Authentication flaw

The D-Link DIR-816 A2 1.11 router only checks the random token when authorizing a goform request. An attacker can get this token from dirlogin.asp and use an API URL /goform/LoadDefaultSettings to reset the router without authentication...

CVE-2017-2877

A missing error check exists in the Multi-Camera interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted request on port 10001 could allow an attacker to reset the user accounts to factory defaults, without authentication...

CVE-2018-13862

Touchpad / Trivum WebTouch Setup V9 V2.53 build 13163 of Apr 6 2018 09:10:14 FW 303 allow unauthorized remote attackers to reset the authentication via the "/xml/system/setAttribute.xml" URL, using the GET request "?id=0&attr=protectAccess&newValue=0" a successful attack will allow attackers to...

Arbitrary User Password Reset Vulnerability in Bunker Busters

Bunker Fortress is the industry's first software form of the Fortress, providing a centralized authentication, centralized access authorization, centralized access management, centralized operation audit and a single point of simplified operation and management required for remote operations and...

Seagate BlackArmor NAS device static adminstrator Password Reset vulnerability

Seagate BlackArmor NAS 路由器可以在没有任何授权下复位管理员密码，并且可以在新手引导下重置为任意密码 可以直接访问 http://目标IP地址/d41d8cd98f00b204e9800998ecf8427e.php 这个文件，然后就可以重置管理员密码。...

Linux Kernel SysKonnect FDDI驱动非授权重置统计漏洞

CVECAN ID: CVE-2009-0675 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的drivers/net/skfp/skfddi.c文件中的skfpioctl函数中存在错误的逻辑，本地用户在缺少CAPNETADMIN权限而不是拥有这个权限的时候才可以执行SKFPCLRSTATS请求，因此无需授权便可以重置驱动统计。 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Router ZyXEL Prestige 650 HW http remote admin.

Hi, I found a bug in ZyXEL Prestige 650 HW Routers with Http Remote Administration active. Exploting this bug, the attacker can reset the router configurantion. The "/rpFWUpload.html" is not password protected. To exploit this bug you only need write that: http://Router ip/rpFWUpload.html and cli...

Multiple Vendor - TCP Sequence Number Approximation (3)

Multiple Vendor - TCP Sequence Number Approximation 3 source: https://www.securityfocus.com/bid/10183/info A vulnerability in TCP implementations may permit unauthorized remote users to reset TCP sessions. This issue affects products released by multiple vendors. Exploiting this issue may permit...