hardware

日期	标题	类别	作者
2020-11-13	Citrix ADC NetScaler – Local File Inclusion (Metasploit)	webapps	RAMELLA Sebastien
2020-11-13	ASUS TM-AC1900 – Arbitrary Command Execution (Metasploit)	webapps	b1ack0wl
2020-11-12	Sony Playstation 4 (PS4) < 6.72 - 'ValidationMessage::buildBubbleTree()' Use-After-Free WebKit Code Execution (PoC)	webapps	Synacktiv
2020-11-09	Genexis Platinum-4410 P4410-V2-1.28 – Broken Access Control and CSRF	webapps	Jinson Varghese Behanan
2020-11-05	TP-Link WDR4300 – Remote Code Execution (Authenticated)	remote	Patrik Lantz
2020-11-05	iDS6 DSSPro Digital Signage System 6.2 – Improper Access Control Privilege Escalation	webapps	LiquidWorm
2020-11-05	iDS6 DSSPro Digital Signage System 6.2 – CAPTCHA Security Bypass	webapps	LiquidWorm
2020-11-05	iDS6 DSSPro Digital Signage System 6.2 – Cross-Site Request Forgery (CSRF)	webapps	LiquidWorm
2020-10-29	Genexis Platinum-4410 P4410-V2-1.28 – Cross Site Request Forgery to Reboot	webapps	Mohammed Farhan
2020-10-27	GoAhead Web Server 5.1.1 – Digest Authentication Capture Replay Nonce Reuse	remote	LiquidWorm
2020-10-27	Adtec Digital Multiple Products – Default Hardcoded Credentials Remote Root	remote	LiquidWorm
2020-10-26	ReQuest Serious Play F3 Media Server 7.0.3 – Remote Code Execution (Unauthenticated)	webapps	LiquidWorm
2020-10-26	ReQuest Serious Play F3 Media Server 7.0.3 – Remote Denial of Service	webapps	LiquidWorm
2020-10-26	ReQuest Serious Play F3 Media Server 7.0.3 – Debug Log Disclosure	webapps	LiquidWorm
2020-10-26	ReQuest Serious Play Media Player 3.0 – Directory Traversal File Disclosure	webapps	LiquidWorm
2020-10-26	Genexis Platinum-4410 – ‘SSID’ Persistent XSS	webapps	Amal Mohandas
2020-10-20	Comtrend AR-5387un router – Persistent XSS (Authenticated)	webapps	OscarAkaElvis
2020-10-19	HiSilicon Video Encoders – RCE via unauthenticated command injection	webapps	Alexei Kojenov
2020-10-19	HiSilicon Video Encoders – Unauthenticated file disclosure via path traversal	webapps	Alexei Kojenov
2020-10-19	HiSilicon Video Encoders – Unauthenticated RTSP buffer overflow (DoS)	webapps	Alexei Kojenov
2020-10-19	HiSilicon Video Encoders – Full admin access via backdoor password	webapps	Alexei Kojenov
2020-10-19	HiSilicon video encoders – RCE via unauthenticated upload of malicious firmware	webapps	Alexei Kojenov
2020-10-12	Cisco ASA and FTD 9.6.4.42 – Path Traversal	webapps	3ndG4me
2020-10-08	D-Link DSR-250N 3.12 – Denial of Service (PoC)	webapps	RedTeam Pentesting GmbH