Sielco PolyEco Digital FM Transmitter 2.0.6 – Account Takeover / Lockout / EoP
## Exploit Title: Sielco PolyEco Digital FM Transmitter 2.0.6 - Account Takeover / Lockout / EoP
hardware
hardware 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Sielco PolyEco Digital FM Transmitter 2.0.6 – Unauthenticated Information Disclosure
## Exploit Title: Sielco PolyEco Digital FM Transmitter 2.0.6 - Unauthenticated Information Disclosure
Sielco PolyEco Digital FM Transmitter 2.0.6 – Radio Data System POST Manipulation
## Exploit Title: Sielco PolyEco Digital FM Transmitter 2.0.6 - Radio Data System POST Manipulation
Sielco PolyEco Digital FM Transmitter 2.0.6 – Authorization Bypass Factory Reset
## Exploit Title: Sielco PolyEco Digital FM Transmitter 2.0.6 - Authorization Bypass Factory Reset
Sielco PolyEco Digital FM Transmitter 2.0.6 – Authentication Bypass Exploit
#!/usr/bin/env python3
Sielco Analog FM Transmitter 2.12 – Cross-Site Request Forgery
CSRF Add Admin:
Sielco Analog FM Transmitter 2.12 – ‘id’ Cookie Brute Force Session Hijacking
## Exploit Title: Sielco Analog FM Transmitter 2.12 - 'id' Cookie Brute Force Session Hijacking
pfsenseCE v2.6.0 – Anti-brute force protection bypass
#!/usr/bin/python3
FortiRecorder 6.4.3 – Denial of Service
# Exploit Title: FortiRecorder 6.4.3 - Denial of Service
Altenergy Power Control Software C1.2.5 – OS command injection
# Exploit Title: Altenergy Power Control Software C1.2.5 - OS command injection
Franklin Fueling Systems TS-550 – Exploit and Default Password
# Exploit Title: Franklin Fueling Systems TS-550 - Exploit and Default Password
Schneider Electric v1.0 – Directory traversal & Broken Authentication
# Exploit Title: Schneider Electric v1.0 - Directory traversal & Broken Authentication
Tenda N300 F3 12.01.01.48 – Malformed HTTP Request Header Processing
#!/usr/bin/python3
MAC 1200R – Directory Traversal
# Exploit Title: MAC 1200R - Directory Traversal
WIMAX SWC-5100W Firmware V(1.11.0.1 :1.9.9.4) – Authenticated RCE
# Exploit Title: WIMAX SWC-5100W Firmware V(1.11.0.1 :1.9.9.4) - Authenticated RCE
Osprey Pump Controller 1.0.1 – (eventFileSelected) Command Injection
# Exploit Title: Osprey Pump Controller 1.0.1 - (eventFileSelected) Command Injection
Osprey Pump Controller 1.0.1 – Unauthenticated Remote Code Execution Exploit
#!/usr/bin/env python
Osprey Pump Controller 1.0.1 – Cross-Site Request Forgery
CSRF Add User:
Osprey Pump Controller 1.0.1 – Authentication Bypass Credentials Modification
#!/usr/bin/env python
Osprey Pump Controller v1.0.1 – Unauthenticated Reflected XSS
# Exploit Title: Osprey Pump Controller v1.0.1 - Unauthenticated Reflected XSS
Osprey Pump Controller 1.0.1 – (userName) Blind Command Injection
# Exploit Title: Osprey Pump Controller 1.0.1 - (userName) Blind Command Injection
Osprey Pump Controller 1.0.1 – (pseudonym) Semi-blind Command Injection
# Exploit Title: Osprey Pump Controller 1.0.1 - (pseudonym) Semi-blind Command Injection
Osprey Pump Controller 1.0.1 – Administrator Backdoor Access
# Exploit Title: Osprey Pump Controller 1.0.1 - Administrator Backdoor Access
Osprey Pump Controller 1.0.1 – Unauthenticated File Disclosure
# Exploit Title: Osprey Pump Controller 1.0.1 - Unauthenticated File Disclosure
Osprey Pump Controller 1.0.1 – Predictable Session Token / Session Hijack
# Exploit Title: Osprey Pump Controller 1.0.1 - Predictable Session Token / Session Hijack
ABUS Security Camera TVIP 20000-21150 – LFI, RCE and SSH Root Access
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Arris Router Firmware 9.1.103 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: Arris Router Firmware 9.1.103 - Remote Code Execution (RCE) (Authenticated)
EasyNas 1.1.0 – OS Command Injection
# Exploit Title: EasyNas 1.1.0 - OS Command Injection
SOUND4 LinkAndShare Transmitter 1.1.2 – Format String Stack Buffer Overflow
# Exploit Title: SOUND4 LinkAndShare Transmitter 1.1.2 - Format String Stack Buffer Overflow
Dell EMC Networking PC5500 firmware versions 4.1.0.22 and Cisco Sx / SMB – Information Disclosure
# Exploit Title: Dell EMC Networking PC5500 firmware versions 4.1.0.22 and Cisco Sx / SMB - Information Disclosure
D-Link DIR-846 – Remote Command Execution (RCE) vulnerability
# Exploit Title: D-Link DIR-846 - Remote Command Execution (RCE) vulnerability
Nexxt Router Firmware 42.103.1.5095 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: Nexxt Router Firmware 42.103.1.5095 - Remote Code Executio=
Hughes Satellite Router HX200 v8.3.1.14 – Remote File Inclusion
Exploit Title: Hughes Satellite Router HX200 v8.3.1.14 - Remote File Inclusion
GeoVision Camera GV-ADR2701 – Authentication Bypass
# Exploit Title: GeoVision Camera GV-ADR2701 - Authentication Bypass
ProLink PRS1841 PLDT Home fiber – Default Password
# Exploit Title: Router backdoor - ProLink PRS1841 PLDT Home fiber
qubes-mirage-firewall v0.8.3 – Denial Of Service (DoS)
# Exploit Title: qubes-mirage-firewall v0.8.3 - Denial Of Service (DoS)
ASKEY RTF3505VW-N1 – Privilege Escalation
# Exploit Title: ASKEY RTF3505VW-N1 - Privilege escalation
Router ZTE-H108NS – Authentication Bypass
# Exploit Title: Router ZTE-H108NS - Authentication Bypass
Router ZTE-H108NS – Stack Buffer Overflow (DoS)
# Exploit Title: ZTE-H108NS - Stack Buffer Overflow (DoS)
Uniview NVR301-04S2-P4 – Reflected Cross-Site Scripting (XSS)
# Exploit Title: Uniview NVR301-04S2-P4 - Reflected Cross-Site Scripting (XSS)
DSL-124 Wireless N300 ADSL2+ – Backup File Disclosure
# Exploit Title: DSL-124 Wireless N300 ADSL2+ - Backup File Disclosure
Tapo C310 RTSP server v1.3.0 – Unauthorised Video Stream Access
# Exploit Title: Tapo C310 RTSP server v1.3.0- Unauthorised Video Stream Access
MiniDVBLinux 5.4 – Arbitrary File Read
# Exploit Title: MiniDVBLinux 5.4 - Arbitrary File Read
MiniDVBLinux 5.4 – Remote Root Command Injection
# Exploit Title: MiniDVBLinux 5.4 - Remote Root Command Injection
MiniDVBLinux 5.4 – Unauthenticated Stream Disclosure
# Exploit Title: MiniDVBLinux 5.4 - Unauthenticated Stream Disclosure
MiniDVBLinux 5.4 – Change Root Password
# Exploit Title: MiniDVBLinux 5.4 - Change Root Password