cgi

Netgear WNR2000v5 – Remote Code Execution

#

Netgear R7000 – Command Injection

# Exploit Title: Netgear R7000 - Command Injection

Cgiemail 1.6 – Source Code Disclosure

#!/usr/bin/env perl

AVTECH IP Camera / NVR / DVR Devices – Multiple Vulnerabilities

'''

Cisco Firepower Threat Management Console 6.0.1 – Local File Inclusion

KL-001-2016-006 : Cisco Firepower Threat Management Console Local File Inclusion

Cisco Firepower Threat Management Console 6.0.1 – Remote Command Execution

KL-001-2016-007 : Cisco Firepower Threat Management Console Remote Command

Witbe – Remote Code Execution

#!/usr/bin/python

ASUS DSL-X11 ADSL Router – DNS Change

#!/bin/bash

COMTREND ADSL Router CT-5367 C01_R12 / CT-5624 C01_R03 – DNS Change

#!/bin/bash

Tenda ADSL2/2+ Modem 963281TAN – DNS Change

#!/bin/bash

PLANET VDR-300NU ADSL Router – DNS Change

#!/bin/bash

PIKATEL 96338WS, 96338L-2M-8M – DNS Change

#!/bin/bash

Inteno EG101R1 VoIP Router – DNS Change

#!/bin/bash

Exper EWM-01 ADSL/MODEM – DNS Change

#!/bin/bash

PLC Wireless Router GPN2.4P21-C-CN – Arbitrary File Disclosure

# Exploit Title: PLC Wireless Router GPN2.4P21-C-CN Authorised Arbitrary File Disclosure

Intellinet IP Camera INT-L100M20N – Unauthorized Admin Credential Change

#!/bin/bash

Honeywell IP-Camera HICC-1100PT – Local File Disclosure

1. Advisory Information

JVC IP-Camera VN-T216VPRU – Local File Disclosure

1. Advisory Information

Vanderbilt IP-Camera CCPW3025-IR / CVMW3025-IR – Local File Disclosure

1. Advisory Information

MESSOA IP Cameras (Multiple Models) – Password Change

#

TOPSEC Firewalls – ‘ELIGIBLEBOMBSHELL’ Remote Code Execution

# Exploit Title: TOPSEC Firewalls - Remote Code Execution (ELIGIBLEBOMBSHELL)

TOPSEC Firewalls – ‘ELIGIBLECANDIDATE’ Remote Code Execution

# Exploit Title: TOPSEC Firewalls - Remote Code Execution (ELIGIBLECANDIDATE)

TOPSEC Firewalls – ‘ELIGIBLECONTESTANT’ Remote Code Execution

# Exploit Title: TOPSEC Firewalls - Remote Code Execution (ELIGIBLECONTESTANT)

ZYCOO IP Phone System – Remote Command Execution

Vulnerable hardware : ZYCOO IP phone system

MESSOA IP-Camera NIC990 – Authentication Bypass / Configuration Download

#

TOSHIBA IP-Camera IK-WP41A – Authentication Bypass / Configuration Download

#

C2S DVR Management IRDOME-II-C2S / IRBOX-II-C2S / DVR – Credentials Disclosure / Authentication Bypass

1. Advisory Information

JVC IP-Camera VN-T216VPRU – Credentials Disclosure

1. Advisory Information

Vanderbilt IP-Camera CCPW3025-IR / CVMW3025-IR – Credentials Disclosure

1. Advisory Information

SIEMENS IP Cameras (Multiple Models) – Credential Disclosure / Configuration Download

#

Honeywell IP-Camera HICC-1100PT – Credentials Disclosure

1. Advisory Information

SIEMENS IP Camera CCMW1025 x.2.2.1798 – Remote Admin Credentials Change

#!/bin/bash

SIEMENS IP-Camera CVMS2025-IR / CCMS2025 – Credentials Disclosure

1. Advisory Information

NUUO NVRmini 2 3.0.8 – Remote Command Injection (Shellshock)

NUUO NVRmini 2 NE-4160 ShellShock Remote Code Execution

Davolink DV-2051 – Multiple Vulnerabilities

===================================================================

Iris ID IrisAccess ICU 7000-2 – Remote Command Execution

Iris ID IrisAccess ICU 7000-2 Remote Root Command Execution

Iris ID IrisAccess ICU 7000-2 – Multiple Vulnerabilities

Iris ID IrisAccess ICU 7000-2 Multiple XSS and CSRF Vulnerabilities

Technicolor TC7200 Modem/Router STD6.02.11 – Multiple Vulnerabilities

'''

Ubee EVW3226 Modem/Router 1.0.20 – Multiple Vulnerabilities

'''

Clear Voyager Hotspot IMW-C910W – Arbitrary File Disclosure

- # Exploit Title: clear voyager hotspot IMW-C910W - file disclosure

Belkin AC1200 Router Firmware 1.00.27 – Authentication Bypass

'''

PaKnPost Pro 1.14 – Multiple Vulnerabilities

# Exploit Title: PaKnPost Pro Arbitrary File Upload & Remote Code Execution

Ubiquiti Administration Portal – Remote Command Execution (via Cross-Site Request Forgery)

IPFire – ‘Shellshock’ Bash Environment Variable Command Injection (Metasploit)

##

IPFire – ‘proxy.cgi’ Remote Code Execution (Metasploit)

##

Sun Secure Global Desktop and Oracle Global Desktop 4.61.915 – Command Injection (Shellshock)

# Exploit Title: ShellShock On Sun Secure Global Desktop & Oracle Global desktop

AirOS NanoStation M2 5.6-beta – Multiple Vulnerabilities

# AirOS NanoStation M2 v5.6-beta

IPFire < 2.19 Core Update 101 - Remote Command Execution

######################################################################################

NetCommWireless HSPA 3G10WVE Wireless Router – Multiple Vulnerabilities

Title:

Merit Lilin IP Cameras – Multiple Vulnerabilities

_ _ _ _ _ _ _ _ _ _