352 matches found
FreeBSD -- arc4random(9) predictable sequence vulnerability
Problem Description: When the arc4random9 random number generator is initialized, there may be inadequate entropy to meet the needs of kernel systems which rely on arc4random9; and it may take up to 5 minutes before arc4random9 is reseeded with secure entropy from the Yarrow random number...
Loving the attack of another piece of land of the WLAN-bug warning-the black bar safety net
Wireless LANWireless Local Area Network, WLANhaving mobility, simple installation, high flexibility and scalability, as traditional wired networks extending, in many special environments to give a wide range of applications. With the Wireless Data Network Solutions constantly launched,“regardless...
Actiontec MI424WR默认WEP KEY安全绕过漏洞
BUGTRAQ ID: 32271 CNCAN ID：CNCAN-2008111301 Actiontec MI424WR是一款SOHO路由器设备。 Actiontec MI424WR存在默认的WEP加密密钥，攻击者可以轻易的解密无线网络通信，获得敏感信息。并对网络进行进一步攻击。 Actiontec MI424WR 目前没有解决方案提供： http://www.actiontec.com/products/product.php?pid=41...
Sql injection
SQL injection vulnerability in kategori.asp in MunzurSoft Wep Portal W3 allows remote attackers to execute arbitrary SQL commands via the kat parameter...
CVE-2008-4573
CVE-2008-4573 describes an SQL injection in kategori.asp of MunzurSoft Wep Portal W3, exploitable via the kat parameter to execute arbitrary SQL. The issue is web-facing (attack vector: network) with a base score of 7.5 (high) per NVD, indicating partial confidentiality, integrity, and availabili...
CVE-2008-4441
Summary: CVE-2008-4441 affects Linksys WAP4400N (firmware 1.2.14) with Marvell 88W8361P‑BEM1. When in WEP mode, the Marvell wireless driver fails to parse certain malformed 802.11 frames, enabling a remote attacker to cause a denial of service (reboot or hang) by sending a malformed association r...
CVE-2008-4441
The Marvell driver for the Linksys WAP4400N Wi-Fi access point with firmware 1.2.14 on the Marvell 88W8361P-BEM1 chipset, when WEP mode is enabled, does not properly parse malformed 802.11 frames, which allows remote attackers to cause a denial of service reboot or hang-up via a malformed...
Marvell Driver Malformed Association Request Vulnerability
Title: ------ Marvell Driver Malformed Association Request Vulnerability Summary: -------- The wireless drivers in some Wi-Fi access points such as the MARVELL-based Linksys WAP4400N do not correctly parse some malformed 802.11 frames. Assigned CVE: ------------- CVE-2008-4441 Details: -------- T...
MunzurSoft Wep Portal W3 (kat) SQL Injection Vulnerability
No description provided by source. Author : LUPUS Home : www.megaturks.net / www.biyosecurity.com E-Mail : Bynoktalupus @gmail.com ---------------------------------------------------------------- Down : http://www.aspindir.com/indir.asp?ID=5636 ---------------------------------- Dork : "MunzurSof...
MunzurSoft Wep Portal W3 - kat SQL Injection
MunzurSoft Wep Portal W3 - kat SQL Injection Author : LUPUS Home : www.megaturks.net / www.biyosecurity.com E-Mail : Bynoktalupus @gmail.com ---------------------------------------------------------------- Down : http://www.aspindir.com/indir.asp?ID=5636 ---------------------------------- Dork :...
munzursoft-sql.txt
Author : LUPUS Home : www.megaturks.net / www.biyosecurity.com E-Mail : Bynoktalupus @gmail.com ---------------------------------------------------------------- Down : http://www.aspindir.com/indir.asp?ID=5636 ---------------------------------- Dork : "MunzurSoft Wep Portal W3"...
MunzurSoft Wep Portal W3 - 'kat' SQL Injection
Author : LUPUS Home : www.megaturks.net / www.biyosecurity.com E-Mail : Bynoktalupus @gmail.com ---------------------------------------------------------------- Down : http://www.aspindir.com/indir.asp?ID=5636 ---------------------------------- Dork : "MunzurSoft Wep Portal W3"...
WeFi日志文件本地信息泄露漏洞
BUGTRAQ ID: 30088 WeFi是一种搜索无线网络WiFi的软件，可以监测到附近的无线信号，并可以共享开放的无线网络。 WeFi没有加密密钥，且客户端没有正确地储存日志文件备份，本地攻击者可以获得WEP、WPA和WPA2接入点的未加密密钥。保存密钥的日志文件如下： C:\Program Files\WeFi\LogFiles\ClientWeFiLog.dat C:\Program Files\WeFi\LogFiles\ClientWeFiLog.bak C:\Program Files\WeFi\Users\[email protected] 以下是备份文件代码的示例：...
Local vulnerability in WeFi Client v3.2.1.4.1(Update)
================================================== INFO ================================================== The wireless client, WeFi v3.2.1.4.1 is susceptible to local vulnerabilities due to improper coding. Earlier versions may also be affected. ==================================================...
MDAP ANTs PWNAGE: dumping the admin password of the BT Home Hub
http://www.gnucitizen.org/blog/dumping-the-admin-password-of-the-bt-home-hub/ We're back with more security attacks against the BT Home Hub most popular wireless DSL router in the UK! BT added a new security feature on the latest version 1 of the BT Home Hub firmware 6.2.6.E at time of writing...
Thomson SpeedTouch和BT Home Hub路由器默认WEP/WPA密钥算法漏洞
BUGTRAQ ID: 28893 BT Home Hub和Speedtouch都是家用的无线Internet路由器。 BT Home Hub和Speedtouch路由器所使用的默认WEP/WPA密钥算法是可预测的，远程攻击者可以基于一些公开信息（如MAC地址或SSID）预测出密钥，这样就可以完全入侵路由器。 对于Speedtouch路由器路由器： S/N：CP0615JT109 53 删除CC和PP值：CP0615109 将XXX值转换为16进制：CP0615313039 通过SHA-1处理：742da831d2b657fa53d347301ec610e1ebf8a3d0...
Authentication flaw
ZyXEL Prestige routers, including P-660, P-661, and P-662 models with firmware 3.40AGD.2 through 3.40AHQ.3, allow remote authenticated users to obtain authentication data by making direct HTTP requests and then reading the HTML source, as demonstrated by a request for 1 RemMagSNMP.html, which...
CVE-2008-1528
ZyXEL Prestige routers, including P-660, P-661, and P-662 models with firmware 3.40AGD.2 through 3.40AHQ.3, allow remote authenticated users to obtain authentication data by making direct HTTP requests and then reading the HTML source, as demonstrated by a request for 1 RemMagSNMP.html, which...
BT Home Flub: Pwnin the BT Home Hub
http://www.gnucitizen.org/blog/bt-home-flub-pwnin-the-bt-home-hub The BT Home Hub, which is probably the most popular home router in the UK, is susceptible to critical vulnerabilities. BT's plan is to sneak one of this boxes into every UK home. Not only does the BT Home Hub support broadband but...
