MyBB 1.4.8 SQL Injection

mybb v1.4.8 search.php blind/query based sql injection vulns author: $qLDoCt0r msn: [email protected] blog: http://full-discl0sure.blogspot.com moderator of: http://hackwarez.net search.php fails to correctly sanitise the user input validation allowing error based and query based sql...

CVE-2008-7165

Cross-site request forgery in cp06wifimnocifr.cgi in the administrator panel in TELECOM ITALIA Alice Gate2 Plus Wi-Fi allows remote attackers to hijack the authentication of administrators for requests that disable Wi-Fi encryption via certain values for the wlChannel and wlRadioEnable parameters...

CVE-2008-7165

Cross-site request forgery in cp06wifimnocifr.cgi in the administrator panel in TELECOM ITALIA Alice Gate2 Plus Wi-Fi allows remote attackers to hijack the authentication of administrators for requests that disable Wi-Fi encryption via certain values for the wlChannel and wlRadioEnable parameters...

CVE-2008-7165

CVE-2008-7165 describes a cross-site request forgery in the cp06_wifi_m_nocifr.cgi admin panel of TELECOM ITALIA Alice Gate2 Plus Wi‑Fi gateways. The underlying issue allows remote attackers to hijack administrator authentication and issue requests that disable Wi‑Fi encryption by crafting specif...

NOKIA Siemens FlexiISN 3.1 Multiple Auth Bypass Vulnerabilities

No description provided by source. NOKIA Siemens FlexiISN GGSN Multiple Authentication bypass Vulnerability: NOKIA Siemens FlexiISN Remote: Yes Local: No Class: Input Validation Error Critical: Moderately critical OS : FlexiISN GGSN FISN 3.1 URL 1 for bypassing authentication on AAA Configuration...

Telecom Italia Alice路由器IP报文非授权访问漏洞

BUGTRAQ ID: 31754 Telecom Italia是意大利最重要的ISP，提供名为Alice的ADSL服务。 如果内网用户向Alice路由器发送了如下IP报文的话： 1 IP协议号255 2 8字节负载大小 3 负载为br0设备MAC地址的MD5数据变形后的前8个字节 4 这些modem中br0拥有相同的eth0 mac 就可以激活路由器的管理接口和telnet/ftp/tftp服务，获得非授权访问。 Telecom Italia AGA/AGB/AG2P-AG3/AGPV-AGPF Telecom Italia --------------...

Telecom Italia Alice Pirelli routers Backdoor from internal LAN/WAN

No description provided by source. saxdax & drpepperONE Discovered embedded backdoor to activate telnet/ftp/tftp/web extended admin interface with Admin privileges, from internal network lan on Alice ADSL CPE Modem/Router, manufactered by Pirelli based on Broadcom platform. saxdax & drpepperONE...

alicetelecom-backdoor.txt

saxdax & drpepperONE Discovered embedded backdoor to activate telnet/ftp/tftp/web extended admin interface with Admin privileges, from internal network lan on Alice ADSL CPE Modem/Router, manufactered by Pirelli based on Broadcom platform. saxdax & drpepperONE Router Vendor: Alice Telecom Italia...

Telecom Italia Alice Pirelli routers - Backdoor from internal LAN/WAN

saxdax & drpepperONE Discovered embedded backdoor to activate telnet/ftp/tftp/web extended admin interface with Admin privileges, from internal network lan on Alice ADSL CPE Modem/Router, manufactered by Pirelli based on Broadcom platform. saxdax & drpepperONE Router Vendor: Alice Telecom Italia...

Marvell Driver Malformed Association Request Vulnerability

Title: ------ Marvell Driver Malformed Association Request Vulnerability Summary: -------- The wireless drivers in some Wi-Fi access points such as the MARVELL-based Linksys WAP4400N do not correctly parse some malformed 802.11 frames. Assigned CVE: ------------- CVE-2008-4441 Details: -------- T...

Telecom Italia Alice Pirelli routers - Backdoor from internal LANWAN

Telecom Italia Alice Pirelli routers - Backdoor from internal LANWAN saxdax & drpepperONE Discovered embedded backdoor to activate telnet/ftp/tftp/web extended admin interface with Admin privileges, from internal network lan on Alice ADSL CPE Modem/Router, manufactered by Pirelli based on Broadco...

Telecom Italia Alice Pirelli routers backdoor

Specially constructed IP packet causes router's telnet/ftp/tftp functions to be activated...

Telecom Italia Alice Pirelli routers backdoor discoverd to activate telnet/ftp/tftp from internal LAN/WLAN.

saxdax & drpepperONE Discovered embedded backdoor to activate telnet/ftp/tftp/web extended admin interface with Admin privileges, from internal network lan on Alice ADSL CPE Modem/Router, manufactered by Pirelli based on Broadcom platform. saxdax & drpepperONE Router Vendor: Alice Telecom Italia...

Telecom Italia Alice Pirelli routers Backdoor from internal LAN/WAN

Exploit for hardware platform in category remote exploits =================================================================== Telecom Italia Alice Pirelli routers Backdoor from internal LAN/WAN =================================================================== saxdax & drpepperONE Discovered...

Marvell Driver EAPoL-Key Length Overflow

Title: ------ Marvell Driver EAPoL-Key Length Overflow Summary: -------- The wireless drivers in some Wi-Fi access points such as the MARVELL-based Netgear WN802T do not correctly parse malformed EAPoL-Key packets. This packet is used for unicast/multicast key derivation which are called 4-way...

Marvell Driver Null SSID Association Request Vulnerability

Title: ------ Marvell Driver Null SSID Association Request Vulnerability Summary: ------ The wireless drivers in some Wi-Fi access points such as the MARVELL-based Netgear WN802T do not correctly parse SSID information element included in association requests. Most information elements are used b...

C6 Messenger下载Url DownloaderActiveX控件远程代码执行漏洞

C6 Messenger是由意大利电信提供的即时聊天程序。 C6 Messenger所安装的ActiveX控件实现上存在漏洞，远程攻击者可能利用此漏洞控制用户系统。 用户可从 http://c6.community.alice.it/download/c6.html 下载并安装C6...

[NSG 03-06-2008] C6 Messenger Installation Url DownloaderActiveX Control Remote Download & Execute Exploit

!-- C6 Messenger Installation Url DownloaderActiveX Control Remote Download & Execute Exploit by Nine:Situations:Group::SnoopyAssault site: http://retrogod.altervista.org/ exploit url: http://retrogod.altervista.org/9sgc6downloadexec.html "C6 Messenger is an instant messaging program produced by...

C6 Messenger - ActiveX Remote Download and Execute

!-- C6 Messenger Installation Url DownloaderActiveX Control Remote Download & Execute Exploit by Nine:Situations:Group::SnoopyAssault site: http://retrogod.altervista.org/ "C6 Messenger is an instant messaging program produced by Telecom Italia Group, specifically by Alice distribution, Icon Spa...

C6 Messenger - ActiveX Remote Download and Execute

C6 Messenger - ActiveX Remote Download and Execute !-- C6 Messenger Installation Url DownloaderActiveX Control Remote Download & Execute Exploit by Nine:Situations:Group::SnoopyAssault site: http://retrogod.altervista.org/ "C6 Messenger is an instant messaging program produced by Telecom Italia...