DataTaker DT80 dEX 1.50.012 – Information Disclosure
[+] Title: DataTaker DT80 dEX 1.50.012 - Sensitive Configurations Exposure
hardware
hardware 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Pelco Sarix/Spectra Cameras – Remote Code Execution
Schneider Electric Pelco Sarix/Spectra Cameras Root Remote Code Execution
Pelco Sarix/Spectra Cameras – Cross-Site Request Forgery (Enable SSH Root Access)
Schneider Electric Pelco Sarix/Spectra Cameras CSRF Enable SSH Root Access
Pelco Sarix/Spectra Cameras – Cross-Site Request Forgery / Cross-Site Scripting
Schneider Electric Pelco Sarix/Spectra Cameras Multiple XSS Vulnerabilities
OpenDreamBox 2.0.0 Plugin WebAdmin – Remote Code Execution
# Exploit Title: OpenDreamBox 2.0.0 - Plugin WebAdmin RCE
Humax HG100R 2.0.6 – Backup File Download
# coding: utf-8
Eltek SmartPack – Backdoor Account
Eltek SmartPack - Backdoor Account
Sophos XG Firewall 16.05.4 MR-4 – Path Traversal
## Vulnerabilities Summary
Beetel BCM96338 Router – DNS Change
#!/bin/bash
D-Link DSL-2640U – DNS Change
#!/bin/bash
UTstarcom WA3002G4 – DNS Change
#!/bin/bash
iBall Baton iB-WRA150N – DNS Change
#!/bin/bash
Uniview NVR – Password Disclosure
#Uniview NVR remote passwords disclosure
EnGenius EnShare IoT Gigabit Cloud Service 1.4.11 – Remote Code Execution
#!/usr/bin/env python
CERIO DT-100G-N/DT-300N/CW-300N – Multiple Vulnerabilities
CERIO 11nbg 2.4Ghz High Power Wireless Router (pekcmd) Rootshell Backdoors
QWR-1104 Wireless-N Router – Cross-Site Scripting
# Exploit Title: Aries QWR-1104 Wireless-N Router Execute JavaScript in Wireless Site Survey page.
Sophos Cyberoam – Cross-site scripting
# Exploit Title: Sophos Cyberoam – Cross-site scripting (XSS) vulnerability
Aerohive HiveOS 5.1r5 < 6.1r5 - Remote Code Execution
#!/usr/bin/python3
D-Link DIR-600M Wireless N 150 – Authentication Bypass
# Exploit Title: D-Link DIR-600M Wireless N 150 Login Page Bypass
Cisco DPC3928 Router – Arbitrary File Disclosure
## Vulnerability Summary
Technicolor DPC3928SL – SNMP Authentication Bypass
#!/usr/bin/python
Zyxel P-660HW-61 Firmware < 3.40(PE.11)C0 Router - Local File Inclusion
# Exploit Title: Zyxel P-660HW-61 < 3.40(PE.11)C0 - Local File Inclusion
Cisco Catalyst 2960 IOS 12.2(55)SE1 – ‘ROCEM’ Remote Code Execution
#!/usr/bin/python
Cisco Catalyst 2960 IOS 12.2(55)SE11 – ‘ROCEM’ Remote Code Execution
#!/usr/bin/python
Sony Playstation 4 (PS4) 3.50 < 4.07 - WebKit Code Execution (PoC)
PS4 4.0x Code Execution
D-Link DWR-116 / DWR-116A1 – Arbitrary File Download
# Title: D-Link DWR-116 Arbitrary File Download
Intellinet NFC-30IR Camera – Multiple Vulnerabilities
Bitcrack Cyber Security - BitLabs Advisory
Cesanta Mongoose OS – Use-After-Free
#############################################################
Broadcom Wi-Fi SoC – ‘dhd_handle_swc_evt’ Heap Overflow
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1061
Broadcom Wi-Fi SoC – Heap Overflow ‘wlc_tdls_cal_mic_chk’ Due to Large RSN IE in TDLS Setup Confirm Frame
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1047
Moxa AWK-3131A 1.4 < 1.7 - 'Username' OS Command Injection
#!/usr/bin/env python2
Zyxel, EMG2926 < V1.00(AAQT.4)b8 - OS Command Injection
# Exploit Title: Zyxel, EMG2926 < V1.00(AAQT.4)b8 - OS Command Injection
Microsoft Xbox One 10.0.14393.2152 – Code Execution (PoC)
For Xbox-SystemOS version: 10.0.14393.2152 (rs1_xbox_rel_1610 161208-1218) fre, 12/14/2016
Intermec PM43 Industrial Printer – Local Privilege Escalation
# TITLE: Intermec Industrial Printers Local root with Busybox jailbreak
MikroTik RouterBoard 6.38.5 – Denial of Service
#!/usr/local/bin/perl
QNAP QTS < 4.2.4 - Domain Privilege Escalation
QNAP QTS Domain Privilege Escalation Vulnerability
D-Link DCS-936L Network Camera – Cross-Site Request Forgery
# Exploit Title: [D-Link DCS-936L network camera incomplete/weak CSRF protection vulnerability]
Solare Datensysteme Solar-Log Devices 2.8.4-56/3.5.2-85 – Multiple Vulnerabilities
SEC Consult Vulnerability Lab Security Advisory < 20170322-0 >
D-Link DGS-1510 – Multiple Vulnerabilities
================
Google Nest Cam 5.2.1 – Buffer Overflow Conditions Over Bluetooth LE
# Exploit Title: Google Nest Cam - Multiple Buffer Overflow Conditions Over Bluetooth LE