G-WAN 2.10.6 - Buffer Overflow (Denial of Service) (PoC)

G-WAN 2.10.6 - Buffer Overflow Denial of Service PoC source: https://www.securityfocus.com/bid/50108/info G-WAN is prone to a buffer-overflow vulnerability and a denial-of-service vulnerability. Remote attackers can exploit these issues to execute arbitrary code in the context of the application ...

G-WAN 2.10.6 - Buffer Overflow (Denial of Service) (PoC)

source: https://www.securityfocus.com/bid/50108/info G-WAN is prone to a buffer-overflow vulnerability and a denial-of-service vulnerability. Remote attackers can exploit these issues to execute arbitrary code in the context of the application or crash the affected application. G-WAN 2.10.6 is...

Multiple CSRF and XSS vulnerabilities in ADSL modem Callisto 821+

Hello 3APA3A! I want to warn you about new multiple security vulnerabilities in ADSL modem Callisto 821+ SI2000 Callisto821+ Router. These are Cross-Site Request Forgery and Cross-Site Scripting vulnerabilities. In April I've already drew attention of Ukrtelecom's representative and this modem wa...

FlashFXP v3.6.0 - Buffer Overflow Vulnerability

Document Title: =============== FlashFXP v3.6.0 - Buffer Overflow Vulnerability Release Date: ============= 2011-07-20 Vulnerability Laboratory ID VL-ID: ==================================== 121 Product & Service Introduction: =============================== FlashFXP is a FTP File Transfer Protoc...

Manageengine Opmanager v8.8 - SQL Injection Vulnerability

Document Title: =============== Manageengine Opmanager v8.8 - SQL Injection Vulnerability Release Date: ============= 2011-07-19 Vulnerability Laboratory ID VL-ID: ==================================== 200 Product & Service Introduction: =============================== Network performance...

Manageengine Opmanager v8.8 - SQL Injection Vulnerability

Document Title: =============== Manageengine Opmanager v8.8 - SQL Injection Vulnerability Release Date: ============= 2011-07-19 Vulnerability Laboratory ID VL-ID: ==================================== 200 Product & Service Introduction: =============================== Network performance...

Microsoft Windows BranchCache Insecure Library Loading (MS10-095; CVE-2010-3966)

BranchCache is a wide area network WAN bandwidth optimization technology that is included in some editions of the Windows Server 2008 R2 and Windows 7 operating systems. To optimize WAN bandwidth, BranchCache copies content from your main office content servers and caches the content at branch...

nat-pmp-info NSE Script

Gets the routers WAN IP using the NAT Port Mapping Protocol NAT-PMP. The NAT-PMP protocol is supported by a broad range of routers including: Apple AirPort Express Apple AirPort Extreme Apple Time Capsule DD-WRT OpenWrt v8.09 or higher, with MiniUPnP daemon pfSense v2.0 Tarifa firmware Linksys...

Harris Stratex StarMAX 2100 WIMAX Subscriber Station - Running Configuration Cross-Site Request Forgery

Harris Stratex StarMAX 2100 WIMAX Subscriber Station - Running Configuration Cross-Site Request Forgery I found CSRF vulnerability in Harris Stratex WIMAX 2100 subscriber station.Using this code i am able to view the current configuration of the subscriber station without authentication from both...

Harris Stratex StarMAX 2100 WIMAX Subscriber Station - Running Configuration Cross-Site Request Forgery

I found CSRF vulnerability in Harris Stratex WIMAX 2100 subscriber station.Using this code i am able to view the current configuration of the subscriber station without authentication from both LAN & WAN Software Link:http://securityvulns.com/Wdocument736.html Version: 3.0.4.1.7.C Tested on: Any ...

Harris Stratex StarMAX subscriber station running config CSRF exploit

===================================================================== Harris Stratex StarMAX subscriber station running config CSRF exploit ===================================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' /' / ...

Multiple Axesstel MV 410R wireless router security vulnerabilities

Crossite scripting, devica access from WAN, default account...

Comtrend HG536+ Privilege Escalation

Comtrend HG536+ vulnerabilities Vendor url:www.comtrend.com Advisore Url:http://lostmon.blogspot.com/2009/04/ comtrend-hg536-vulnerabilities.html Vendor notify: NO Description By vendor The HG536+ is an 802.11g 54Mbps wireless and wired Local Area Network WLAN ADSL router. Four 10/100 Base-T...

Mandriva Linux Security Advisory : kernel (MDVSA-2008:223)

Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel : Buffer overflow in format descriptor parsing in the uvcparseformat function in drivers/media/video/uvc/uvcdriver.c in uvcvideo in the video4linux V4L implementation in the Linux kernel before 2.6.26.1 has unknown impact...

Ubuntu 6.06 LTS / 7.10 / 8.04 LTS : linux, linux-source-2.6.15/22 vulnerabilities (USN-659-1)

It was discovered that the direct-IO subsystem did not correctly validate certain structures. A local attacker could exploit this to cause a system crash, leading to a denial of service. CVE-2007-6716 It was discovered that the disabling of the ZEROPAGE optimization could lead to large memory...

Ubuntu Update for linux, linux-source-2.6.15/22 vulnerabilities USN-659-1

Ubuntu Update for Linux kernel vulnerabilities USN-659-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6591.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for linux, linux-source-2.6.15/22 vulnerabilities USN-659-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks...

Ubuntu: Security Advisory (USN-659-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Internet Gateway Device WAN Interface UPnP Access

Nessus was able to add 'port mappings' to the remote IGD router by sending a SOAP request to its external interface. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid35710; scriptversion"$Revision: 1.8 $"; scriptcvsdate"$Date: 2016/10/13 15:15:41 $";...

A-Link WL54AP3 and WL54AP2 CSRF+XSS vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Louhi Networks Information Security Research Security Advisory Advisory: A-Link WL54AP3 and WL54AP2 CSRF+XSS vulnerability Release Date: 2008/10/31 Last Modified: 2008/10/28 Authors: Jussi Vuokko, CISSP [email protected] Henri Lindberg...

A-Link WL54AP3 / WL54AP2 - Cross-Site Request Forgery / Cross-Site Scripting

Louhi Networks Information Security Research Security Advisory Advisory: A-Link WL54AP3 and WL54AP2 CSRF+XSS vulnerability Release Date: 2008/10/31 Last Modified: 2008/10/28 Authors: Jussi Vuokko, CISSP [email protected] Henri Lindberg [email protected] Device: A-Link WL54AP3 and WL54AP...