Ilevia EVE X1/X5 Server 4.7.18.0.eden – Reverse Rootshell
#!/usr/bin/env python
hardware
hardware 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
ASUS ASMB8 iKVM 1.14.51 – Remote Code Execution (RCE)
# Exploit Title: ASUS ASMB8 iKVM 1.14.51 - Remote Code Execution (RCE)
Ruckus IoT Controller 1.7.1.0 – Undocumented Backdoor Account
# Exploit Title: CommScope Ruckus IoT Controller 1.7.1.0 - Undocumented Account
FLIR AX8 1.46.16 – Remote Command Injection
# Exploit Title: FLIR AX8 1.46.16 - Remote Command Injection
Dell EMC iDRAC7/iDRAC8 2.52.52.52 – Remote Code Execution (RCE)
# Exploit Title: Dell EMC iDRAC7/iDRAC8 2.52.52.52 - Remote Code Execution (RCE)
Microchip TimeProvider 4100 Grandmaster (Data plot modules) 2.4.6 – SQL Injection
# Exploit Title: Microchip TimeProvider 4100 Grandmaster (Data plot modules) 2.4.6 - SQL Injection
Microchip TimeProvider 4100 Grandmaster (Banner Config Modules) 2.4.6 – Stored Cross-Site Scripting (XSS)
# Exploit Title: Microchip TimeProvider 4100 Grandmaster (Banner Config Modules) 2.4.6 - Stored Cross-Site Scripting ...
Microchip TimeProvider 4100 (Configuration modules) 2.4.6 – OS Command Injection
# Exploit Title: Microchip TimeProvider 4100 (Configuration modules) 2.4.6 - OS Command Injection
Aztech DSL5005EN Router – ‘sysAccess.asp’ Admin Password Change (Unauthenticated)
# Exploit Title: Aztech DSL5005EN Router - 'sysAccess.asp' Admin Password Change (Unauthenticated)
HughesNet HT2000W Satellite Modem – Password Reset
# Exploit Title: HughesNet HT2000W Satellite Modem (Arcadyan httpd 1.0) - Password Reset
Elber Wayber Analog/Digital Audio STL 4.00 – Device Config Disclosure
Elber Wayber Analog/Digital Audio STL 4.00 Device Config
Elber Wayber Analog/Digital Audio STL 4.00 – Authentication Bypass
Elber Wayber Analog/Digital Audio STL 4.00 Authentication Bypass
Elber ESE DVB-S/S2 Satellite Receiver 1.5.x – Device Config
Elber ESE DVB-S/S2 Satellite Receiver 1.5.x Device Config
Elber ESE DVB-S/S2 Satellite Receiver 1.5.x – Authentication Bypass
Elber ESE DVB-S/S2 Satellite Receiver 1.5.x Authentication Bypass
Check Point Security Gateway – Information Disclosure (Unauthenticated)
# Exploit Title: Check Point Security Gateway - Information Disclosure (Unauthenticated)
Aquatronica Control System 5.1.6 – Information Disclosure
#!/usr/bin/env python
Elber Reble610 M/ODU XPIC IP-ASI-SDH Microwave Link – Device Config Disclosure
Elber Reble610 M/ODU XPIC IP-ASI-SDH Microwave Link Device Config
Elber Reble610 M/ODU XPIC IP-ASI-SDH Microwave Link – Authentication Bypass
Elber Reble610 M/ODU XPIC IP-ASI-SDH Microwave Link Authentication Bypass
Elber Cleber/3 Broadcast Multi-Purpose Platform 1.0.0 – Authentication Bypass
Elber Cleber/3 Broadcast Multi-Purpose Platform 1.0.0 Authentication Bypass
Elber Signum DVB-S/S2 IRD For Radio Networks 1.999 – Device Config Disclosure
Elber Signum DVB-S/S2 IRD For Radio Networks 1.999 Device Config
Elber Signum DVB-S/S2 IRD For Radio Networks 1.999 – Authentication Bypass
Elber Signum DVB-S/S2 IRD For Radio Networks 1.999 Authentication Bypass
