TP-Link 8840T DSL router default remote management vulnerability

Overview The TP-Link 8840T DSL router's remote management feature is enabled by default. Description The TP-Link 8840T DSL router allows remote WAN internet users access to the administrator web interface of the device by default. --- Impact A remote unauthenticated attacker may be able to access...

TP-Link TL-WR740N 111130 - ping_addr HTML Injection

TP-Link TL-WR740N 111130 - pingaddr HTML Injection source: https://www.securityfocus.com/bid/52424/info TP-LINK TL-WR740N is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or script code could run in the context of the...

TP-Link TL-WR740N 111130 - 'ping_addr' HTML Injection

source: https://www.securityfocus.com/bid/52424/info TP-LINK TL-WR740N is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or script code could run in the context of the affected site, potentially allowing the attacker t...

TP-Link Cross Site Scripting

Exploit Title: Tp-Link Cross Site Scripting Date: 11.03.2012 Author: l20ot Web Browser : Mozilla Firefox Blog : http://www.twitter.com/l20ot ------------------------------------------------------ Vulnerability is on Ping tool. 1- Go to http://192.168.1.1/maintenance/toolstest.htm 2- make ping lik...

Reaver - WiFi Protected Setup (WPS)

Exploit Title: Reaver WiFi Protected Setup Exploit Google Dork: Date: 28 December 2011 Author: [email protected] Software Link: http://www.tacnetsol.com/products/ Version: All 802.11 access points implementing WiFi Protected Setup and have it enabled. Tested on: Access points from Linksys,...

kernel security, bug fix, and enhancement update

kernel 2.6.18-274.12.1.0.1.el5 - fix ia64 build error due to add-support-above-32-vcpus.patchZhenzhong Duan - x86 use dynamic vcpuinfo remap to support more than 32 vcpus Zhenzhong Duan - scsi add additional scsi medium error handling John Sobecki orabug 12904887 - x86 Fix lvt0 reset when hvm boo...

TP-Link TL-PS110U & TL-PS110P Cross-site Scripting Vulnerability

Exploit for hardware platform in category web applications GotGeek Labs http://www.gotgeek.com.br/ TP-Link TL-PS110U & TL-PS110P Cross-site Scripting Vulnerability + Description TL-PS110U: The TP-LINK TL-PS110U print server allows you to take the computer out of the loop while setting up a printi...

TP-Link TL-PS110U TL-PS110P - Cross-Site Scripting

TP-Link TL-PS110U TL-PS110P - Cross-Site Scripting GotGeek Labs http://www.gotgeek.com.br/ TP-Link TL-PS110U & TL-PS110P Cross-site Scripting Vulnerability + Description TL-PS110U: The TP-LINK TL-PS110U print server allows you to take the computer out of the loop while setting up a printing...

TP-Link TL-PS110U / TL-PS110P Cross Site Scripting

GotGeek Labs http://www.gotgeek.com.br/ TP-Link TL-PS110U & TL-PS110P Cross-site Scripting Vulnerability + Description TL-PS110U: The TP-LINK TL-PS110U print server allows you to take the computer out of the loop while setting up a printing network. All that is needed is to connect the TL-PS110U ...

TP-Link TL-PS110U / TL-PS110P - Cross-Site Scripting

GotGeek Labs http://www.gotgeek.com.br/ TP-Link TL-PS110U & TL-PS110P Cross-site Scripting Vulnerability + Description TL-PS110U: The TP-LINK TL-PS110U print server allows you to take the computer out of the loop while setting up a printing network. All that is needed is to connect the TL-PS110U ...

[DCA-2011-0001] TP-LINK TL-WR740N Multiple Vulnerabilities - Stored XSS - Web Console and Upnp server DoS

DCA-2011-0001 Discussion - DcLabs Security Research Group advises about following vulnerabilityies: Software/Hardware - TP-LINK TL-WR740N Vendor Product Description - The TL-WR740N is a combined wired/wireless network connection device integrated with internet-sharing router and 4-port switch. Th...

TP-LINK TL-WR740N wireless router vulnerabilities

Crossite scripting, DoS...

Joomla Component TP Whois <= 1.5.x XSS

Exploit for unknown platform in category web applications ====================================== Joomla Component TP Whois Example3: Example4: Example4: Example5: Malicious users may inject JavaScript, VBScript, ActiveX, HTML or Flash into a vulnerable application to fool a user in order to gathe...

Nokia S60系列手机畸形短信/彩信远程拒绝服务漏洞

BUGTRAQ ID: 33074 Nokia S60系列是运行symbian平台的智能手机。 3GPP TS 23.040标准中规定了通过短信发送邮件的方法。邮件短信的最基本形式以MT-SMS或MO-SMS开始，之后为空格，最后为消息正文。短信消息的TP协议标识符必须设置为Internet Electronic Mail（值为50/0x32）。 但上述标准没有规定手机接收到短信后如何显示。在S60 2.6之前版本，Series60设备按原样显示消息；从S60...

Nokia S60 SMS/MMS (Curse of Silence) Denial of Service Vulnerability

No description provided by source. Vulnerability Advisory ====================== Remote SMS/MMS Denial of Service - "Curse Of Silence" for Nokia S60 phones URL === https://berlin.ccc.de/tobias/cos/s60-curse-of-silence-advisory.txt Video =====...

Nokia S60 SMSMMS (Curse of Silence) - Denial of Service

Nokia S60 SMSMMS Curse of Silence - Denial of Service Vulnerability Advisory ====================== Remote SMS/MMS Denial of Service - "Curse Of Silence" for Nokia S60 phones URL === https://berlin.ccc.de/tobias/cos/s60-curse-of-silence-advisory.txt Video =====...

Livebox TP路由器远程溢出拒绝服务漏洞

BUGTRAQ ID: 28066 Livebox TP是在波兰广泛使用的宽带路由器。 Livebox TP在处理畸形用户请求时存在输入验证漏洞，远程攻击者可能利用此漏洞控制服务器。 Livebox TP中所内嵌的ADI Convergence Galaxy FTP服务器没有正确地验证用户输入参数，如果远程攻击者向路由器的FTP服务发送了特制报文的话，就可能触发缓冲区溢出，导致服务崩溃。 Neostrada Livebox TP 厂商补丁： Neostrada --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Design/Logic Flaw

Unspecified vulnerability in Hitachi TP1/NET/OSI-TP-Extended on HI-UX/WE2 before 20070213, and on HP-UX before 20070314, allows remote attackers to cause a denial of service via certain data to a port...

CVE-2007-3045

Unspecified vulnerability in Hitachi TP1/NET/OSI-TP-Extended on HI-UX/WE2 before 20070213, and on HP-UX before 20070314, allows remote attackers to cause a denial of service via certain data to a port...

CVE-2007-3045

Unspecified vulnerability in Hitachi TP1/NET/OSI-TP-Extended on HI-UX/WE2 before 20070213, and on HP-UX before 20070314, allows remote attackers to cause a denial of service via certain data to a port...