FiberHome AN5506 – Remote DNS Change
# FIBERHOME AN5506 Unauthenticated Remote DNS Change Vulnerability
hardware
hardware 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Geovision Inc. IP Camera & Video – Remote Command Execution
#!/usr/bin/env python2.7
iBall WRA150N – Multiple Vulnerabilities
## Vulnerabilities summary
Sony Playstation 3 (PS3) 4.82 – ‘Jailbreak’ (ROP)
EDB Note ~ http://ps3xploit.com/help/dumper.html
Netis WF2419 Router – Cross-Site Request Forgery
# Exploit Title: Netis-WF2419 Router Cross-Site Request Forgery (CSRF)
Dodocool DC38 N300 – Cross-site Request Forgery
# Exploit Title: DODOCOOL DC38 N300 Cross-site Request Forgery
Herospeed – ‘TelnetSwitch’ Remote Stack Overflow / Overwrite Password / Enable TelnetD
#!/usr/bin/env python2.7
AsusWRT Router < 3.0.0.4.380.7743 - LAN Remote Code Execution
>> Unauthenticated LAN remote code execution in AsusWRT
Smiths Medical Medfusion 4000 – ‘DHCP’ Denial of Service
#!/usr/bin/python3
Master IP CAM 01 – Multiple Vulnerabilities
# Exploit Title: Master IP CAM 01 Multiple Vulnerabilities
Belkin N600DB Wireless Router – Multiple Vulnerabilities
# Exploit Title: Belkin N600DB Wireless Router | Multiple Vulnerabilities
Seagate Personal Cloud – Multiple Vulnerabilities
# SSD Advisory – Seagate Personal Cloud Multiple Vulnerabilities
Multiple CPUs – Information Leak Using Speculative Execution
== INTRODUCTION ==
FiberHome LM53Q1 – Multiple Vulnerabilities
#!/usr/bin/python
Cisco IOS – Remote Code Execution
#!/usr/bin/env python
WDMyCloud < 2.30.165 - Multiple Vulnerabilities
WDMyCloud Multiple Vulnerabilities
D-Link DNS-320 ShareCenter < 1.06 - Backdoor Access
DNS-320L ShareCenter Backdoor
Telesquare SKT LTE Router SDT-CS3B1 – Information Disclosure
Telesquare SKT LTE Router SDT-CS3B1 Insecure Direct Object Reference Info Leak
Telesquare SKT LTE Router SDT-CS3B1 – Denial of Service
#!/usr/bin/env python
Telesquare SKT LTE Router SDT-CS3B1 – Cross-Site Request Forgery
Telesquare SKT LTE Router SDT-CS3B1 CSRF System Command Execution
Sony Playstation 4 (PS4) 4.05 – ‘Jailbreak’ WebKit / ‘NamedObj ‘ Kernel Loader
# PS4 4.05 Kernel Exploit
Huawei Router HG532 – Arbitrary Command Execution
import threading, sys, time, random, socket, re, os, struct, array, requests
Iopsys Router – ‘dhcp’ Remote Code Execution
#!/usr/bin/python
Ichano AtHome IP Cameras – Multiple Vulnerabilities
## Vulnerabilities Summary
BrightSign Digital Signage – Multiple Vulnerablities
# Exploit Title: BrightSign Digital Signage (Multiple Vulnerabilities)
Linksys WVBR0 – ‘User-Agent’ Remote Command Injection
#!/usr/bin/python
Palo Alto Networks Firewalls – Root Remote Code Execution
This is a public advisory for CVE-2017-15944 which is a remote root code
ZTE ZXDSL 831CII – Improper Access Restrictions
# Exploit Title: ZTE ZXDSL 831 Unauthorized Configuration Access
Vonage VDV-23 – Denial of Service
Overview
Icon Time Systems RTC-1000 Firmware 2.5.7458 – Cross-Site Scripting
# Exploit Title: Icon Time Systems RTC-1000 (
Vonage VDV23 – Cross-Site Scripting
# Exploit Title: Vonage Home Router – Stored Xss
TP-Link TL-WR740N – Cross-Site Scripting
# Exploit Title: XSS Vuln - TP-LINK TL-WR740N
D-Link DIR-605L < 2.08 - Denial of Service
# Exploit Title: D-Link DIR605L
Actiontec C1000A Modem – Backdoor Account
# Exploit Title: Actiontec C1000A backdoor account
Debut Embedded HTTPd 1.20 – Denial of Service
# Exploit Title: Remote un-authenticated DoS in Debut embedded httpd server in Brother printers
ZyXEL PK5001Z Modem – Backdoor Account
# Exploit Title: ZyXEL PK5001Z Modem - CenturyLink Hardcoded admin and root Telnet Password.
MitraStar DSL-100HN-T1/GPT-2541GNAC – Privilege Escalation
# Exploit Title: Privilege escalation MitraStar routers
TP-Link WR940N – (Authenticated) Remote Code
import urllib2