LLegoLLaS
-
Posts
2060 -
Joined
-
Last visited
-
Days Won
11
Everything posted by LLegoLLaS
-
"Sistem echilibrat" - wishlist de Cipry N. by me
-
VIDEO: Maine se lanseaza iPhone 5. Cum ar trebui sa arate?
LLegoLLaS replied to Nytro's topic in Stiri securitate
De banii aia n-as cumpara iphone nici batut.Aceleasi motive ca si mai sus.Singuru' iChestie care il am e un iPod nano generatia 2 de care is multumit ca se aude tare,clar si suporta j'de mii de formate + jocuri +plugins + visualizations + plm DAR cu alt soft modet adica ROCKBOX, ala original e praf -
Ciudat...formateaza-l in alt nokia.In al meu daca formatez cardu scoate si parola de pe el .Incearca printr-un card reader cu HP USB Format Tool
-
cred ca e facut in Adobe After Effects.Is ceva tutoriale pt avatare pe gugle pt AE
-
nu mai posta asa ceva aici
-
am vazut-o in friends with benefits plm...poza asta e cam nereusita arata mai bine in cover http://www.mihaelaanghel.com/wp-content/uploads/2011/08/friends_with_benefits_xlg.jpg
-
Bine-ai venit! ''sa ofer cunostinte'' ...care ar fi acelea?
-
cu carbune rgb
-
ASTA!
-
+1 MaNulicaUser il folosesc de ani de zile pe toate siteurile:D
-
Sense of Security - Security Advisory - SOS-11-011 Release Date. 20-Sep-2011 Last Update. - Vendor Notification Date. 22-Mar-2011 Product. NETGEAR Wireless Cable Modem Gateway CG814WG Affected versions. Hardware 1.03, Software V3.9.26 R14 verified, possibly others Severity Rating. High Impact. Authentication bypass, Cross Site Request Forgery Attack Vector. Remote without authentication Solution Status. Upgrade to R15 (by contacting NETGEAR) CVE reference. Not yet assigned Details. The NETGEAR Wireless Cable Modem Gateway CG814WG is supplied by ISP's as customer premises equipment within Australia and abroad. It is a centrally managed ISP solution whereby each ISP's devices run a customised firmware and configuration changes and updates can be pushed out as required. Basic authentication is used as the primary and only authentication mechanism for the administrator interface on the device. The basic authentication can be bypassed by sending a valid POST request to the device without sending any authentication header. The response from the device sends the user to another page that requests basic authentication, however at this point the request has already been processed. An example of attacks using the basic authentication bypass may include changing the admin password or enabling the remote admin interface (Internet facing). Additionally, due to the lack of CSRF protection in the web application, the bypass attack can be coupled with CSRF to have a victim enable the remote admin interface to the Internet, where an attacker can then use the bypass attack again across the remote admin interface to reset the admin password and access the device. This attack is possible when targeting a victim that is behind the NETGEAR device on the same segment as the web administrator interface whom has browsed to a malicious site containing the CSRF attack. NETGEAR was notified of this vulnerability on 22 March 2011, but we never received a response or acknowledgement of the issue or fix. Sense of Security notified local ISP's and it was escalated by a local ISP who worked with NETGEAR to develop and test an update. Sense of Security was never provided an opportunity to validate the fixes in the latest firmware version. Given the severity of the issue it would be prudent for NETGEAR to notify and supply an update to all of its customers. Proof of Concept. By embedding the below HTML in a website and having a victim browse to the website the remote management interface to the Internet would be enabled. An attacker could then use one of the hardcoded passwords for the device to access it, or use a basic authentication bypass to change the admin password. Alternatively, the attacker could conduct a CSRF attack that implements two POST requests to have the remote admin interface enabled, and the admin password changed. The example here is a basic proof of concept, more complex examples which include JavaScript redirects to mask the basic authentication pop-up would be more stealthy. <html> <head></head> <body onLoad=javascript:document.form.submit()> <form action="http://192.168.0.1/goform/RgRemoteManagement" method="POST" name="form"> <input type="hidden" name="NetgearRmEnable" value="0x01"> <input type="hidden" name="NetgearRmPortNumber" value="1337"> <input type="hidden" name="NetgearUserLevel" value="1"> </form> </body> </html> Solution Ask your ISP to obtain the latest firmware from NETGEAR and deploy it to your device. Discovered by Sense of Security Labs. sursa: http://www.bugsearch.net/en/12338/netgear-wireless-cable-modem-gateway-auth-bypass-and-csrf.html?ref=2
-
Report? .
-
depinde in ce retele ai majoritatea prietenilor ...am cartele de cosmo si orange (orange il am de 6-7 ani si cosmo de vreo 2) oferta mea la cosmo actuala e 3k minute retea, 3k sms , 75 min (inter)nationale + 75 sms (inter)nationale cu 6 euro
-
nu minte omu ca le are cu fetele esti d-ala care se duce la magazin pt ele sa-nteleg?
-
De-aia nu e.Adapteaza-te
-
ps: cum ma n-are ce sa le faca? da' tie are ce sa iti faca vad (nota la purtare, pericolu' de a fi exmatriculat) adu-ti parintii , fugi la dermatolog sa te scape de acnee ps: dirtrock se balangane pe drum
-
Singura solutie care ti-o vad: fa-ti prieten (malaci)i, nu te mai purta asa ''roacher'' la scoala, imbraca-te ''normal'', nu-ti mai lua iPod iPhone iCacat la tine.Cumperi de la mine un SonyEricsson T303 ( ) dupa care nu plangi daca i se intampla ceva.Poarta-te cum numesc ei ''normal''
-
daca-s a 12a ai rabdare inca 33 de spatamani de scoala altceva nu cred ca ai ce sa faci.Du-te la director ceva fara sa afle vreun coleg sau altii din scoala
-
trasnfera-te dracu la alt liceu sau macar la alta clasa unde iti poti face macar 2-3 prieteni mai malaci cu aia n-o s-o duci bine tot liceul
-
poa' sa duca si 130 GB.Daca scrie clar ca suporta RAM DDR2 nu suporta si DDR3 .Daca zici ca 'duce' 4 jiga are 2 sloturi in care poti pune maxim cate 3 jiga slot1 - 2 Gigi slot2 - 2 gygy
-
e CDMA? adica asa daca da....te cam caci pe el.Abia am semnal intr-un oras cu el
-
Interesant .Cateva ghiduri de limba romana nu ar strica
-
O sa ma cac pe BOC (i-am pus nume tronului)
-
tu....aia abia au tabla pe casa
-
asta: inca mai rad:))