Sony Playstation 4 (PS4) 5.07 – ‘Jailbreak’ WebKit / ‘bpf v2’ Kernel Loader
# PS4 5.05 Kernel Exploit
hardware
hardware 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
TP-Link TL-WR840N/TL-WR841N – Authenticaton Bypass
Title: TP-Link Multiple Router(TL-WR840N and TL-WR841N) Unauthenticated
Bitmain Antminer D3/L3+/S9 – Remote Command Execution
# Exploit Title: Bitmain Antminer D3, L3+, and S9 devices allow Remote Command Execution
SKT LTE Wi-Fi SDT-CW3B1 – Unauthorized Admin Credential Change
# Exploit Title: SKT LTE Wi-Fi SDT-CW3B1 - Unauthorized Admin Credential Change
AMD / ARM / Intel – Speculative Execution Variant 4 Speculative Store Bypass
======== Intro / Overview ========
Nordex N149/4.0-4.5 – SQL Injection
# Exploit Title: Nordex N149/4.0-4.5 Wind Turbine Web Server - SQL Injection
Teradek VidiU Pro 3.0.3 – Server-Side Request Forgery
Teradek VidiU Pro 3.0.3 SSRF Vulnerability
D-Link DSL-3782 – Authentication Bypass
# Exploit Title: D-Link DSL 3782 - Authentication Bypass
Cisco SA520W Security Appliance – Path Traversal
# Title: Cisco SA520W Security Appliance - Path Traversal
Intelbras NCLOUD 300 1.0 – Authentication bypass
# coding: utf-8
Fastweb FASTGate 0.00.47 – Cross-Site Request Forgery
# Exploit Title: Fastweb FASTgate 0.00.47 CSRF
TBK DVR4104 / DVR4216 – Credentials Leak
# -*- coding: utf-8 -*-
Norton Core Secure WiFi Router – ‘BLE’ Command Injection (PoC)
# PoC command injection in BLE service of Norton Core Secure WiFi Router (CVE-2018-5234)
TP-Link Technologies TL-WA850RE Wi-Fi Range Extender – Remote Reboot
# Exploit Title: TP-Link Technologies TL-WA850RE Wi-Fi Range Extender | Unauthorized Remote Reboot
D-Link DIR-615 Wireless Router – Persistent Cross Site Scripting
######################################################################################
Barco ClickShare CSE-200 – Remote Denial of Service
#!/usr/bin/python
FiberHome VDSL2 Modem HG 150-UB – Authentication Bypass
# Exploit Title: FiberHome VDSL2 Modem HG 150-UB Authentication Bypass
DLink DIR-601 – Admin Password Disclosure
# Exploit Title: DLink DIR-601 Unauthenticated Admin password disclosure
VideoFlow Digital Video Protection (DVP) 2.10 – Hard-Coded Credentials
VideoFlow Digital Video Protection DVP 10 Authenticated Root Remote Code Execution
Cisco Smart Install – Crash (PoC)
# smi_ibc_init_discovery_BoF.py
DLINK DCS-5020L – Remote Code Execution (PoC)
“The DCS-5020L Wireless N Day & Night Pan/Tilt Cloud Camera is a day/night network camera that easily connects to you...
TL-WR720N 150Mbps Wireless N Router – Cross-Site Request Forgery
Exploit Title: TL-WR720N 150Mbps Wireless N Router - CSRF
Coship RT3052 Wireless Router – Persistent Cross-Site Scripting
######################################################################################
Intelbras Telefone IP TIP200 LITE – Local File Disclosure
# Exploit Title: [INTELBRAS TELEFONE IP TIP200/200 LITE Local File Include]
Contec Smart Home 4.15 – Unauthorized Password Reset
# Title : Contec smart home 4.15 Unauthorized Password Reset
MikroTik RouterOS < 6.41.3/6.42rc27 - SMB Buffer Overflow
#!/usr/bin/env python
MikroTik RouterOS < 6.38.4 (x86) - 'Chimay Red' Stack Clash Remote Code Execution
#!/usr/bin/env python2
MikroTik RouterOS < 6.38.4 (MIPSBE) - 'Chimay Red' Stack Clash Remote Code Execution
#!/usr/bin/env python3
Sony Playstation 4 (PS4) 4.55 < 5.50 - WebKit Code Execution (PoC)
function makeid() {
D-Link DIR-600M Wireless – Cross-Site Scripting
########################################################################
Sony Playstation 4 (PS4) 5.01 < 5.05 - WebKit Code Execution (PoC)
PS4 5.01 WebKit Exploit PoC
Sony Playstation 4 (PS4) 4.55 – ‘Jailbreak’ ‘setAttributeNodeNS’ WebKit 5.02 / ‘bpf’ Kernel Loader 4.55
# PS4 4.55 Kernel Exploit
Aastra 6755i SIP SP4 – Denial of Service
# Exploit Title: Aastra 6755i SIP SP4 | Unauthorized Remote Reboot
Siemens SIPROTEC 4 and SIPROTEC Compact EN100 Ethernet Module < 4.25 - Denial of Service
# Exploit Title: Siemens SIPROTEC 4 and SIPROTEC Compact EN100 Ethernet Module < V4.25 - Denial of Service
Tenda AC15 Router – Remote Code Execution
#!/usr/bin/env python
Netis WF2419 Router – Cross-Site Scripting
# Exploit Title: Netis-WF2419 HTML Injection