials Disclosure !/usr/bin/perl Exploit Author: Sebastián Magof Hardware: ZyXEL Prestig P-660HNU-T1 Vulnerable file: wzADSL.asp location: http://gateway/cgi-bin/wzADSL.asp Bug: ISP usr+pwd disclosure Type: Local Date: 22/09/2014 Vendor Homepage:...

ZyXEL Prestig P-660HNU-T1 ISP Credentials Disclosure Exploit

ZyXEL Prestig P-660HNU-T1v2 suffers from a remote credential disclosure vulnerability. !/usr/bin/perl Exploit Author: Sebastián Magof Hardware: ZyXEL Prestig P-660HNU-T1 Vulnerable file: wzADSL.asp location: http://gateway/cgi-bin/wzADSL.asp Bug: ISP usr+pwd disclosure Type: Local Date: 22/09/201...

Smartcard Undocumented Commands: THC-SmartBrute

This tools finds undocumented and secret commands implemented in a smartcard. An instruction is divided into Class CLA, Instruction-Number INS and the parameters or arguments P1, P2, P3. … iterates through all the possible values of CLA and INS to find a valid combination. Furthermore it tries to...

Zyxel P-660HW-T1 v3 Wireless Router - CSRF Vulnerability

No description provided by source. Exploit Title: Zyxel P-660HW-T1 v3 Wireless Router - CSRF Vulnerabilities Date: 05/22/2014 Author: Mustafa ALTINKAYNAK Vendor Homepage:http://www.zyxel.com/tr/tr/productsservices/p660hwseries.shtml?t=p Category: Hardware/Wireless Router Tested on: Zyxel P-660HW-...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the Zyxel P-660HW-T1 v3 wireless router allow remote attackers to hijack the authentication of administrators for requests that change the 1 wifi password or 2 SSID via a request to Forms/WLANGeneral1...

CVE-2014-4162

The CVE-2014-4162 issue affects Zyxel P-660HW-T1 (v3) wireless routers. The documented vulnerability is multiple Cross-Site Request Forgery (CSRF) flaws in the device’s web interface (Forms/WLAN_General_1) that allow remote attackers to hijack administrator authentication and perform changes to (...

Zyxel P-660HW-T1 v3 Wireless Router - CSRF Vulnerability

Exploit for hardware platform in category web applications Exploit Title: Zyxel P-660HW-T1 v3 Wireless Router - CSRF Vulnerabilities Date: 05/22/2014 Author: Mustafa ALTINKAYNAK Vendor Homepage:http://www.zyxel.com/tr/tr/productsservices/p660hwseries.shtml?t=p Category: Hardware/Wireless Router...

Zyxel P-660HW-T1 Cross Site Request Forgery

Exploit Title: Zyxel P-660HW-T1 v3 Wireless Router - CSRF Vulnerabilities Date: 05/28/2014 Author: Mustafa ALTINKAYNAK Vendor Homepage:http://www.zyxel.com/tr/tr/productsservices/p660hwseries.shtml?t=p Category: Hardware/Wireless Router Tested on: Zyxel P-660HW-T1 v3 Wireless Router Patch/ Fix:...

ZYXEL P-660HW-T1 3 Wireless Router - Cross-Site Request Forgery

ZYXEL P-660HW-T1 3 Wireless Router - Cross-Site Request Forgery Exploit Title: Zyxel P-660HW-T1 v3 Wireless Router - CSRF Vulnerabilities Date: 05/22/2014 Author: Mustafa ALTINKAYNAK Vendor Homepage:http://www.zyxel.com/tr/tr/productsservices/p660hwseries.shtml?t=p Category: Hardware/Wireless...

CVE-2012-3918

Cisco IOS before 15.31T on Cisco 2900 devices, when a VWIC2-2MFT-T1/E1 card is configured for TDM/HDLC mode, allows remote attackers to cause a denial of service serial-interface outage via certain Frame Relay traffic, aka Bug ID CSCub13317...

CVE-2012-3918

Cisco IOS

Cisco IOS Software Queue Wedge Denial of Service Vulnerability (cisco-sa-20130925-wedge)

A vulnerability in the T1/E1 driver queue implementation of Cisco IOS Software could allow an unauthenticated, remote attacker to cause an interface wedge condition, which could lead to loss of connectivity, loss of routing protocol adjacency, and could result in a denial of service DoS scenario...

CVE-2013-5477

The T1/E1 driver-queue functionality in Cisco IOS 12.2 and 15.0 through 15.3, when an HDLC32 driver is used, allows remote attackers to cause a denial of service interface queue wedge via bursty network traffic, aka Bug ID CSCub67465...

CVE-2013-5477

The T1/E1 driver-queue functionality in Cisco IOS 12.2 and 15.0 through 15.3, when an HDLC32 driver is used, allows remote attackers to cause a denial of service interface queue wedge via bursty network traffic, aka Bug ID CSCub67465...

CVE-2013-5477

Cisco IOS Software vulnerability CVE-2013-5477 affects T1/E1 driver queue logic in Cisco IOS 12.2 and 15.0–15.3 when using the HDLC32 driver. The flaw in the T1/E1 driver queue implementation allows remote, unauthenticated attackers to trigger a denial-of-service via bursty traffic, causing an in...

DEBIAN-CVE-2011-5244

Multiple off-by-one errors in the 1 token and 2 linetoken functions in backend/dvi/mdvi-lib/afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other products, allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via a DVI file containi...

AZL-7376 CVE-2010-2642 affecting package t1lib 5.1.2-28

Heap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince 2.32 and earlier, teTeX 3.0, t1lib 5.1.2, and possibly other products allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted font in conjunctio...

ZyXEL P-660R-T1 crossite scripting

Crossite scripting via Web interface...

ZYXEL P-660R-T1 V2 - HomeCurrent_Date Cross-Site Scripting

ZYXEL P-660R-T1 V2 - HomeCurrentDate Cross-Site Scripting source: https://www.securityfocus.com/bid/45027/info ZyXEL P-660R-T1 V2 is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary...

ZYXEL P-660R-T1 V2 - 'HomeCurrent_Date' Cross-Site Scripting

source: https://www.securityfocus.com/bid/45027/info ZyXEL P-660R-T1 V2 is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary HTML and script code in the browser of an unsuspecting us...