CVE-2011-0172

AirPort in Apple Mac OS X 10.6 before 10.6.7 allows remote attackers to cause a denial of service divide-by-zero error and reboot via Wi-Fi frames on the local wireless network, a different vulnerability than CVE-2011-0162...

Design/Logic Flaw

AirPort in Apple Mac OS X 10.6 before 10.6.7 allows remote attackers to cause a denial of service divide-by-zero error and reboot via Wi-Fi frames on the local wireless network, a different vulnerability than CVE-2011-0162...

Out-of-bounds

Wi-Fi in Apple iOS before 4.3 and Apple TV before 4.2 does not properly perform bounds checking for Wi-Fi frames, which allows remote attackers to cause a denial of service device reset via unspecified traffic on the local wireless network...

Cain & Abel v4.9.39 updated version Download !

Cain & Abel is a password recovery tool for Microsoft Operating Systems. It allows easy recovery of various kind of passwords by sniffing the network, cracking encrypted passwords using Dictionary, Brute-Force and Cryptanalysis attacks, recording VoIP conversations, decoding scrambled passwords,...

Facebook Enhances Security With HTTPS, Remote Disconnect !

Maybe it was Mark Zuckerberg fan site hack that led upgrade security of Facebook, but for some reason, users now have access HTTPS. Facebook will leave the office during the next few weeks, which means that user activity is now encrypted when it hits a Web server. This is mainly useful when you...

OS X 10.6.5 kernel crash upon wlan roaming with disabled mandatory MCS

During the buildup at the CCC 27c3 congress in Berlin we noticed several Apple Macbooks kernel paniced while connected to the wireless network. We identified the cause of this issue and we are able to reproduce this as well. It seems to be limited to the aluminum unibody Macbooks, running OS X...

Firm Finds Gaping Holes in Mobile Payments Applications

eBay’s PayPal online payment division is rushing a software patch to users of its iPhone mobile payments application to plug a hole that leaves users vulnerable to man-in-the-middle and phishing attacks, but the firm that found that hole said transaction security is just one problem facing the...

CVE-2010-2988

Cross-site scripting XSS vulnerability in Cisco Unified Wireless Network UWN Solution 7.x before 7.0.98.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCtf35333...

CVE-2010-2983

The workgroup bridge aka WGB functionality in Cisco Unified Wireless Network UWN Solution 7.x before 7.0.98.0 allows remote attackers to cause a denial of service dropped connection via a series of spoofed EAPoL-Logoff frames, related to an "EAPoL logoff attack," aka Bug ID CSCte43374...

CVE-2010-2984

Cisco Unified Wireless Network UWN Solution 7.x before 7.0.98.0 on 4404 series controllers does not properly implement the WEBAUTHREQD state, which allows remote attackers to bypass intended access restrictions via WLAN traffic, aka Bug ID CSCtb75305...

CVE-2010-2981

Cisco Unified Wireless Network UWN Solution 7.x before 7.0.98.0 allows remote attackers to cause a denial of service device crash by pinging a virtual interface, aka Bug ID CSCte55370...

CVE-2010-2977

Cisco Unified Wireless Network UWN Solution 7.x before 7.0.98.0 does not properly implement TLS and SSL, which has unspecified impact and remote attack vectors, aka Bug ID CSCtd01611...

CVE-2010-2976

The controller in Cisco Unified Wireless Network UWN Solution 7.x through 7.0.98.0 has 1 a default SNMP read-only community of public, 2 a default SNMP read-write community of private, and a value of "default" for the 3 SNMP v3 username, 4 SNMP v3 authentication password, and 5 SNMP v3 privacy...

CVE-2010-2980

Cisco Unified Wireless Network UWN Solution 7.x before 7.0.98.0 on 5508 series controllers allows remote attackers to cause a denial of service pbuf exhaustion and device crash via fragmented traffic, aka Bug ID CSCtd26794...

Code injection

The workgroup bridge aka WGB functionality in Cisco Unified Wireless Network UWN Solution 7.x before 7.0.98.0 allows remote attackers to cause a denial of service dropped connection via a series of spoofed EAPoL-Logoff frames, related to an "EAPoL logoff attack," aka Bug ID CSCte43374...

Authentication flaw

The controller in Cisco Unified Wireless Network UWN Solution 7.x through 7.0.98.0 has 1 a default SNMP read-only community of public, 2 a default SNMP read-write community of private, and a value of "default" for the 3 SNMP v3 username, 4 SNMP v3 authentication password, and 5 SNMP v3 privacy...

Default credentials

Cisco Unified Wireless Network UWN Solution 7.x through 7.0.98.0 does not properly handle multiple SSH sessions, which allows physically proximate attackers to read a password, related to an "arrow key failure," aka Bug ID CSCtg51544...

CVE-2010-2988

The CVE-2010-2988 entry concerns a Cross-site scripting (XSS) vulnerability in Cisco Unified Wireless Network (UWN) Solution 7.x prior to 7.0.98.0. Affected product: Cisco UWN. Vulnerable component/behavior: an XSS flaw that allows remote attackers to inject arbitrary web script or HTML via unspe...

CVE-2010-2978

Cisco Unified Wireless Network UWN Solution 7.x before 7.0.98.0 does not use an adequate message-digest algorithm for a self-signed certificate, which allows remote attackers to bypass intended access restrictions via vectors involving collisions, aka Bug ID CSCtd67660...

CVE-2010-2984

CVE-2010-2984 affects Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 on 4404 series controllers. The vulnerability stems from improper implementation of the WEBAUTH_REQD state, allowing remote attackers to bypass intended access restrictions via WLAN traffic (Bug ID CSCtb75305)...