hardware

Magnet Networks Tesley CPVA 642 Router – Weak WPA-PSK Passphrase Algorithm

# Exploit Title: Magnet Networks – Weak WPA-PSK passphrases used in Tesley CPVA 642 Router

ATCOM PBX IP01 / IP08 / IP4 / IP2G4A – Authentication Bypass

# Title: ATCOM PBX system , auth bypass exploit

Hyperoptic (Tilgin) Router HG23xx – Multiple Vulnerabilities

Hyperoptic (Tilgin) Router HG23xx Multiple XSS And CSRF Vulnerabilities

Cisco ASA Software 8.x/9.x – IKEv1 / IKEv2 Buffer Overflow

#!/usr/bin/env python2.7

JVC HDRs / Net (Multiple Cameras) – Multiple Vulnerabilities

| | | |

Sony Playstation 4 (PS4) 1.76 – ‘dlclose’ Linux Kernel Loader

Code written based on info available here http://cturt.github.io/dlclose-overflow.html

RomPager 4.34 (Multiple Router Vendors) – ‘Misfortune Cookie’ Authentication Bypass

# Title: Misfortune Cookie Exploit (RomPager

Gemtek CPE7000 – WLTCS-106 ‘sysconf.cgi’ Remote Command Execution (Metasploit)

##

Gemtek CPE7000 – WLTCS-106 Administrator SID Retriever (Metasploit)

##

Sony Playstation 4 (PS4) < 2.50 - WebKit Code Execution (PoC)

CVE 2014-1303 Proof Of Concept for PS4

Gemtek CPE7000 / WLTCS-106 – Multiple Vulnerabilities

#!/usr/bin/python

TH692 Outdoor P2P HD Waterproof IP Camera – Hard-Coded Credentials

Exploit Title: TH692- Outdoor P2P HD Waterproof IP Camera hardcoded credentials

Brickcom Corporation Network Cameras – Multiple Vulnerabilities

_ _ _ _

Axis Network Cameras – Multiple Vulnerabilities

_ _ _ _

Hikvision Digital Video Recorder – Cross-Site Request Forgery

PLANET Technology IP Surveillance Cameras – Multiple Vulnerabilities

_ _ _ _

PQI Air Pen Express 6W51-0000R2/6W51-0000R2XXX – Multiple Vulnerabilities

_ _ _ _

MOBOTIX Video Security Cameras – Cross-Site Request Forgery (Add Admin)

Add admin user Testingus:

Trend Micro Deep Discovery Inspector 3.8/3.7 – Cross-Site Request Forgery

[+] Credits: John Page aka hyp3rlinx

Multiple CCTV-DVR Vendors – Remote Code Execution

#!/usr/bin/python

D-Link DWR-932 Firmware 4.00 – Authentication Bypass

D-Link DWR-932 Firmware

Cisco UCS Manager 2.1(1b) – Remote Command Injection (Shellshock)

#!/usr/bin/python

Schneider Electric SBO / AS – Multiple Vulnerabilities

# Discovered by: Karn Ganeshen

D-Link DCS-930L – (Authenticated) Remote Command Execution (Metasploit)

##

Netgear NMS300 ProSafe Network Management System – Multiple Vulnerabilities

>> Remote code execution / arbitrary file download in NETGEAR ProSafe Network Management System NMS300

D-Link DVG­N5402SP – Multiple Vulnerabilities

# Exploit Title: [DLink DVG­N5402SP Multiple Vulnerabilities]

GE Industrial Solutions UPS SNMP Adapter < 4.8 - Multiple Vulnerabilities

# Exploit Title: [GE Industrial Solutions - UPS SNMP Adapter Command

Viprinet Multichannel VPN Router 300 – Persistent Cross-Site Scripting

Vulnerability title: Multiple Instances Of Cross-site Scripting In Viprinet Multichannel VPN Router 300

Netgear WNR1000v4 – Authentication Bypass

'''

Huawei Mate 7 – ‘/dev/hifi_misc’ Privilege Escalation

#include

FingerTec Fingerprint Reader – Remote Access and Remote Enrolment

# Exploit Title: Default Root Password and Remote Enrollment on FingerTec Devices

Apple watchOS 2 – Crash (PoC)

#[+] Title: Apple watchOS - Remote Crash Exploit

AVM FRITZ!Box < 6.30 - Remote Buffer Overflow

Advisory: AVM FRITZ!Box: Remote Code Execution via Buffer Overflow

D-Link DCS-931L – Arbitrary File Upload (Metasploit)

##

MediaAccess TG788vn – File Disclosure

Vulnerable hardware : MediaAccess TG788vn with Cisco http firewall

Polycom VVX-Series Business Media Phones – Directory Traversal

Polycom VVX-Series Business Media Phones Path Traversal Vulnerability

Siemens Simatic S7 1200 – CPU Command Module (Metasploit)

# Exploit Title: Simatic S7 1200 CPU command module

Skybox Platform < 7.0.611 - Multiple Vulnerabilities

SEC Consult Vulnerability Lab Security Advisory < 20151210-0 >

WIMAX MT711x – Multiple Vulnerabilities

### Exploit Title: WIMAX MT711x - Multiple Vulnerabilities

WIMAX LX350P(WIXFMR-108) – Multiple Vulnerabilities

### Exploit Title: WIMAX LX350P(WIXFMR-108) - Multiple Vulnerabilities

Belkin N150 Wireless Router F9K1009 v1 – Multiple Vulnerabilities

##Full Disclosure:

ZTE ZXHN H108N R1A / ZXV10 W300 Routers – Multiple Vulnerabilities

# Exploit Title: [ZTE ZXHN H108N R1A + ZXV10 W300 routers - multiple

ZTE ADSL ZXV10 W300 Modems – Multiple Vulnerabilities

# Exploit Title: [ZTE ADSL ZXV10 W300 modems - Multiple vulnerabilities]

F5 iControl – ‘iCall::Script’ Root Command Execution (Metasploit)

##

D-Link DGL5500 – HNAP Buffer Overflow

## Advisory Information

D-Link DIR-880L – Multiple Buffer Overflow Vulnerabilities

## Advisory Information

D-Link DIR-601 – Command Injection

## Advisory Information

D-Link DIR-615 – Multiple Buffer Overflow Vulnerabilities

## Advisory Information

D-Link DIR-645 – Multiple UPNP Vulnerabilities

## Advisory Information

D-Link DIR-815 – Multiple Vulnerabilities

## Advisory Information