hardware

D-Link DI-524 – Cross-Site Request Forgery

Title: D-Link DI-524 - Cross-Site-Request-Forgery Vulnerability

Cisco Unified Communications Manager 7/8/9 – Directory Traversal

# Exploit Title: Cisco Unified Communications Manager Administrative Web Interface Directory traversal CVE-2013-5528

TP-LINK TD-W8951ND – Denial of Service

# Exploit Title: TP-LINK TD-W8951ND - Denial of Service

Shuttle Tech ADSL Wireless 920 WM – Multiple Vulnerabilities

######################

BlackStratus LOGStorm 4.5.1.35/4.5.1.96 – Remote Code Execution

#!/usr/bin/python

Xfinity Gateway – Remote Code Execution

# Exploit Title: Xfinity Gateway: Remote Code Execution

Xfinity Gateway – Cross-Site Request Forgery

EXPLOIT TITLE: CSRF RCE XFINITY WEB GATEWAY

Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 – Multiple Vulnerabilities

# Exploit Title: [Trend Micro Interscan Web Security Virtual Appliance (IWSVA) 6.5.x Multiple Vulnerabilities]

Tenda/Dlink/Tplink TD-W8961ND – ‘DHCP’ Cross-Site Scripting

Document Title:

TP-LINK TDDP – Multiple Vulnerabilities

1. Advisory Information

Crestron AM-100 – Multiple Vulnerabilities

=================================================================

PLANET ADSL Router AND-4101 – Remote File Disclosure

#!/bin/sh

Netgear WNR500/WNR612v3/JNR1010/JNR2010 ADSL Router – (Authenticated) Remote File Disclosure

#!/bin/sh

Netgear JNR1010 ADSL Router – (Authenticated) Remote File Disclosure

#!/bin/sh

D-Link DSL-2730U/2750U/2750E ADSL Router – Remote File Disclosure

#!/bin/sh

MOVISTAR BHS_RTA ADSL Router – Remote File Disclosure

#!/bin/sh

Acoem 01dB CUBE/DUO Smart Noise Monitor – Password Change

#!/bin/sh

LifeSize Room 5.0.9 – Multiple Vulnerabilities

Source: https://github.com/XiphosResearch/exploits/tree/master/deathsize

SunellSecurity NVR / Camera – Denial of Service

# Exploit Title: SunellSecurity NVR / Cams - Buffer overflow in CGI

InfraPower PPS-02-S Q213V1 – Hard-Coded Credentials

InfraPower PPS-02-S Q213V1 Hard-coded Credentials Remote Root Access

InfraPower PPS-02-S Q213V1 – Remote Command Execution

InfraPower PPS-02-S Q213V1 Unauthenticated Remote Root Command Execution

Komfy Switch with Camera DKZ-201S/W – WiFi Password Disclosure

#!/usr/bin/python

Industrial Secure Routers EDR-810 / EDR-G902 / EDR-G903 – Insecure Configuration Management

Title: Industrial Secure Routers - Insecure Configuration Management

Orange Inventel LiveBox 5.08.3-sp – Cross-Site Request Forgery

# Exploit Title: Orange Inventel LiveBox CSRF

TrendMicro InterScan Web Security Virtual Appliance – ‘Shellshock’ Remote Command Injection

#!/usr/bin/env python

MiCasaVerde VeraLite – Remote Code Execution

# Exploit Title: MiCasa VeraLite Remote Code Execution

Exagate WEBPack Management System – Multiple Vulnerabilities

Document Title:

Billion 7700NR4 Router – Remote Command Execution

# Title : Billion Router 7700NR4 Remote Root Command Execution

Grandsteam GXV3611_HD – SQL Injection

# Exploit Title: Grandstream GXV3611_HD Telnet SQL Injection and backdoor command

TP-Link Archer CR-700 – Cross-Site Scripting

# Exploit Title: TP-Link Archer CR-700 XSS vulnerability

NetMan 204 – Backdoor Account

NetMan 204 - Backdoor Account

Cisco ASA 9.2(3) – ‘EXTRABACON’ Authentication Bypass

#

Vodafone Mobile Wifi – Reset Admin Password

import urllib2

Sony Playstation 4 (PS4) 3.15 < 3.55 - WebKit Code Execution (PoC)

PS4 3.55 Unsigned Code Execution

Belkin F9K1122v1 1.00.30 – Buffer Overflow (via Cross-Site Request Forgery)

import socket, sys , base64, struct, string, urllib

ObiHai ObiPhone 1032/1062 < 5-0-0-3497 - Multiple Vulnerabilities

ObiHai ObiPhone - Multiple Vulnerabilities

VideoIQ Camera – Local File Disclosure

Fortigate Firewalls – ‘EGREGIOUSBLUNDER’ Remote Code Execution

# Exploit Title: Fortigate Firewalls - Remote Code Execution (EGREGIOUSBLUNDER)

TOPSEC Firewalls – ‘ELIGIBLEBACHELOR’ Remote Command Execution

# Exploit Title: TOPSEC Firewalls - Remote Exploit (ELIGIBLEBACHELOR)

Cisco ASA / PIX – ‘EPICBANANA’ Local Privilege Escalation

# Exploit Title: Cisco ASA / PIX - Privilege Escalation (EPICBANANA)

Cisco ASA 8.x – ‘EXTRABACON’ Authentication Bypass

# Exploit Title: Cisco ASA 8.X Authentication Bypass

Samsung Smart Home Camera SNH-P-6410 – Command Injection

# E-DB Note: source ~ https://www.pentestpartners.com/blog/samsungs-smart-camera-a-tale-of-iot-network-security/

Xfinity Gateway (Technicolor DPC3941T) – Cross-Site Request Forgery

# Exploit Title: CSRF XFINITY Gateway product Technicolor(previously Cisco) DPC3941T

NASdeluxe NDL-2400r 2.01.09 – OS Command Injection

-----BEGIN PGP SIGNED MESSAGE-----

NUUO NVRmini2 / NVRsolo / Crystal Devices / NETGEAR ReadyNAS Surveillance Application – Multiple Vulnerabilities

>> Multiple vulnerabilities in NUUO NVRmini2 / NVRsolo / Crystal devices and NETGEAR ReadyNAS Surveillance application

Bellini/Supercook Wi-Fi Yumi SC200 – Multiple Vulnerabilities

'''

Compal CH7465LG-LC Modem/Router CH7465LG-NCIP-4.50.18.13-NOSH – Multiple Vulnerabilities

Compal CH7465LG-LC modem/router multiple vulnerabilities

Hitron CGNV4 Modem/Router 4.3.9.9-SIP-UPC – Multiple Vulnerabilities

Hitron CGNV4 modem/router multiple vulnerabilities

Meinberg NTP Time Server ELX800/GPS M4x V5.30p – Remote Command Execution / Escalate Privileges

#!/usr/bin/python

Option CloudGate CG0192-11897 – Multiple Vulnerabilities

Option CloudGate Insecure Direct Object References Authorization Bypass