887 matches found
Zarp - Local Network Attack Framework
Zarp is a network attack tool centered around the exploitation of local networks. This does not include system exploitation, but rather abusing networking protocols and stacks to take over, infiltrate, and knock out. Sessions can be managed to quickly poison and sniff multiple systems at once,...
Proxim Tsunami MP.11 2411 Wireless Access Point 'system.sysName.0' SNMP HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/31666/info The Proxim Tsunami MP.11 2411 Wireless Access Point is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input data. Attacker-supplied HTML and script code would r...
WIDZ 1.0/1.5 - Remote Root Compromise Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8479/info WIDZ does not validate untrusted input when generating alerts. Alerts pass the essid of an unknown wireless access point through a system call. By setting the essid of an unauthorized access point to include...
WiFi Camera Roll 1.2 iOS - Multiple Vulnerabilities
WiFi Camera Roll 1.2 iOS - Multiple Vulnerabilities Document Title: =============== WiFi Camera Roll v1.2 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1192 Release Date: ============= 2014-02-08 Vulnerability...
Windows 8 Phone Authentication Protocol Weakness
Microsoft issued a security advisory on Sunday, warning of a potential data leakage issue for Windows Phone users connecting to Wi-Fi hotspots. Hackers love to set traps for wireless users promising free Wi-Fi in airports, restaurants and other public areas. Once a mobile device connects to the...
File via Wifi v1.3.0 iOS - Multiple Web Vulnerabilities
Document Title: =============== File via Wifi v1.3.0 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=990 Release Date: ============= 2013-06-27 Vulnerability Laboratory ID VL-ID: ==================================== 990...
CVE-2013-2290
Cross-site scripting XSS vulnerability in the dashboard of the ArubaOS Administration WebUI in Aruba Networks ArubaOS 6.2.x before 6.2.0.3, 6.1.3.x before 6.1.3.7, 6.1.x-FIPS before 6.1.4.3-FIPS, and 6.1.x-AirGroup before 6.1.3.6-AirGroup, as used by Mobility Controller, allows remote wireless...
CVE-2013-2290
CVE-2013-2290 is a Cross-site Scripting (XSS) vulnerability in the ArubaOS Administration WebUI dashboard used by Mobility Controller. The issue allows an attacker to inject arbitrary web script or HTML via a crafted SSID, affecting ArubaOS 6.2.x before 6.2.0.3; 6.1.3.x before 6.1.3.7; 6.1.x-FIPS...
CVE-2013-1131
Cisco Small Business Wireless Access Points WAP200, WAP2000, WAP200E, and WET200 allow remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted SSID that is not properly handled during a site survey, aka Bug IDs CSCua86182, CSCua91196, CSCud36155, and...
Code injection
Cisco Small Business Wireless Access Points WAP200, WAP2000, WAP200E, and WET200 allow remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted SSID that is not properly handled during a site survey, aka Bug IDs CSCua86182, CSCua91196, CSCud36155, and...
CVE-2013-1131
Cisco Small Business Wireless Access Points WAP200, WAP2000, WAP200E, and WET200 are affected by CVE-2013-1131 due to improper SSID validation during site surveys. An unauthenticated attacker on an adjacent network can craft an SSID to trigger a DoS condition and may, per Cisco, potentially overw...
Cisco Small Business Wireless Access Points SSID Validation Vulnerability
Cisco Small Business Wireless Access Points contain a vulnerability that could allow an unauthenticated, adjacent attacker cause a denial of service DoS condition. The vulnerability is due to improper validation of the Service Set Identifier SSID when the affected product is performing a "site...
Sitecom WLM-2501 - Multiple Cross-Site Request Forgery Vulnerabilities
+--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Sitecom WLM-2501 new Multiple CSRF Vulnerabilities Date : 22-03-2012 Author : Ivano Binetti http://www.ivanobinetti.com Vendor site :...
The Social-Engineer Toolkit v2.0 Released
The Social-Engineer Toolkit v2.0 Released The Social Engineering Toolkit SET is a python-driven suite of custom tools which solely focuses on attacking the human element of penetration testing. It's main purpose is to augment and simulate social-engineering attacks and allow the tester to...
Netgear WNDAP350 Wireless Access Point - Multiple Information Disclosure Vulnerabilities
source: https://www.securityfocus.com/bid/48085/info NetGear WNDAP350 wireless access point is prone to multiple remote information-disclosure issues because it fails to restrict access to sensitive information. A remote attacker can exploit these issues to obtain sensitive information that can a...
CVE-2011-1674
The NetGear ProSafe WNAP210 with firmware 2.0.12 allows remote attackers to bypass authentication and obtain access to the configuration page by visiting recreate.php and then visiting index.php...
Radius Manager 3.8.0 - Multiple Cross-Site Scripting Vulnerabilities
Radius Manager 3.8.0 - Multiple Cross-Site Scripting Vulnerabilities Check Point Software Technologies - Vulnerability Discovery Team VDT http://www.checkpoint.com/defense/ Radius Manager Multiple Cross Site Scripting Issues CVE-2010-4275 INTRODUCTION Radius Manager is a centralized way for...
D-Link DAP-1160 Wireless Access Point - DCC Protocol Security Bypass
source: https://www.securityfocus.com/bid/41187/info The D-Link DAP-1160 wireless access point WAP is prone to a security-bypass vulnerability. Remote attackers can exploit this issue to bypass security restrictions, access certain administrative functions, alter configuration, or trigger a...
IS-2010-003 - Linksys WAP54Gv3 debug.cgi Cross-Site Scripting
Security Advisory IS-2010-003 - Linksys WAP54Gv3 debug.cgi Cross-Site Scripting Advisory Information -------------------- Published dd/mm/yy: 23/06/2010 Updated dd/mm/yy: 23/06/2010 Manufacturer: Linksys Model: WAP54G Hardware version: v3.x Firmware version: ver.3.05.03 Europe ver.3.04.03 US...