TVT TD-2308SS-B DVR - Directory Traversal

Exploit Title: TVT TD-2308SS-B DVR directory traversal Shodan Dork: "Cross Web Server" Date: 01 Dec 2013 Disclosure date: 10 Sep 2013 Exploit Author: Cesar Neira Vendor Homepage: http://en.tvt.net.cn/ Affected Firmware Versions: 3.1.43.B 3.1.43.P 3.1.6.P-1.0.2.1-03 3.1.75.B-1.0.2.1-00...

TP-Link TD-8840t - Cross-Site Request Forgery

Exploit Title: TP-Link TD-8840t CSRF Vulnerability Author: MOHAMMED AL-SAGGAFLEGNED-SEIYUN E-mail: [email protected]/mohammed.alsaggaf2010 Category: Hardware Google Dork: N/A Vendor: http://www.tp-link.com Firmware Version: 3.0.0 Build 120531 Product:...

TP-Link TD-8840t - Cross-Site Request Forgery

TP-Link TD-8840t - Cross-Site Request Forgery Exploit Title: TP-Link TD-8840t CSRF Vulnerability Author: MOHAMMED AL-SAGGAFLEGNED-SEIYUN E-mail: [email protected]/mohammed.alsaggaf2010 Category: Hardware Google Dork: N/A Vendor: http://www.tp-link.com Firmware Version:...

Directory traversal

Directory traversal vulnerability in the TVT TD-2308SS-B DVR with firmware 3.2.0.P-3520A-00 and earlier allows remote attackers to read arbitrary files via .. dot dot in the URI...

CVE-2013-6023

Directory traversal vulnerability in the TVT TD-2308SS-B DVR with firmware 3.2.0.P-3520A-00 and earlier allows remote attackers to read arbitrary files via .. dot dot in the URI...

CVE-2013-6023

CVE-2013-6023 covers a directory traversal vulnerability in the TVT TD-2308SS-B DVR. The issue allows remote attackers to read arbitrary files by using a .. path in the URI, affecting firmware versions up to 3.2.0.P-3520A-00 and earlier. Public sources describe exploit/download of sensitive files...

TVT TD-2308SS-B DVR contains a directory traversal vulnerability

Overview TVT TD-2308SS-B DVR and possibly other models contain a directory traversal vulnerability CWE-22. Description CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' TVT TD-2308SS-B DVR and possibly other models running firmware version 3.2.0.P-3520A-00 conta...

TP-Link TD-W8951ND - Multiple Vulnerabilities

TP-Link TD-W8951ND - Multiple Vulnerabilities ----------- Author: ----------- xistence ------------------------- Affected products: ------------------------- Tested on TP-Link TD-W8951ND Firmware 4.0.0 Build 120607 Rel.30923 ------------------------- Affected vendors: -------------------------...

TP-Link TD-W8951ND XSS and CSRF Vulnerabilities

TP-Link TD-W8951ND is prone to cross-site scripting XSS and cross-site request forgery CSRF vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

TP-Link TD-W8951ND Cross Site Request Forgery / Cross Site Scripting

----------- Author: ----------- xistence ------------------------- Affected products: ------------------------- Tested on TP-Link TD-W8951ND Firmware 4.0.0 Build 120607 Rel.30923 ------------------------- Affected vendors: ------------------------- TP-Link http://www.tp-link.com/ ----------...

TP-Link TD-8817 6.0.1 Build 111128 Rel.26763 - Cross-Site Request Forgery

TP-Link TD-8817 6.0.1 Build 111128 Rel.26763 - Cross-Site Request Forgery Exploit Title: TP-Link TD-8817 CSRF Vulnerability Author: Un0wnX E-mail: [email protected] Category: Hardware Google Dork: N/A Vendor: http://www.tp-link.com Version: TD-W8901G Firmware Version: 6.0.1 Build 111128 Rel.2676...

TP-Link TD-8817 CSRF Vulnerability

CSRF Vulnerability on TP-Link TD-8817 ADSL Router http://www.tp-link.com/lk/products/details/?model=TD-8817 ====================================================================== | | | | | | \ \ / / | | | | | |/' | \ V / | | | | ' | /| \ \ /\ / / ' \ / \ | || | | | \ |/ /\ V V /| | | | / /^\ ...

CVE-2012-5378

Untrusted search path vulnerability in the installation functionality in ActiveTcl 8.5.12, when installed in the top-level C:\ directory, allows local users to gain privileges via a Trojan horse DLL in the C:\TD\bin directory, which is added to the PATH system environment variable, as demonstrate...

TP-LINK TD-W8151N Cross Site Request Forgery

===================================================================== Vulnerable Software/Or Device: TP-LINK TD-W8151N 150Mbps Wireless N ADSL+2 modem Router Vendor: http://www.tp-linkru.com/ Vuln: CROSS SITE REQUEST FORGERY CSRF How it looks?: http://s52.radikal.ru/i137/1210/47/b60496b61adf.jpg...

TP-Link TD-W8901G CSRF Vulnerability (ADSL Router)

Exploit for hardware platform in category web applications ================================================================================ || | | || || || |/ | || |/ | | | | | | | | | | | \ | | | | \ ================================================================================ Exploit Title:...

TPLINK TD-8810 Cross Site Request Forgery

!/usr/bin/python +Exploit Title: TPLINK TD-8810 CSRF Vulnerability Local Reboot Modem Exploit +Date: 01\09\2011 +Author: C4SS!0 G0M3S +Version: TD-8810 +Tested On: WIN-XP SP3 Brazilian Portuguese +CVE: N/A from socket import from time import sleep from base64 import b64encode import os,sys if...

Td Web SQL Injection

IRANIAN THE BEST HACKERS IN THE WORLD Remote SQL injection Vulnerability Td Web news.php?idcategoria AuTh0r : EhsanHp200 H0ME : www.ehsanhp.blogsky.com Email : [email protected] Vendor : http://www.tdweb.it/ Persian Gulf 4 Ever! Exploite: www.victim.com/news.php?idcategoria=SQL Example :...

CVE-2011-1653

CA Total Defense UNCWS SQL Injection vulnerabilities (CVE-2011-1653) affect the Unified Network Control (UNC) Server in CA Total Defense Suite R12 pre-SE2. The issues arise from insufficient validation of request parameters in several UNCWS stored procedures (including DeleteReports and related f...

CVE-2011-1655

CA Total Defense Suite UNCWS getDBConfigSettings vulnerability (CVE-2011-1655) affects UNC Server before SE2; management.asmx responds to SOAP requests and transmits database credentials in plaintext, enabling unauthenticated remote access to credentials and potential arbitrary code execution. Im...

Stack overflow

Stack-based buffer overflow in the SPIDERLib.Loader ActiveX control Spider90.ocx 9.1.0.4353 in TestDirector TD for Mercury Quality Center 9.0 before Patch 12.1, and 8.2 SP1 before Patch 32, allows remote attackers to execute arbitrary code via a long ProgColor property...