MDAP ANTs PWNAGE: dumping the admin password of the BT Home Hub

http://www.gnucitizen.org/blog/dumping-the-admin-password-of-the-bt-home-hub/ We're back with more security attacks against the BT Home Hub most popular wireless DSL router in the UK! BT added a new security feature on the latest version 1 of the BT Home Hub firmware 6.2.6.E at time of writing...

CVE-2008-1269

cp06wifimnocifr.cgi in the admin panel on the Alice Gate 2 Plus Wi-Fi router does not verify authentication credentials, which allows remote attackers to disable Wi-Fi encryption via a certain request...

Cross site request forgery (csrf)

cp06wifimnocifr.cgi in the admin panel on the Alice Gate 2 Plus Wi-Fi router does not verify authentication credentials, which allows remote attackers to disable Wi-Fi encryption via a certain request...

CVE-2008-1269

cp06wifimnocifr.cgi in the admin panel on the Alice Gate 2 Plus Wi-Fi router does not verify authentication credentials, which allows remote attackers to disable Wi-Fi encryption via a certain request...

CVE-2008-1269

The CVE-2008-1269 entry concerns the Alice Gate 2 Plus Wi‑Fi router. Affects the admin panel via cp06_wifi_m_nocifr.cgi, where authentication credentials are not verified, allowing remote attackers to disable Wi‑Fi encryption through a specific request. The available documentation states the vuln...

Alice Gate2 Plus Wi-Fi Router - Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/27374/info Alice Gate2 Plus Wi-Fi routers are prone to a cross-site request-forgery vulnerability. An attacker can exploit this issue to alter administrative configuration on affected devices. Specifically, altering the wireless encryption settings on...

Alice Gate2 Plus Wi-Fi Router - Cross-Site Request Forgery

Alice Gate2 Plus Wi-Fi Router - Cross-Site Request Forgery source: https://www.securityfocus.com/bid/27374/info Alice Gate2 Plus Wi-Fi routers are prone to a cross-site request-forgery vulnerability. An attacker can exploit this issue to alter administrative configuration on affected devices...

DEBIAN-CVE-2007-6441

The WiMAX dissector in Wireshark formerly Ethereal 0.99.6 allows remote attackers to cause a denial of service crash via unknown vectors related to "unaligned access on some platforms."...

Borland InterBase isc_attach_database() Buffer Overflow

This module exploits a stack buffer overflow in Borland InterBase by sending a specially crafted attach request. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Borland InterBase...

Borland InterBase SVC_attach() Buffer Overflow

This module exploits a stack buffer overflow in Borland InterBase by sending a specially crafted service attach request. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Borland InterBase...

Broadcom Wireless Driver - Probe Response SSID Overflow (Metasploit)

$Id: broadcomwifissid.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Intel PRO/Wireless网络连接驱动远程代码执行漏洞

Intel PRO/Wireless网络连接是Intel迅驰移动技术所集成的WLAN解决方案。 Intel 2200BG和2915ABG PRO/Wireless网络连接硬件的Microsoft Windows驱动处理某些帧的方式存在内存破坏漏洞，远程攻击者可能利用此漏洞在机器执行任意指令。 Wi-Fi站范围内的攻击者可以通过发送特制的报文来触发这个漏洞，导致以内核级权限执行任意代码。 Intel 2200BG/2915ABG http://support.intel.com/support/wireless/wlan/sb/cs-010623.htm...

CDRDAO Local Root Exploit

No description provided by source. !/bin/sh DIR=pwd echo "" echo "cdrdao local root exploit - gr doesn't protect you this time" echo "Karol Wi...

FiWin SS28S Wi-Fi phones backdoor account

Phone has debug console with telnet access and hardcoded account 1 with password 1...

[Full-disclosure] PocketPC MMS - Remote Code Injection/Execution Vulnerability and Denial-of-Service

Vulnerability Report ----------------------------- Vendor: Microsoft and ArcSoft Product: PocketPC OS and MMS Composer Versions: MMS Composer: 1.5.5.6, 2.0.0.13 possible others Platform: PocketPC tested on: WinCE 4.2 and WinCE 4.21, possible others Architecture: ARM Devices: HP iPAQ h6315, i-mate...

Senao SI-680H wirieless Wi-Fi VoIP phones unauthorized access

VxWorks debugger is available with UDP/17185...

Multiple UTstarcom F1000 wirieless Wi-Fi VoIP phones vulnerabilities

SNMP access, unauthenticated telnet TCP/21 and rlogin TCP/513 access...

Multiple Hitachi Wi-Fi VoIP phones vulnerabilities

Information leak, SNMP access, built-in hardware password, unauthenticated Web access TCP/8080 and shell access TCP/3390...

Multiple Zyxel P2000W wirieless Wi-Fi VoIP phones vulnerabilities

Information leak, external DNS servers access...

Microsoft Windows XP - Wireless Zero Configuration Service Information Disclosure

Microsoft Windows XP - Wireless Zero Configuration Service Information Disclosure source: https://www.securityfocus.com/bid/15008/info WZCSVC is affected by an information disclosure vulnerability. Reportedly, the Pairwise Master Key PMK of the Wi-Fi Protected Access WPA preshared key...