2573 matches found
F5 Networks BIG-IP : XSS vulnerability viewing logs from the Console section of the web management interface (SOL8599)
The remote BIG-IP device is missing a patch required by a security advisory. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from F5 Networks BIG-IP Solution SOL8599. The text description of this plugin is C F5 Networks...
F5 Networks BIG-IP : XSS vulnerability viewing logs from the web management interface (SOL8602)
The remote BIG-IP device is missing a patch required by a security advisory. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from F5 Networks BIG-IP Solution SOL8602. The text description of this plugin is C F5 Networks...
Sitecom WLM-2501 new Multiple CSRF Vulnerabilities
No description provided by source. +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Sitecom WLM-2501 new Multiple CSRF Vulnerabilities Date : 22-03-2012 Author : Ivano Binetti...
F5 BIG-IP Application Security Manager 9.4.3 'report_type' Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27462/info F5 BIG-IP Application Security Manager is prone to a cross-site scripting vulnerability because the web management interface fails to properly sanitize user-supplied input. An attacker may leverage this issue t...
Edimax AR-6004 ADSL Router Management Interface Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9374/info Edimax AR-6004 ADSL Routers are prone to cross-site scripting attacks via the web management interface of affected devices. An attacker could exploit this issue by enticing a victim user to follow a malicious li...
D-Link DSL-2740B - Multiple CSRF Vulnerabilities
No description provided by source. +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : D-Link DSL-2740B ADSL Router CSRF Vulnerability Date : 09-08-2013 Author : Ivano Binetti http://ivanobinetti.com...
D-Link DSL-2740B (ADSL Router) Authentication Bypass
No description provided by source. +------------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : D-Link DSL-2740B ADSL Router Authentication Bypass Date : 10-02-2013 Author : Ivano Binetti...
Sitecom WLM-2501 CSRF Vulnerabilities
No description provided by source. +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Sitecom WLM-2501 Change Wireless Passphrase Date : 13-03-2012 Author : Ivano Binetti http://www.ivanobinetti.com...
F5 BIG-IP 9.4.3 Web Management Interface Cross-Site Request Forgery Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27720/info F5 BIG-IP is prone to a cross-site request-forgery vulnerability. Exploiting this issue may allow a remote attacker to execute arbitrary actions on an affected device. F5 BIG-IP 9.4.3 is vulnerable; other...
F5 BIG-IP 9.4.3 - Web Management Interface Console HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28151/info F5 BIG-IP Web Management Interface is prone to a HTML-injection vulnerability because the web management interface fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...
CVE-2014-3289
Cross-site scripting XSS vulnerability in the web management interface in Cisco AsyncOS on the Email Security Appliance ESA 8.0, Web Security Appliance WSA 8.0 .5 Hot Patch 1 and earlier, and Content Security Management Appliance SMA 8.3 and earlier allows remote attackers to inject arbitrary web...
Sagem Fast 3304-V2 - Authentication Bypass (1)
Sagem Fast 3304-V2 - Authentication Bypass 1 Title : Sagem F@st 3304-V2 Authentication Bypass Vendor : http://www.sagemcom.com Severity : High Tested on : Firefox, Google Chrome, Internet Explorer Tested Router : Sagem F@st 3304-V2 3304, 3464, 3504 may also be affected Date : 2014-09-04 Author :...
Sagem Fast 3304-V2 - Authentication Bypass (1)
Title : Sagem F@st 3304-V2 Authentication Bypass Vendor : http://www.sagemcom.com Severity : High Tested on : Firefox, Google Chrome, Internet Explorer Tested Router : Sagem F@st 3304-V2 3304, 3464, 3504 may also be affected Date : 2014-09-04 Author : Yassine Aboukir Contact : [email protected]...
Zyxel P660系列路由器拒绝服务漏洞
Bugtraq ID:66570 CVE ID:CVE-2013-3588 Zyxel P660是路由器系列产品。 Zyxel P660系列路由器的Web管理接口在解析大量SYN数据包时，在实现上存在拒绝服务漏洞，这可造成设备重载，导致拒绝服务。 0 ZyXEL P660 目前没有详细解决方案： http://www.zyxel.com/index.php...
Code injection
The web management interface on Zyxel P660 devices allows remote attackers to cause a denial of service reboot via a flood of TCP SYN packets...
CVE-2013-3588
The CVE-2013-3588 entry concerns Zyxel P660 series devices where the web management interface is vulnerable to a denial of service caused by a flood of TCP SYN packets. Remote attackers can trigger a reboot, effectively taking the device offline via a network-based SYN flood. The NVD and CERT ref...
3Com Web Management Interface Default Credentials
The remote 3Com Web Management Interface that uses a set of known, default credentials. Knowing these, an attacker can gain control of the device. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid73190;...
Design/Logic Flaw
The web management interface on the Cisco RV110W firewall with firmware 1.2.0.9 and earlier, RV215W router with firmware 1.1.0.5 and earlier, and CVR100W router with firmware 1.0.1.19 and earlier does not prevent replaying of modified authentication requests, which allows remote attackers to obta...
Reflected cross-site scripting (XSS) vulnerability in Mediatrix Web Management Interface login page
Advisory ID: hag201476 Product: Mediatrix Web Management Interface Vendor: Media5 Corporation Vulnerable Versions: Mediatrix 4402 Device with Firmware Dgw 1.1.13.186 and probably prior Tested Version: Mediatrix 4402 Device with Firmware Dgw 1.1.13.186 Advisory Publication: January 23, 2014 Vendor...
CVE-2014-1612
Cross-site scripting XSS vulnerability in login.esp in the Web Management Interface in Media5 Mediatrix 4402 VoIP Gateway with firmware Dgw 1.1.13.186 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter...