Microsoft Windows Phone PEAP-MS-CHAPv2身份验证协议安全漏洞

BUGTRAQ ID: 61592 Microsoft Windows Phone是微软开发的系列移动设备操作系统。 Windows Phone 8、Windows Phone 7.8用于WPA2无线身份验证的PEAP-MS-CHAPv2中存在安全漏洞，攻击者可利用此漏洞获取目标设备的敏感信息。要利用此漏洞，攻击者控制的系统需要充当已知的Wi-Fi访问点，使目标设备自动与该访问点进行身份验证，攻击者然后可以截获受害者的加密域证书，再利用PEAP-MS-CHAPv2协议内的漏洞获取网络资源。 0 Microsoft Windows Phone 8 Microsoft Windows Pho...

Aruba Mobility Controller Shared Default Certificate

Aruba Mobility Controller Shared Default Certificate Product: Aruba Mobility Controller http://www.arubanetworks.com/products/mobilitycontrollers.php Aruba mobility controllers use X.509 certificates to protect access to the web management interface and to provide secure wireless authentication,...

2WIRE Routers - Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/27246/info Multiple 2Wire routers are prone to a cross-site request-forgery vulnerability. Exploiting this issue may allow a remote attacker to execute arbitrary actions on an affected device. Set a password NUEVOPASS:...

2wire-csrf.txt

Cross Site Request Forgery in 2wire routers Vulnerable Routers: 1701HG, 2071 Gateway Software: v3.17.5, 5.29.51 Password Not Set default Greetz a la Comunidad Underground de México, y a los que me ayudaron a probarlo: Preth00nker, nitr0us, ... [email protected] I. Background ------------- This is the...