Ruckus Wireless Zoneflex 2942 Wireless Access Point – Authentication Bypass
Exploit Title: Ruckus Wireless Zoneflex 2942 Wireless Access Point vulnerable to authentication bypass
hardware
hardware 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Dahua DVR 2.608.0000.0/2.608.GV00.0 – Authentication Bypass (Metasploit)
Dahua DVR Authentication Bypass - CVE-2013-6117
LevelOne WBR-3406TX Router – Cross-Site Request Forgery
source: https://www.securityfocus.com/bid/63908/info
WBR-3406 Wireless Broadband NAT Router – Web-Console Password Change Bypass / Cross-Site Request Forgery
# -----------------------------------------------------------
TOSHIBA e-Studio 232/233/282/283 – Cross-Site Request Forgery (Change Admin Password)
# Exploit Title: TOSHIBA e-Studio 232/233/282/283 Change Admin Password CSRF Vulnerability
Sagemcom F@st 3184 2.1.11 – Multiple Vulnerabilities
+------------------------------------------------------------------------------+
Vivotek IP Cameras – RTSP Authentication Bypass
Core Security - Corelabs Advisory
Unicorn Router WB-3300NR – Cross-Site Request Forgery (Factory Reset/DNS Change)
# Exploit Title: Unicorn Router WB-3300NR CSRF (Factory Reset/DNS Change)
Watchguard Firewall XTM 11.7.4u1 – Remote Buffer Overflow
#!/usr/bin/perl -w
Stem Innovation – ‘IZON’ Hard-Coded Credentials
Stem Innovation ‘IZON’ Hard-coded Credentials (CVE-2013-6236)
Pirelli Discus DRG A125g – Password Disclosure
#!/usr/bin/perl
ARRIS DG860A – NVRAM Backup Password Disclosure
#!/usr/bin/env ruby
Level One Enterprise Access Point (Multiple Devices) – ‘backupCfg.cgi’ Security Bypass
source: https://www.securityfocus.com/bid/63168/info
D-Link / PLANEX COMMUNICATIONS – ‘RuntimeDiagnosticPing()’ Remote Stack Buffer Overflow
source: https://www.securityfocus.com/bid/63234/info
Fortinet FortiAnalyzer – Cross-Site Request Forgery
source: https://www.securityfocus.com/bid/63663/info
ONO Hitron CDE-30364 Router – Denial of Service
#!/usr/bin/python
Asus RT-N66U 3.0.0.4.374_720 – Cross-Site Request Forgery
Exploit Title: CSRF Asus RT-N66U Arbitrary Command Execution
Tenda W309R Router 5.07.46 – Configuration Disclosure
---------------------------------------------------
Hewlett-Packard (HP) 2620 Switch Series. Edit Admin Account – Cross-Site Request Forgery
# Exploit Title: Hewlett-Packard 2620 Switch Series. Edit Admin Account - CSRF Vulnerability
Good for Enterprise 2.2.2.1611 – Cross-Site Scripting
The vulnerable versions are v2.2.2.1611 and earlier
FiberHome Modem Router HG-110 – Authentication Bypass To Remote Change DNS Servers
# Exploit Title: Directory Path Traversal FiberHome Modem Router HG-110 / Remote Change DNS Servers
Router ONO Hitron CDE-30364 – Cross-Site Request Forgery
# Exploit Title: Router ONO Hitron CDE-30364 - CSRF Vulnerability
Vestel TV 42pf9322 – Denial of Service
#!/usr/bin/python
D-Link DSL-2740B – Multiple Cross-Site Request Forgery Vulnerabilities
+--------------------------------------------------------------------------------------------------------------------...
D-Link DIR-505 1.06 – Multiple Vulnerabilities
Multiple vulnerabilities on D-Link Dir-505 devices
MikroTik RouterOS – sshd (ROSSSH) Remote Heap Corruption
During an audit the Mikrotik RouterOS sshd (ROSSSH) has been identified to have a remote previous to authentication h...
TP-Link TD-W8951ND – Multiple Vulnerabilities
-----------
Zoom Telephonics ADSL Modem/Router – Multiple Vulnerabilities
Five models of the Zoom Telephonics ADSL Modem/Router line suffer from
AVTECH DVR Firmware 1017-1003-1009-1003 – Multiple Vulnerabilities
Core Security - Corelabs Advisory
Belkin G Wireless Router Firmware 5.00.12 – Remote Code Execution
+-----------------------------------+
Netgear ProSafe – Denial of Service
#!/usr/bin/python
Netgear ProSafe – Information Disclosure
#!/usr/bin/python
Sitecom N300/N600 Devices – Multiple Vulnerabilities
Multiple vulnerabilities on Sitecom N300/N600 devices
Samsung DVR Firmware 1.10 – Authentication Bypass
Title: Samsung DVR authentication bypass
IBM 1754 GCM 1.18.0.22011 – Remote Command Execution
I. Product description
AlgoSec Firewall Analyzer – Cross-Site Scripting
source: https://www.securityfocus.com/bid/61733/info
Hikvision IP Cameras 4.1.0 b130111 – Multiple Vulnerabilities
Core Security - Corelabs Advisory
TP-Link TL-SC3171 IP Cameras – Multiple Vulnerabilities
Core Security - Corelabs Advisory
Western Digital My Net Wireless Routers – Password Disclosure
Vulnerable Systems:
MiCasaVerde VeraLite 1.5.408 – Multiple Vulnerabilities
Trustwave SpiderLabs Security Advisory TWSL2013-019:
Karotz Smart Rabbit 12.07.19.00 – Multiple Vulnerabilities
Trustwave SpiderLabs Security Advisory TWSL2013-021:
INSTEON Hub 2242-222 – Lack of Web and API Authentication
Trustwave SpiderLabs Security Advisory TWSL2013-023: