Zyxel zysh – Format string
#!/usr/bin/expect -f
hardware
hardware 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Electrolink FM/DAB/TV Transmitter – Pre-Auth MPFS Image Remote Code Execution
Electrolink FM/DAB/TV Transmitter Pre-Auth MPFS Image Remote Code Execution
Electrolink FM/DAB/TV Transmitter – Unauthenticated Remote DoS
Electrolink FM/DAB/TV Transmitter Unauthenticated Remote DoS
Electrolink FM/DAB/TV Transmitter – Remote Authentication Removal
#!/usr/bin/env python
Electrolink FM/DAB/TV Transmitter (Login Cookie) – Authentication Bypass
Electrolink FM/DAB/TV Transmitter (Login Cookie) Authentication Bypass
Electrolink FM/DAB/TV Transmitter (controlloLogin.js) – Credentials Disclosure
Electrolink FM/DAB/TV Transmitter (controlloLogin.js) Credentials Disclosure
Electrolink FM/DAB/TV Transmitter (login.htm/mail.htm) – Credentials Disclosure
Electrolink FM/DAB/TV Transmitter (login.htm/mail.htm) Credentials Disclosure
TP-LINK TL-WR740N – Multiple HTML Injection
# Exploit Title: TP-LINK TL-WR740N - Multiple HTML Injection Vulnerabilities
TP-Link TL-WR740N – UnAuthenticated Directory Transversal
# Exploit Title: TP-Link TL-WR740N UnAuthenticated Directory Transversal
Ricoh Printer – Directory and File Exposure
#Exploit Title: Ricoh Printer Directory and File Exposure
Atcom 2.7.x.x – Authenticated Command Injection
# Exploit Title: Atcom 2.7.x.x - Authenticated Command Injection
Tinycontrol LAN Controller v3 (LK3) 1.58a – Remote Credentials Extraction
#!/usr/bin/env python
Tinycontrol LAN Controller v3 (LK3) 1.58a – Remote Denial Of Service
Exploit Title: Tinycontrol LAN Controller v3 (LK3) 1.58a - Remote Denial Of Service
Ruijie Reyee Mesh Router – MITM Remote Code Execution (RCE)
# Exploit Title: Ruijie Reyee Wireless Router firmware version B11P204 - MITM Remote Code Execution (RCE)
Techview LA-5570 Wireless Gateway Home Automation Controller – Multiple Vulnerabilities
# Exploit Title: Techview LA-5570 Wireless Gateway Home Automation Controller - Multiple Vulnerabilities
DLINK DPH-400SE – Exposure of Sensitive Information
# Exploit Title : DLINK DPH-400SE - Exposure of Sensitive Information
EuroTel ETL3100 – Transmitter Unauthenticated Config/Log Download
# Exploit Title: EuroTel ETL3100 - Transmitter Unauthenticated Config/Log Download
EuroTel ETL3100 – Transmitter Authorization Bypass (IDOR)
# Exploit Title: EuroTel ETL3100 - Transmitter Authorization Bypass (IDOR)
EuroTel ETL3100 – Transmitter Default Credentials
#Exploit Title: EuroTel ETL3100 Transmitter Default Credentials
TP-Link Archer AX21 – Unauthenticated Command Injection
#!/usr/bin/python3
Shelly PRO 4PM v0.11.0 – Authentication Bypass
#!/bin/bash
ReyeeOS 1.204.1614 – MITM Remote Code Execution (RCE)
# Exploit Title: ReyeeOS 1.204.1614 - MITM Remote Code Execution (RCE)
Hikvision Hybrid SAN Ds-a71024 Firmware – Multiple Remote Code Execution
# Exploit Title: Hikvision Hybrid SAN Ds-a71024 Firmware - Multiple Remote Code Execution
TP-Link TL-WR740N – Authenticated Directory Transversal
# Exploit Title: TP-Link TL-WR740N - Authenticated Directory Transversal
ABB FlowX v4.00 – Exposure of Sensitive Information
# Exploit Title: ABB FlowX v4.00 - Exposure of Sensitive Information
Cisco UCS-IMC Supervisor 2.2.0.0 – Authentication Bypass
[+] Exploit Title: Cisco UCS-IMC Supervisor 2.2.0.0 - Authentication Bypass
Ateme TITAN File 3.9 – SSRF File Enumeration
#Exploit Title: Ateme TITAN File 3.9 - SSRF File Enumeration
TP-Link TL-WR940N V4 – Buffer OverFlow
# Exploit Title: TP-Link TL-WR940N V4 - Buffer OverFlow
D-Link DAP-1325 – Broken Access Control
# Exploit Title: D-Link DAP-1325 - Broken Access Control
MCL-Net 4.3.5.8788 – Information Disclosure
# Exploit Title: MCL-Net 4.3.5.8788 - Information Disclosure
HiSecOS 04.0.01 – Privilege Escalation
# Exploit Title: HiSecOS 04.0.01 - Privilege Escalation
Nokia ASIKA 7.13.52 – Hard-coded private key disclosure
// Exploit Title: Nokia ASIKA 7.13.52 - Hard-coded private key disclosure
Symantec SiteMinder WebAgent v12.52 – Cross-site scripting (XSS)
Exploit Title: Symantec SiteMinder WebAgent v12.52 - Cross-site scripting (XSS)
Anevia Flamingo XL 3.2.9 – Remote Root Jailbreak
Exploit Title: Anevia Flamingo XL 3.2.9 - Remote Root Jailbreak
Anevia Flamingo XL 3.6.20 – Authenticated Root Remote Code Execution
Exploit Title: Anevia Flamingo XL 3.6.20 - Authenticated Root Remote Code Execution
Anevia Flamingo XS 3.6.5 – Authenticated Root Remote Code Execution
Exploit Title: Anevia Flamingo XS 3.6.5 - Authenticated Root Remote Code Execution
Screen SFT DAB 600/C – Unauthenticated Information Disclosure (userManager.cgx)
# Exploit Title: Screen SFT DAB 600/C - Unauthenticated Information Disclosure (userManager.cgx)
Screen SFT DAB 600/C – Authentication Bypass Reset Board Config
#!/usr/bin/env python3
Screen SFT DAB 600/C – Authentication Bypass Admin Password Change
#!/usr/bin/env python3
Screen SFT DAB 600/C – Authentication Bypass Erase Account
#!/usr/bin/env python3
Screen SFT DAB 600/C – Authentication Bypass Password Change
#!/usr/bin/env python3
Screen SFT DAB 600/C – Authentication Bypass Account Creation
#!/usr/bin/env python3
PnPSCADA v2.x – Unauthenticated PostgreSQL Injection
# Exploit Title: PnPSCADA v2.x - Unauthenticated PostgreSQL Injection
Optoma 1080PSTX Firmware C02 – Authentication Bypass
# Exploit Title: Optoma 1080PSTX Firmware C02 - Authentication Bypass
Epson Stylus SX510W Printer Remote Power Off – Denial of Service
# Exploit Title: Epson Stylus SX510W Printer Remote Power Off - Denial of Service (PoC)
FS-S3900-24T4S – Privilege Escalation
# Exploit Title: FS-S3900-24T4S Privilege Escalation
Franklin Fueling Systems TS-550 – Default Password
# Exploit Title: Franklin Fueling Systems TS-550 - Default Password