Grandstream GXV3275 < 1.0.3.30 - Multiple Vulnerabilities
The Grandstream GXV3275 is an Android-based VoIP phone. Several
hardware
hardware 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
AirLink101 SkyIPCam1620W – OS Command Injection
1. Advisory Information
Cradlepoint MBR1400 and MBR1200 – Local File Inclusion
# Exploit Title: Cradlepoint MBR LFI
INFOMARK IMW-C920W MiniUPnPd 1.0 – Denial of Service
#!/usr/bin/perl
D-Link DSL-2750u / DSL-2730u – (Authenticated) Local File Disclosure
#[+] Author: SATHISH ARTHAR
D-Link DSP-W w110 v1.05b01 – Multiple Vulnerabilities
# Exploit Title: D-Link DSP-W Arbitrary Arbitrary file upload
Polycom RealPresence Resource Manager < 8.4 - Multiple Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE-----
Huawei Home Gateway UPnP/1.0 IGD/1.00 – Password Change
#!/usr/bin/python
Huawei Home Gateway UPnP/1.0 IGD/1.00 – Password Disclosure
#!/usr/bin/python
ZTE ZXV10 W300 v3.1.0c_DR0 – UI Session Delete
Document Title:
Apexis IP CAM – Information Disclosure
Remoteexecution.net**
SysAid Help Desk 14.4 – Multiple Vulnerabilities
>> Multiple vulnerabilities in SysAid Help Desk 14.4
Alcatel-Lucent OmniSwitch – Cross-Site Request Forgery
Advisory: Alcatel-Lucent OmniSwitch Web Interface Cross-Site Request Forgery
GeoVision (GeoHttpServer) Webcams – Remote File Disclosure
#!/usr/bin/python
D-Link DSL-526B ADSL2+ AU_2.01 – Remote DNS Change
D-Link DSL-526B ADSL2+ AU_2.01
D-Link DSL-2730B AU_2.01 – Authentication Bypass DNS Change
D-Link DSL-2730B AU_2.01
TP-Link TD-W8950ND ADSL2+ – Remote DNS Change
TP-Link ADSL2+ TD-W8950ND
D-Link DSL-2780B DLink_1.01.14 – Remote DNS Change
D-Link DSL-2780B DLink_1.01.14
Broadlight Residential Gateway DI3124 – Remote DNS Change
Broadlight Residential Gateway DI3124
ZTE AC 3633R USB Modem – Multiple Vulnerabilities
# Exploit Title: ZTE AC 3633R USB Modem Multiple Vulnerabilities
Seagate Central 2014.0410.0026-F – Remote Facebook Access Token
#!/usr/bin/python
Seagate Central 2014.0410.0026-F – Remote Command Execution
#!/usr/bin/python
Aruba ClearPass Policy Manager – Persistent Cross-Site Scripting
===============================================================================
Phoenix Contact ILC 150 ETH PLC – Remote Control Script
#!/usr/bin/env python
ZTE F660 – Remote Configuration Download
Exploit Title : ZTE remote configuration download
ADB – Backup Archive File Overwrite Directory Traversal
ADB backup archive path traversal file overwrite
QNAP – Web Server Remote Code Execution via Bash Environment Variable Code Injection (Metasploit)
# Exploit Title: QNAP Web server remote code execution via Bash Environment Variable Code Injection
QNAP – Admin Shell via Bash Environment Variable Code Injection (Metasploit)
# Exploit Title: QNAP admin shell via Bash Environment Variable Code Injection
Sagem F@st 3304-V2 – Telnet Crash (PoC)
# Title : Sagem F@st 3304-V2 Telnet Crash POC
Sagem F@st 3304-V2 – Local File Inclusion
# Title : Sagem F@st 3304-V2 Directory Traversal Vulnerability
Seagate Business NAS 2014.00319 – Remote Code Execution
#!/usr/bin/env python
LG DVR LE6016D – Remote File Disclosure
----------------------------------------------------------------------
LG DVR LE6016D – Remote Users/Passwords Disclosure
#!/usr/bin/perl
ManageEngine Firewall Analyzer 8.0 – Directory Traversal / Cross-Site Scripting
################################################################################################
D-Link DSL-2740R – Remote DNS Change
#!/bin/bash
Cisco Ironport Appliances – Privilege Escalation
Cisco Ironport Appliances Privilege Escalation Vulnerability
Zhone GPON 2520 R4.0.2.566b – Crash (PoC)
from httplib2 import Http
Lorex LH300 Series – ActiveX Buffer Overflow (PoC)
Disclosure: 09/01/2014 / Last updated: 18/01/2015
D-Link DSL-2730B Modem – ‘Lancfg2get.cgi Persistent Cross-Site Scripting
# Exploit Title: D-Link DSL-2730B Modem lancfg2get.cgi Exploit XSS Injection Stored
D-Link DSL-2730B Modem – Cross-Site Scripting Injection Stored DnsProxy.cmd
# Exploit Title: D-Link DSL-2730B Modem dnsProxy.cmd Exploit XSS Injection Stored
D-Link DSL-2730B Modem – Cross-Site Scripting Injection Stored Wlsecrefresh.wl & Wlsecurity.wl
# Exploit Title: D-Link DSL-2730B Modem wlsecrefresh.wl & wlsecurity.wl Exploit XSS Injection Stored