3993 matches found
CVE-2014-7157
Cross-site scripting XSS vulnerability in Exinda WAN Optimization Suite 7.0.0 2160 allows remote attackers to inject arbitrary web script or HTML via the tabsel parameter to admin/launch...
CVE-2014-7158
Cross-site request forgery CSRF vulnerability in Exinda WAN Optimization Suite 7.0.0 2160 allows remote attackers to hijack the authentication of administrators for requests that change the admin password via a request to admin/launch...
Cross site scripting
Cross-site scripting XSS vulnerability in Exinda WAN Optimization Suite 7.0.0 2160 allows remote attackers to inject arbitrary web script or HTML via the tabsel parameter to admin/launch...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in Exinda WAN Optimization Suite 7.0.0 2160 allows remote attackers to hijack the authentication of administrators for requests that change the admin password via a request to admin/launch...
CVE-2014-7158
Cross-site request forgery CSRF vulnerability in Exinda WAN Optimization Suite 7.0.0 2160 allows remote attackers to hijack the authentication of administrators for requests that change the admin password via a request to admin/launch...
CVE-2014-7157
Cross-site scripting XSS vulnerability in Exinda WAN Optimization Suite 7.0.0 2160 allows remote attackers to inject arbitrary web script or HTML via the tabsel parameter to admin/launch...
CVE-2014-7158
The CVE-2014-7158 entry concerns Exinda WAN Optimization Suite 7.0.0 (2160) and is a Cross-site request forgery (CSRF) vulnerability that could allow remote attackers to hijack an administrator’s session to perform actions such as changing the admin password via a request to /admin/launch. Public...
CVE-2014-7157
The CVE-2014-7157 entry concerns Exinda WAN Optimization Suite 7.0.0 (2160) with a Cross-site scripting (XSS) vulnerability exposed via the tabsel parameter to /admin/launch. The affected component is the web interface; the root cause is lack of input validation for the tabsel parameter, enabling...
Exinda WAN Optimization Suite 7.0.0 CSRF / XSS Vulnerabilities
Exinda WAN Optimization Suite version 7.0.0 2160 suffers from cross site request forgery and cross site scripting vulnerabilities. I. VULNERABILITY ------------------------- XSS Reflected vulnerabilities and CSRF in Exinda WAN Optimization Suite II. BACKGROUND ------------------------- WAN...
Exinda WAN Optimization Suite 7.0.0 CSRF / XSS
I. VULNERABILITY ------------------------- XSS Reflected vulnerabilities and CSRF in Exinda WAN Optimization Suite II. BACKGROUND ------------------------- WAN Optimization Suite integrates enterprise-caliber bandwidth acceleration and optimization with best-in-class application network visibilit...
Aztech DSL5018EN / DSL705E / DSL705EU DoS / Broken Session Management
PRODUCT DESCRIPTION The Aztech ADSL family of modems/routes are shipped to residential and SOHO users that desires speed from 150-300mbps rate. This modem/router also supports IEEE802.11b/g/n as a Wireless LAN Access point. The vulnerable model numbers are: DSL5018EN 1T1R Shipped with Globe Telec...
TP-Link TL-WR340G / TL-WR340GD - Multiple Vulnerabilities
Title: TP-LINK Model No. TL-WR340G/TL-WR340GD - Multiple Vulnerabilities Date: 01.07.14 Vendor: TP-LINK Affected versions: TL-WR340G/TL-WR340GD Tested on: Firmware Version - 4.3.7 Build 090901 Rel.61899n, Hardware Version - WR340G v5 081520C2 at Linux Contact: smash at devilteam.pl Persistent Cro...
Harris Stratex StarMAX 2100 WIMAX Subscriber Station Running Config CSRF Exploit
No description provided by source. I found CSRF vulnerability in Harris Stratex WIMAX 2100 subscriber station.Using this code i am able to view the current configuration of the subscriber station without authentication from both LAN & WAN Software Link:http://securityvulns.com/Wdocument736.html...
BigPond 3G21WB Multiple Vulnerabilities
No description provided by source. Hard-coded credentials and command-injection vulnerabilities on BigPond 3G21WB ============================================================================== ADVISORY INFORMATION Title: Hard-coded credentials and command-injection vulnerabilities on BigPond 3G21...
Netgear FM114P ProSafe Wireless Router UPnP Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7267/info The Netgear FM114P ProSafe Wireless Router is vulnerable to information disclosure. If Remote Access and Universal Plug and Play are both enabled on the WAN interface, a UPnP SOAP request can retrieve the userna...
LG LR3100p 1.30 Series Router IP Packet Flags Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5550/info The LR series WAN routers are hardware and firmware solutions manufactured and distributed by LG Electronics. It has been reported that scanning some LG routers using various IP flags can cause the router to...
WAN Emulator 2.3 - Command Execution
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
WAN Accelerator Quick Reference
Purpose This article provides links to documentation regarding Veeam Backup & Replication WAN Acceleration. User Guide Documentation How WAN Acceleration Works WAN Accelerator System Requirements WAN Acceleration Section WAN Accelerator Sizing Adding WAN Accelerators Best Practices Documentation...
Openswan IKEv2负载远程拒绝服务漏洞
BUGTRAQ ID: 65155 CVECAN ID: CVE-2013-6466 Openswan是一款Linux系统下的IPSEC实现，基于FreeS/WAN项目。 Openswan 2.6.39及之前版本在实现上存在远程拒绝服务漏洞，攻击者通过畸形的IKEv2数据包，利用此漏洞可造成应用重启，导致拒绝服务。 0 Openswan Openswan = 2.6.39 厂商补丁： Openswan -------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.openswan.org/...
Release Information for Veeam Backup & Replication 7 Patch 3
More Recent Version Available Please find the latest version of Veeam Backup & Replication here: Veeam Downloads - Latest Version Challenge Veeam Backup & Replication Patch 3 Release Notes Cause Please confirm you are running version 7.0.0.690, 7.0.0.715, 7.0.0.764, 7.0.0.771 or 7.0.0.833 prior t...