JioFi 4G M2S 1.0.2 – Denial of Service (PoC)
# Exploit Title: JioFi 4G M2S 1.0.2 - Denial of Service (PoC)
hardware
hardware 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
PLC Wireless Router GPN2.4P21-C-CN – Denial of Service
# Exploit Title: PLC Wireless Router GPN2.4P21-C-CN Unauthenticated Remote Reboot
TP-Link C50 Wireless Router 3 – Cross-Site Request Forgery (Information Disclosure)
# Exploit Title: TP-Link C50 Wireless Router 3 - Cross-Site Request Forgery (Information Disclosure)
TP-Link C50 Wireless Router 3 – Cross-Site Request Forgery (Remote Reboot)
# Exploit Title: TP-Link C50 Wireless Router 3 - Cross-Site Request Forgery (Remote Reboot)
TP-Link Wireless N Router WR840N – Denial of Service (PoC)
# Exploit Title:- TP-Link Wireless N Router WR840N - Denial of Service (PoC)
ASUS DSL-N12E_C1 1.1.2.3_345 – Remote Command Execution
# Exploit Title: ASUS DSL-N12E_C1 1.1.2.3_345 - Remote Command Execution
LG NAS 3718.510.a0 – Remote Command Execution
# LG NAS 3718.510.a0 - Remote Command Execution
Trivum Multiroom Setup Tool 8.76 – Corss-Site Request Forgery (Admin Bypass)
# Exploit Title: Trivum Multiroom Setup Tool 8.76 - Corss-Site Request Forgery (Admin Bypass)
D-link DAP-1360 – Path Traversal / Cross-Site Scripting
# Exploit Title: D-Link DAP-1360 File path traversal and Cross site
Tenda Wireless N150 Router 5.07.50 – Cross-Site Request Forgery (Reboot Router)
# Exploit Title: Tenda Wireless N150 Router 5.07.50 - Cross-Site Request Forgery (Reboot Router)
Davolink DVW 3200 Router – Password Disclosure
# Exploit Title: Davolink DVW 3200 Router - Password Disclosure
NUUO NVRmini – ‘upgrade_handle.php’ Remote Command Execution
# Exploit Title: NUUO NVR Unauthenticated Remote Code Execution
GeoVision GV-SNVR0811 – Directory Traversal
# Exploit Title: GeoVision GV-SNVR0811 Directory Traversal
TP-Link TL-WR840N – Denial of Service
# Exploit Title:- TP-Link Wireless N Router WR840N - Buffer Overflow
Touchpad / Trivum WebTouch Setup 2.53 build 13163 – Authentication Bypass
# Exploit Title: Touchpad / Trivum WebTouch Setup V9 V2.53 build 13163 - Unauthorized Authentication Reset
HomeMatic Zentrale CCU2 – Remote Code Execution
# Exploit Title: HomeMatic Zentrale CCU2 Unauthenticated RCE
Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway – Restricted Shell Escape
Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway Backdoor Jailbreak
Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway – Default Credentials
Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway Default Credentials
Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway – Remote Root
Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway Remote Root Exploit
Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway – File Manipulation
Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway Arbitrary File Attacks
Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway – Configuration Download
Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway Configuration Download
Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway – Denial of Service
Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway Service Control DoS
Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway – Cross-Site Request Forgery
Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway CSRF Vulnerabilities
VelotiSmart WiFi B-380 Camera – Directory Traversal
Title: Vulnerability in VelotiSmart Wifi - Directory Traversal
Grundig Smart Inter@ctive 3.0 – Cross-Site Request Forgery
# Exploit Title: Grundig Smart Inter@ctive 3.0 - Cross-Site Request Forgery
Cela Link CLR-M20 2.7.1.6 – Arbitrary File Upload
# Exploit Title: Cela Link CLR-M20 2.7.1.6 - Arbitrary File Upload
QNAP Qcenter Virtual Appliance – Multiple Vulnerabilities
Core Security - Corelabs Advisory
D-Link DIR601 2.02 – Credential Disclosure
# Exploit title: D-Link DIR601 2.02NA - Credential disclosure
ADB Broadband Gateways / Routers – Privilege Escalation
SEC Consult Vulnerability Lab Security Advisory < 20180704-2 >
ADB Broadband Gateways / Routers – Local Root Jailbreak
SEC Consult Vulnerability Lab Security Advisory < 20180704-0 >
ADB Broadband Gateways / Routers – Authorization Bypass
SEC Consult Vulnerability Lab Security Advisory < 20180704-1 >
Delta Industrial Automation COMMGR 1.08 – Stack Buffer Overflow (PoC)
# Exploit Title: Delta Electronics Delta Industrial Automation COMMGR
VMware NSX SD-WAN Edge < 3.1.2 - Command Injection
#!/usr/bin/env python
DIGISOL DG-HR3400 Wireless Router – Cross-Site Scripting
# Exploit Title: DIGISOL DG-HR3400 Wireless Router - Cross-Site Scripting
Intex Router N-150 – Arbitrary File Upload
# Exploit Title: Intex Router N-150 - Arbitrary File Upload
Ecessa ShieldLink SL175EHQ < 10.7.4 - Cross-Site Request Forgery (Add Superuser)
# Exploit Title: Ecessa ShieldLink SL175EHQ 10.7.4 - Cross-Site Request Forgery (Add Superuser)
AsusWRT RT-AC750GF – Cross-Site Request Forgery (Change Admin Password)
# Exploit Title: AsusWRT RT-AC750GF - Cross-Site Request Forgery (Change Admin Password)
Ecessa WANWorx WVR-30 < 10.7.4 - Cross-Site Request Forgery (Add Superuser)
# Exploit title: Ecessa WANWorx WVR-30 < 10.7.4 - Cross-Site Request Forgery (Add Superuser)
DIGISOL DG-BR4000NG – Cross-Site Scripting
# Exploit Title: DIGISOL DG-BR4000NG - Cross-Site Scripting
DIGISOL DG-BR4000NG – Buffer Overflow (PoC)
# Exploit Title: DIGISOL DG-BR4000NG - Buffer Overflow (PoC)
Intex Router N-150 – Cross-Site Request Forgery (Add Admin)
# Exploit Title: Intex Router N-150 - Cross-Site Request Forgery (Add Admin)
TP-Link TL-WA850RE – Remote Command Execution
#!/usr/bin/env python
Siaberry 1.2.2 – Command Injection
## Siaberry's Command Injection Vulnerability
XiongMai uc-httpd 1.0.0 – Buffer Overflow
# Exploit Title: XiongMai uc-httpd 1.0.0 - Buffer Overflow
Brother HL Series Printers 1.15 – Cross-Site Scripting
# Exploit Title: [ XSS at Brother HL series printers]
TAC Xenta 511/911 – Directory Traversal
# Exploit Title: TAC Xenta 511 and 911 Credentials Disclosure
NUUO NVRmini2 / NVRsolo – Arbitrary File Upload
# Exploit Title: NUUO NVRmini2 / NVRsolo Arbitrary File Upload Vulnerability
Sony Playstation 4 (PS4) 5.1 – Kernel (PoC)
log("--- trying kernel exploit --");