Cisco Adaptive Security Appliance – Path Traversal (Metasploit)
require 'msf/core'
hardware
hardware 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Cisco Catalyst 3850 Series Device Manager – Cross-Site Request Forgery
# Product : Catalyst 3850 Series Device Manager
Cisco Wireless Controller 3.6.10E – Cross-Site Request Forgery
# Product : Cisco Wireless Controller
CISCO Small Business 200 / 300 / 500 Switches – Multiple Vulnerabilities
# Exploit Title: CISCO Small Business 200, 300, 500 Switches Multiple Vulnerabilities.
Netgear WiFi Router JWNR2010v5 / R6080 – Authentication Bypass
# Exploit Title: NETGEAR WiFi Router R6080 - Security Questions Answers Disclosure
Tenda D301 v2 Modem Router – Persistent Cross-Site Scripting
# Exploit Title: tenda D301 v2 modem router stored xss CVE-2019-13492
FaceSentry Access Control System 6.4.8 – Remote SSH Root
#!/usr/bin/env python
FaceSentry Access Control System 6.4.8 – Remote Root Exploit
#!/usr/bin/env python
FaceSentry Access Control System 6.4.8 – Cross-Site Request Forgery
FaceSentry Access Control System 6.4.8 Cross-Site Request Forgery
FaceSentry Access Control System 6.4.8 – Remote Command Injection
FaceSentry Access Control System 6.4.8 Remote Command Injection
Fortinet FCM-MB40 – Cross-Site Request Forgery / Remote Command Execution
# Exploit Title: FCM-MB40 Remote Command Execution as Root via CSRF
SAPIDO RB-1732 – Remote Command Execution
# Exploit Title: SAPIDO RB-1732 command line execution
CleverDog Smart Camera DOG-2W / DOG-2W-V4 – Multiple Vulnerabilities
1. Advisory Information
Supra Smart Cloud TV – ‘openLiveURL()’ Remote File Inclusion
Exploit Title: Remote file inclusion
Cisco RV130W 1.0.3.44 – Remote Stack Overflow
#!/usr/bin/python
NUUO NVRMini 2 3.9.1 – ‘sscanf’ Stack Overflow
#!/usr/bin/python
AUO Solar Data Recorder < 1.3.0 - Incorrect Access Control
# Exploit Title: AUO Solar Data Recorder - Incorrect Access Control
Carel pCOWeb < B1.2.1 - Credentials Disclosure
# Exploit Title: Carel pCOWeb - Unprotected Storage of Credentials
Carel pCOWeb < B1.2.1 - Cross-Site Scripting
# Exploit Title: Carel pCOWeb - Stored XSS
AUO Solar Data Recorder < 1.3.0 - 'addr' Cross-Site Scripting
# Exploit Title: AUO Solar Data Recorder - Stored XSS
TP-LINK TL-WR840N v5 00000005 – Cross-Site Scripting
# Exploit Title: TL-WR840N v5 00000005
D-Link DWL-2600AP – Multiple OS Command Injection
Document Title:
RICOH SP 4520DN Printer – HTML Injection
# Exploit Title: RICOH SP 4520DN Printer - HTML Injection
RICOH SP 4510DN Printer – HTML Injection
# Exploit Title: RICOH SP 4510DN Printer - HTML Injection
Intelbras IWR 3000N 1.5.0 – Cross-Site Request Forgery
IWR 3000N - CSRF on authenticated administrator
JioFi 4G M2S 1.0.2 – Denial of Service
# Exploit Title: cgi-bin/qcmap_web_cgi on JioFi 4G M2S 1.0.2 devices allows a DoS (Hang) via the mask POST parameter
JioFi 4G M2S 1.0.2 – ‘mask’ Cross-Site Scripting
# Exploit Title: cgi-bin/qcmap_web_cgi on JioFi 4G M2S 1.0.2 devices has XSS and HTML injection via the mask POST p...
ASUS HG100 – Denial of Service
# Exploit Title:ASUS HG100 devices denial of service(DOS) via IPv4 packets/SlowHTTPDOS
Zyxel ZyWall 310 / ZyWall 110 / USG1900 / ATP500 / USG40 – Login Page Cross-Site Scripting
# Exploit Title: Reflected XSS on Zyxel login pages
D-Link DI-524 V2.06RU – Multiple Cross-Site Scripting
# Exploit Title: Multiple Stored and Reflected XSS vulnerabilities in D-Link DI-524
TP-LINK TL-WR940N / TL-WR941ND – Buffer Overflow
#Author Grzegorz Wypych - h0rac
SaLICru -SLC-20-cube3(5) – HTML Injection
# Exploit Title: Reflected HTML Injection
JioFi 4G M2S 1.0.2 – Cross-Site Request Forgery
# Exploit Title: JioFi 4G M2S 1.0.2 devices have CSRF via the SSID name and Security Key field under Edit Wi-Fi Setti...
PLC Wireless Router GPN2.4P21-C-CN – Cross-Site Request Forgery
# Exploit Title: PLC Wireless Router GPN2.4P21-C-CN -Cross-Site Request Forgery (CSRF)
PLC Wireless Router GPN2.4P21-C-CN – Incorrect Access Control
# Exploit Title: PLC Wireless Router GPN2.4P21-C-CN -Incorrect Access
Sony Playstation 4 (PS4) < 6.20 - WebKit Code Execution (PoC)
PS4 6.20 WebKit Code Execution PoC
Fiberhome AN5506-04-F RP2669 – Persistent Cross-Site Scripting
# Exploit Title: Fiberhome AN5506-04-F - Stored Cross Site Scripting
Raisecom XPON ISCOMHT803G-U_2.0.0_140521_R4.1.47.002 – Remote Code Execution
# Exploit Title: Remote code execution in Raisecom xpon
Alcatel-Lucent (Nokia) GPON I-240W-Q – Buffer Overflow
#!/usr/bin/python3