TPLINK TD-8810 Cross Site Request Forgery

!/usr/bin/python +Exploit Title: TPLINK TD-8810 CSRF Vulnerability Local Reboot Modem Exploit +Date: 01\09\2011 +Author: C4SS!0 G0M3S +Version: TD-8810 +Tested On: WIN-XP SP3 Brazilian Portuguese +CVE: N/A from socket import from time import sleep from base64 import b64encode import os,sys if...

Td Web SQL Injection

IRANIAN THE BEST HACKERS IN THE WORLD Remote SQL injection Vulnerability Td Web news.php?idcategoria AuTh0r : EhsanHp200 H0ME : www.ehsanhp.blogsky.com Email : [email protected] Vendor : http://www.tdweb.it/ Persian Gulf 4 Ever! Exploite: www.victim.com/news.php?idcategoria=SQL Example :...

CVE-2011-1653

CA Total Defense UNCWS SQL Injection vulnerabilities (CVE-2011-1653) affect the Unified Network Control (UNC) Server in CA Total Defense Suite R12 pre-SE2. The issues arise from insufficient validation of request parameters in several UNCWS stored procedures (including DeleteReports and related f...

CVE-2011-1655

CA Total Defense Suite UNCWS getDBConfigSettings vulnerability (CVE-2011-1655) affects UNC Server before SE2; management.asmx responds to SOAP requests and transmits database credentials in plaintext, enabling unauthenticated remote access to credentials and potential arbitrary code execution. Im...

Stack overflow

Stack-based buffer overflow in the SPIDERLib.Loader ActiveX control Spider90.ocx 9.1.0.4353 in TestDirector TD for Mercury Quality Center 9.0 before Patch 12.1, and 8.2 SP1 before Patch 32, allows remote attackers to execute arbitrary code via a long ProgColor property...

CVE-2007-1819

CVE-2007-1819 describes a stack-based buffer overflow in the SPIDERLib.Loader ActiveX control (Spider90.ocx) version 9.1.0.4353 used by TestDirector (TD) for Mercury Quality Center, with patches: 9.0 before Patch 12.1 and 8.2 SP1 before Patch 32. The overflow is triggered by a long ProgColor prop...

Code injection

WebCore in Apple WebKit build 18794 allows remote attackers to cause a denial of service null dereference and application crash via a TD element with a large number in the ROWSPAN attribute, as demonstrated by a crash of OmniWeb 5.5.3 on Mac OS X 10.4.8, a different vulnerability than CVE-2006-20...

CVE-2007-0342

WebCore in Apple WebKit build 18794 allows remote attackers to cause a denial of service null dereference and application crash via a TD element with a large number in the ROWSPAN attribute, as demonstrated by a crash of OmniWeb 5.5.3 on Mac OS X 10.4.8, a different vulnerability than CVE-2006-20...

CVE-2007-0342

CVE-2007-0342 concerns WebCore in Apple WebKit build 18794. The vulnerability enables remote DoS via a TD element with an excessively large ROWSPAN value, causing a null dereference and application crash, as demonstrated by OmniWeb 5.5.3 on Mac OS X 10.4.8. Reports consistently reference this as ...