Positron Broadcast Signal Processor TRA7005 v1.20 – Authentication Bypass
# Exploit Title: Positron Broadcast Signal Processor TRA7005 v1.20 - Authentication Bypass
GL-iNet MT6000 4.5.5 – Arbitrary File Download
# Exploit Title: GL-iNet MT6000 4.5.5 - Arbitrary File Download
Siklu MultiHaul TG series < 2.0.0 - unauthenticated credential disclosure
# Exploit Title: Siklu MultiHaul TG series - unauthenticated credential disclosure
RouterOS 6.40.5 – 6.44 and 6.48.1 – 6.49.10 – Denial of Service
# Exploit Title: CVE-2024-27686: RouterOS-SMB-DOS
HNAS SMU 14.8.7825 – Information Disclosure
# Exploit Title: Hitachi NAS (HNAS) System Management Unit (SMU) 14.8.7825 - Information Disclosure
TELSAT marKoni FM Transmitter 1.9.5 – Insecure Access Control Change Password
TELSAT marKoni FM Transmitter 1.9.5 Insecure Access Control Change Password
TELSAT marKoni FM Transmitter 1.9.5 – Backdoor Account Information Disclosure
TELSAT marKoni FM Transmitter 1.9.5 Backdoor Account
TELSAT marKoni FM Transmitter 1.9.5 – Root Command Injection
#!/usr/bin/env python
Ruijie Switch PSG-5124 26293 – Remote Code Execution (RCE)
#- Exploit Title: Ruijie Switch PSG-5124 26293 - Remote Code Execution (RCE)
Viessmann Vitogate 300 2.1.3.0 – Remote Code Execution (RCE)
#- Exploit Title: Viessmann Vitogate 300
SolarView Compact 6.00 – Command Injection
#- Exploit Title: SolarView Compact 6.00 - Command Injection
Honeywell PM43 < P10.19.050004 - Remote Code Execution (RCE)
#- Exploit Title: Honeywell PM43 < P10.19.050004 - Remote Code Execution (RCE)
Cisco Firepower Management Center < 6.6.7.1 - Authenticated RCE
# Exploit Title: [Cisco Firepower Management Center]
TP-Link TL-WR740N – Buffer Overflow ‘DOS’
# Exploit Title: TP-Link TL-WR740N - Buffer Overflow 'DOS'
GLiNet – Router Authentication Bypass
DZONERZY Security Research
Solar-Log 200 PM+ 3.6.0 Build 99 – 15.10.2019 – Stored XSS
# Exploit Title: Stored XSS in Solar-Log 200 3.6.0 web panel
R Radio Network FM Transmitter 1.07 system.cgi – Password Disclosure
R Radio Network FM Transmitter 1.07 system.cgi Password Disclosure
GL.iNet AR300M v3.216 Remote Code Execution – CVE-2023-46456 Exploit
#!/usr/bin/env python3
TitanNit Web Control 2.01 / Atemio 7600 – Root Remote Code Execution
#!/usr/bin/env python
GL.iNet AR300M v4.3.7 Remote Code Execution – CVE-2023-46454 Exploit
#!/usr/bin/env python3
GL.iNet AR300M v4.3.7 Arbitrary File Read – CVE-2023-46455 Exploit
#!/usr/bin/env python3
Maxima Max Pro Power – BLE Traffic Replay (Unauthenticated)
# Exploit Title: Maxima Max Pro Power - BLE Traffic Replay (Unauthenticated)
Saflok – Key Derication Function Exploit
// Exploit Title: Saflok KDF
TEM Opera Plus FM Family Transmitter 35.45 – XSRF
CSRF Change Forward Power:
TEM Opera Plus FM Family Transmitter 35.45 – Remote Code Execution
TEM Opera Plus FM Family Transmitter 35.45 Remote Code Execution
DS Wireless Communication – Remote Code Execution
# Exploit Title: DS Wireless Communication Remote Code Execution
VIMESA VHF/FM Transmitter Blue Plus 9.7.1 (doreboot) – Remote Denial Of Service
VIMESA VHF/FM Transmitter Blue Plus 9.7.1 (doreboot) Remote Denial Of Service