CVE-2012-3887

AirDroid before 1.0.7 beta uses a cleartext base64 format for data transfer that is documented as an "Encrypted Transmission" feature, which allows remote attackers to obtain sensitive information by sniffing the local wireless network, as demonstrated by the SMS message content sent to the...

Code injection

AirDroid 1.0.4 beta uses the MD5 algorithm for values in the checklogin key parameter and 7bb cookie, which makes it easier for remote attackers to obtain cleartext data by sniffing the local wireless network and then conducting a 1 brute-force attack or 2 rainbow-table attack...

Information disclosure

AirDroid before 1.0.7 beta uses a cleartext base64 format for data transfer that is documented as an "Encrypted Transmission" feature, which allows remote attackers to obtain sensitive information by sniffing the local wireless network, as demonstrated by the SMS message content sent to the...

Authentication flaw

AirDroid 1.0.4 beta implements authentication through direct transmission of a password hash over HTTP, which makes it easier for remote attackers to obtain access by sniffing the local wireless network and then replaying the authentication data...

CVE-2012-2736

In NetworkManager 0.9.2.0, when a new wireless network was created with WPA/WPA2 security in AdHoc mode, it created an open/insecure network...

[SECURITY] Fedora 15 Update: wicd-1.7.0-12.fc15

Wicd is designed to give the user as much control over behavior of network connections as possible. Every network, both wired and wireless, has its own profile with its own configuration options and connection behavior. Wicd will try to automatically connect only to networks the user specifies it...

Mobile Based Wireless Network MiTM Attack Illustration

Mobile Based Wireless Network MiTM Attack Illustration Bilal Bokhari from zer0byte.com Illustrated perfect example of Mobile Based Wireless Network MiTM Attack on his blog. Bilal want to share this article with our Readers at THN, Have a look : If we look at the history of computer development, t...

SonicWall NSA 4500 Cross Site Scripting / Session Hijacking

While pentesting a a WIFI network on a customer, we found some vulnerabilities in the SonicWall NSA 4500. You can find details here: http://www.pentest.es/vulnssonicpoint.txt -------------------------------------------------- Title: ====== SonicWall products with incompatible MAC spoofing...

CVE-2011-2176

GNOME NetworkManager before 0.8.6 does not properly enforce the authadmin element in PolicyKit, which allows local users to bypass intended wireless network sharing restrictions via unspecified vectors...

CVE-2011-2176

GNOME NetworkManager before 0.8.6 does not properly enforce the authadmin element in PolicyKit, which allows local users to bypass intended wireless network sharing restrictions via unspecified vectors...

CVE-2011-2176

CVE-2011-2176 affects GNOME NetworkManager prior to 0.8.6 where PolicyKit auth_admin is not properly enforced, allowing local users to bypass wireless network sharing restrictions. The MiracleLinux Nessus notes CVE-2011-2176 as a remediation item in NetworkManager 0.8.x, and other advisories cite...

CVE-2011-2176

GNOME NetworkManager before 0.8.6 does not properly enforce the authadmin element in PolicyKit, which allows local users to bypass intended wireless network sharing restrictions via unspecified vectors...

CVE-2011-2176

GNOME NetworkManager before 0.8.6 does not properly enforce the authadmin element in PolicyKit, which allows local users to bypass intended wireless network sharing restrictions via unspecified vectors...

CVE-2011-0196

AirPort in Apple Mac OS X 10.5.8 allows remote attackers to cause a denial of service out-of-bounds read and reboot via Wi-Fi frames on the local wireless network...

CVE-2011-0196

AirPort in Apple Mac OS X 10.5.8 allows remote attackers to cause a denial of service out-of-bounds read and reboot via Wi-Fi frames on the local wireless network...

ClubHack: CHMag Issue 17th, June 2011 Download

ClubHack: CHMag Issue 17th, June 2011 Download Contents of this Issue:- 1. Tech Gyan - Pentesting your own Wireless Network 2. Tool Gyan - Wi-Fi tools 3. Mom's Guide - Wireless Security - Best Practices 4. Legal Gyan - Copyrights and cyber space 5. Matriux Vibhag - Forensics with Matriux Part - 2...

ClubHack: CHMag Issue 17th, June 2011 Download

ClubHack: CHMag Issue 17th, June 2011 Download Contents of this Issue:- 1. Tech Gyan - Pentesting your own Wireless Network 2. Tool Gyan - Wi-Fi tools 3. Mom's Guide - Wireless Security - Best Practices 4. Legal Gyan - Copyrights and cyber space 5. Matriux Vibhag - Forensics with Matriux Part - 2...

[security bulletin] HPSBPI02656 SSRT090262 rev.1 - Certain HP Photosmart Printers, Remote Unauthorized Access, Cross Site Scripting (XSS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02267197 Version: 1 HPSBPI02656 SSRT090262 rev.1 - Certain HP Photosmart Printers, Remote Unauthorized Access, Cross Site Scripting XSS NOTICE: The information in this Security Bulletin should be...

Linksys WRT54G - read router password from file placed on FTP

Environment: Linksys WRT54G - Firmware Version: v7.00.1 Default settings of Linksys WRT54G allows to get FTP without password: rafal@localhost $ lftp 192.168.1.1 lftp 192.168.1.1: dir size date time name -------- ------ ------ -------- 956756 Jan-01-2003 02:13:12 ap61.sys 224664 Jan-01-2003...

Linksys WRT54G Password Disclosure

Environment: Linksys WRT54G - Firmware Version: v7.00.1 Default settings of Linksys WRT54G allows to get FTP without password: rafal@localhost $ lftp 192.168.1.1 lftp 192.168.1.1: dir size date time name -------- ------ ------ -------- 956756 Jan-01-2003 02:13:12 ap61.sys 224664 Jan-01-2003...