26 matches found
EUVD-2014-1090
Malware in sbrugna...
EUVD-2014-1091
Malware in sbrugna...
hs.teracom.it XSS vulnerability
Open Bug Bounty ID: OBB-699170 Description| Value ---|--- Affected Website:| hs.teracom.it Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...
BSNL Teracom Router Firmware Rewrite / Link Modification
Multiple Vulnerabilities in TERACOM ROUTER Author: Ajay Gowtham aka AJOXR Contact: gowtham.ajay5 at gmail.com Vulnerability Type: Insecure Upload File Permissions Affected Module: Upload Functionality Criticality: Medium Device Model: BSNL Teracom T2-B-Gawv1.4U10Y-BI is WiFi enabled ADSL2+...
CVE-2014-10019
Multiple cross-site request forgery CSRF vulnerabilities in webconfig/wlan/country.html/country in the Teracom T2-B-Gawv1.4U10Y-BI modem allow remote attackers to hijack the authentication of administrators for requests that 1 change the SSID or 2 change the password via a crafted request...
CVE-2014-10018
Cross-site scripting XSS vulnerability in webconfig/wlan/country.html/country in the Teracom T2-B-Gawv1.4U10Y-BI modem allows remote attackers to inject arbitrary web script or HTML via the essid parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in webconfig/wlan/country.html/country in the Teracom T2-B-Gawv1.4U10Y-BI modem allows remote attackers to inject arbitrary web script or HTML via the essid parameter...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in webconfig/wlan/country.html/country in the Teracom T2-B-Gawv1.4U10Y-BI modem allow remote attackers to hijack the authentication of administrators for requests that 1 change the SSID or 2 change the password via a crafted request...
CVE-2014-10018
CVE-2014-10018 is an XSS vulnerability in the Teracom T2-B-Gawv1.4U10Y-BI modem, specifically in webconfig/wlan/country.html/country, where the essid parameter can be manipulated to inject arbitrary web script or HTML. The connected records confirm only the generic description and lack explicit t...
CVE-2014-10018
Cross-site scripting XSS vulnerability in webconfig/wlan/country.html/country in the Teracom T2-B-Gawv1.4U10Y-BI modem allows remote attackers to inject arbitrary web script or HTML via the essid parameter...
CVE-2014-10019
Multiple cross-site request forgery CSRF vulnerabilities in webconfig/wlan/country.html/country in the Teracom T2-B-Gawv1.4U10Y-BI modem allow remote attackers to hijack the authentication of administrators for requests that 1 change the SSID or 2 change the password via a crafted request...
CVE-2014-10019
The CVE-2014-10019 entry concerns CSRF vulnerabilities in Teracom T2-B-Gawv1.4U10Y-BI modem, specifically in webconfig/wlan/country.html/country. An attacker could remotely hijack administrator authentication to perform requests that (1) change the SSID or (2) change the password via crafted requ...
CVE-2014-10019: Cross-Site Request Forgery (CSRF)
Multiple cross-site request forgery CSRF vulnerabilities in webconfig/wlan/country.html/country in the Teracom T2-B-Gawv1.4U10Y-BI modem allow remote attackers to hijack the authentication of administrators for requests that 1 change the SSID or 2 change the password via a crafted request...
PT-2015-3663
Name of the Vulnerable Software and Affected Versions Teracom T2-B-Gawv1.4U10Y-BI modem Description The issue affects the webconfig/wlan/country.html/country component of the modem, where multiple cross-site request forgery CSRF vulnerabilities exist. These vulnerabilities allow remote attackers ...
CVE-2014-10018: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in webconfig/wlan/country.html/country in the Teracom T2-B-Gawv1.4U10Y-BI modem allows remote attackers to inject arbitrary web script or HTML via the essid parameter...
PT-2015-3662
Name of the Vulnerable Software and Affected Versions Teracom T2-B-Gawv1.4U10Y-BI modem Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the essid parameter in the /webconfig/wlan/country.html/country endpoint. Recommendatio...
Teracom Modem T2-B-Gawv1.4U10Y-BI - CSRF Vulnerability
No description provided by source...
Teracom Modem T2-B-Gawv1.4U10Y-BI - Stored XSS Vulnerability
No description provided by source. Exploit Title: Teracom Modem Stored XSS Vulnerability Date: 19-01-2014 Author: Rakesh S Software Link: http://www.teracom.in/ Version: T2-B-Gawv1.4U10Y-BI Tested on: Windows 7 Code : GET...
Teracom Modem T2-B-Gawv1.4U10Y-BI Cross Site Request Forgery
Exploit Title: Teracom Modem CSRF Vulnerability Date: 20-04-2014 Author: Rakesh S Software Link: http://www.teracom.in/ Version: T2-B-Gawv1.4U10Y-BI The vulnerability exists due to insufficient validation of HTTP request origin. A remote attacker can trick a logged-in administrator to visit a...
Teracom Modem T2-B-Gawv1.4U10Y-BI - Cross-Site Request Forgery
Exploit Title: Teracom Modem CSRF Vulnerability Date: 20-04-2014 Author: Rakesh S Software Link: http://www.teracom.in/ Version: T2-B-Gawv1.4U10Y-BI The vulnerability exists due to insufficient validation of HTTP request origin. A remote attacker can trick a logged-in administrator to visit a...