TVT TD-2308SS-B DVR contains a directory traversal vulnerability

Overview TVT TD-2308SS-B DVR and possibly other models contain a directory traversal vulnerability CWE-22. Description CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' TVT TD-2308SS-B DVR and possibly other models running firmware version 3.2.0.P-3520A-00 conta...

TP-Link TD-W8951ND - Multiple Vulnerabilities

TP-Link TD-W8951ND - Multiple Vulnerabilities ----------- Author: ----------- xistence ------------------------- Affected products: ------------------------- Tested on TP-Link TD-W8951ND Firmware 4.0.0 Build 120607 Rel.30923 ------------------------- Affected vendors: -------------------------...

TP-Link TD-W8951ND XSS and CSRF Vulnerabilities

TP-Link TD-W8951ND is prone to cross-site scripting XSS and cross-site request forgery CSRF vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

TP-Link TD-W8951ND Cross Site Request Forgery / Cross Site Scripting

----------- Author: ----------- xistence ------------------------- Affected products: ------------------------- Tested on TP-Link TD-W8951ND Firmware 4.0.0 Build 120607 Rel.30923 ------------------------- Affected vendors: ------------------------- TP-Link http://www.tp-link.com/ ----------...

TP-Link TD-8817 6.0.1 Build 111128 Rel.26763 - Cross-Site Request Forgery

TP-Link TD-8817 6.0.1 Build 111128 Rel.26763 - Cross-Site Request Forgery Exploit Title: TP-Link TD-8817 CSRF Vulnerability Author: Un0wnX E-mail: [email protected] Category: Hardware Google Dork: N/A Vendor: http://www.tp-link.com Version: TD-W8901G Firmware Version: 6.0.1 Build 111128 Rel.2676...

TP-Link TD-8817 CSRF Vulnerability

CSRF Vulnerability on TP-Link TD-8817 ADSL Router http://www.tp-link.com/lk/products/details/?model=TD-8817 ====================================================================== | | | | | | \ \ / / | | | | | |/' | \ V / | | | | ' | /| \ \ /\ / / ' \ / \ | || | | | \ |/ /\ V V /| | | | / /^\ ...

CVE-2012-5378

Untrusted search path vulnerability in the installation functionality in ActiveTcl 8.5.12, when installed in the top-level C:\ directory, allows local users to gain privileges via a Trojan horse DLL in the C:\TD\bin directory, which is added to the PATH system environment variable, as demonstrate...

TP-LINK TD-W8151N Cross Site Request Forgery

===================================================================== Vulnerable Software/Or Device: TP-LINK TD-W8151N 150Mbps Wireless N ADSL+2 modem Router Vendor: http://www.tp-linkru.com/ Vuln: CROSS SITE REQUEST FORGERY CSRF How it looks?: http://s52.radikal.ru/i137/1210/47/b60496b61adf.jpg...

TP-Link TD-W8901G CSRF Vulnerability (ADSL Router)

Exploit for hardware platform in category web applications ================================================================================ || | | || || || |/ | || |/ | | | | | | | | | | | \ | | | | \ ================================================================================ Exploit Title:...

TPLINK TD-8810 Cross Site Request Forgery

!/usr/bin/python +Exploit Title: TPLINK TD-8810 CSRF Vulnerability Local Reboot Modem Exploit +Date: 01\09\2011 +Author: C4SS!0 G0M3S +Version: TD-8810 +Tested On: WIN-XP SP3 Brazilian Portuguese +CVE: N/A from socket import from time import sleep from base64 import b64encode import os,sys if...

Td Web SQL Injection

IRANIAN THE BEST HACKERS IN THE WORLD Remote SQL injection Vulnerability Td Web news.php?idcategoria AuTh0r : EhsanHp200 H0ME : www.ehsanhp.blogsky.com Email : [email protected] Vendor : http://www.tdweb.it/ Persian Gulf 4 Ever! Exploite: www.victim.com/news.php?idcategoria=SQL Example :...

CVE-2011-1655

CA Total Defense Suite UNCWS getDBConfigSettings vulnerability (CVE-2011-1655) affects UNC Server before SE2; management.asmx responds to SOAP requests and transmits database credentials in plaintext, enabling unauthenticated remote access to credentials and potential arbitrary code execution. Im...

CVE-2011-1653

CA Total Defense UNCWS SQL Injection vulnerabilities (CVE-2011-1653) affect the Unified Network Control (UNC) Server in CA Total Defense Suite R12 pre-SE2. The issues arise from insufficient validation of request parameters in several UNCWS stored procedures (including DeleteReports and related f...

Stack overflow

Stack-based buffer overflow in the SPIDERLib.Loader ActiveX control Spider90.ocx 9.1.0.4353 in TestDirector TD for Mercury Quality Center 9.0 before Patch 12.1, and 8.2 SP1 before Patch 32, allows remote attackers to execute arbitrary code via a long ProgColor property...

CVE-2007-1819

CVE-2007-1819 describes a stack-based buffer overflow in the SPIDERLib.Loader ActiveX control (Spider90.ocx) version 9.1.0.4353 used by TestDirector (TD) for Mercury Quality Center, with patches: 9.0 before Patch 12.1 and 8.2 SP1 before Patch 32. The overflow is triggered by a long ProgColor prop...

Code injection

WebCore in Apple WebKit build 18794 allows remote attackers to cause a denial of service null dereference and application crash via a TD element with a large number in the ROWSPAN attribute, as demonstrated by a crash of OmniWeb 5.5.3 on Mac OS X 10.4.8, a different vulnerability than CVE-2006-20...

CVE-2007-0342

WebCore in Apple WebKit build 18794 allows remote attackers to cause a denial of service null dereference and application crash via a TD element with a large number in the ROWSPAN attribute, as demonstrated by a crash of OmniWeb 5.5.3 on Mac OS X 10.4.8, a different vulnerability than CVE-2006-20...

CVE-2007-0342

CVE-2007-0342 concerns WebCore in Apple WebKit build 18794. The vulnerability enables remote DoS via a TD element with an excessively large ROWSPAN value, causing a null dereference and application crash, as demonstrated by OmniWeb 5.5.3 on Mac OS X 10.4.8. Reports consistently reference this as ...