5094 matches found
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities on the TP-LINK WR1043N router with firmware TL-WR1043NDV1120405 allow remote attackers to hijack the authentication of administrators for requests that 1 enable FTP access aka "FTP directory traversal" to /tmp via the shareEntire parameter ...
CVE-2014-7157
Cross-site scripting XSS vulnerability in Exinda WAN Optimization Suite 7.0.0 2160 allows remote attackers to inject arbitrary web script or HTML via the tabsel parameter to admin/launch...
CVE-2014-7158
Cross-site request forgery CSRF vulnerability in Exinda WAN Optimization Suite 7.0.0 2160 allows remote attackers to hijack the authentication of administrators for requests that change the admin password via a request to admin/launch...
Cross site scripting
Cross-site scripting XSS vulnerability in Exinda WAN Optimization Suite 7.0.0 2160 allows remote attackers to inject arbitrary web script or HTML via the tabsel parameter to admin/launch...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in Exinda WAN Optimization Suite 7.0.0 2160 allows remote attackers to hijack the authentication of administrators for requests that change the admin password via a request to admin/launch...
CVE-2014-7157
Cross-site scripting XSS vulnerability in Exinda WAN Optimization Suite 7.0.0 2160 allows remote attackers to inject arbitrary web script or HTML via the tabsel parameter to admin/launch...
CVE-2014-7157
The CVE-2014-7157 entry concerns Exinda WAN Optimization Suite 7.0.0 (2160) with a Cross-site scripting (XSS) vulnerability exposed via the tabsel parameter to /admin/launch. The affected component is the web interface; the root cause is lack of input validation for the tabsel parameter, enabling...
CVE-2014-7158
The CVE-2014-7158 entry concerns Exinda WAN Optimization Suite 7.0.0 (2160) and is a Cross-site request forgery (CSRF) vulnerability that could allow remote attackers to hijack an administrator’s session to perform actions such as changing the admin password via a request to /admin/launch. Public...
CVE-2014-7158
Cross-site request forgery CSRF vulnerability in Exinda WAN Optimization Suite 7.0.0 2160 allows remote attackers to hijack the authentication of administrators for requests that change the admin password via a request to admin/launch...
CVE-2014-7158: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in Exinda WAN Optimization Suite 7.0.0 2160 allows remote attackers to hijack the authentication of administrators for requests that change the admin password via a request to admin/launch...
CVE-2014-7157: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Exinda WAN Optimization Suite 7.0.0 2160 allows remote attackers to inject arbitrary web script or HTML via the tabsel parameter to admin/launch...
PT-2014-7813
Name of the Vulnerable Software and Affected Versions Exinda WAN Optimization Suite version 7.0.0 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of administrators for requests that change the admin password via a request to "admin/launch"...
PT-2014-7812
Name of the Vulnerable Software and Affected Versions Exinda WAN Optimization Suite version 7.0.0 2160 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the tabsel parameter to the "admin/launch" API endpoint. Recommendations For Exind...
Exinda WAN Optimization Suite 7.0.0 CSRF / XSS Vulnerabilities
Exinda WAN Optimization Suite version 7.0.0 2160 suffers from cross site request forgery and cross site scripting vulnerabilities. I. VULNERABILITY ------------------------- XSS Reflected vulnerabilities and CSRF in Exinda WAN Optimization Suite II. BACKGROUND ------------------------- WAN...
Exinda WAN Optimization Suite 7.0.0 CSRF / XSS
I. VULNERABILITY ------------------------- XSS Reflected vulnerabilities and CSRF in Exinda WAN Optimization Suite II. BACKGROUND ------------------------- WAN Optimization Suite integrates enterprise-caliber bandwidth acceleration and optimization with best-in-class application network visibilit...
Aztech DSL5018EN / DSL705E / DSL705EU DoS / Broken Session Management
PRODUCT DESCRIPTION The Aztech ADSL family of modems/routes are shipped to residential and SOHO users that desires speed from 150-300mbps rate. This modem/router also supports IEEE802.11b/g/n as a Wireless LAN Access point. The vulnerable model numbers are: DSL5018EN 1T1R Shipped with Globe Telec...
TP-Link TL-WR340G / TL-WR340GD - Multiple Vulnerabilities
Title: TP-LINK Model No. TL-WR340G/TL-WR340GD - Multiple Vulnerabilities Date: 01.07.14 Vendor: TP-LINK Affected versions: TL-WR340G/TL-WR340GD Tested on: Firmware Version - 4.3.7 Build 090901 Rel.61899n, Hardware Version - WR340G v5 081520C2 at Linux Contact: smash at devilteam.pl Persistent Cro...
WAN Emulator 2.3 - Command Execution
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
LG LR3100p 1.30 Series Router IP Packet Flags Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5550/info The LR series WAN routers are hardware and firmware solutions manufactured and distributed by LG Electronics. It has been reported that scanning some LG routers using various IP flags can cause the router to...
Harris Stratex StarMAX 2100 WIMAX Subscriber Station Running Config CSRF Exploit
No description provided by source. I found CSRF vulnerability in Harris Stratex WIMAX 2100 subscriber station.Using this code i am able to view the current configuration of the subscriber station without authentication from both LAN & WAN Software Link:http://securityvulns.com/Wdocument736.html...