hardware

hardware 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

QNAP Turbo NAS 3.6.1 Build 0302T – Multiple Vulnerabilities

Sense of Security - Security Advisory - SOS-12-006

2012-06-18 Sense of Security webapps

Huawei HG866 – Authentication Bypass

# Exploit Title: Huawei HG866 Authentication Bypass

2012-06-16 hkm webapps

Juniper Networks Mobility System Software – ‘/aaa/wba_login.html’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/54075/info

2012-06-14 Craig Lambert remote

Edimax IC-3030iWn – UDP Packet Password Information Disclosure

source: https://www.securityfocus.com/bid/54006/info

2012-06-14 y3dips remote

Wyse – Machine Remote Power Off (Denial of Service) (Metasploit)

require 'msf/core'

2012-06-14 it.solunium dos

F5 BIG-IP – SSH Private Key Exposure (Metasploit)

##

2012-06-13 Metasploit remote

F5 BIG-IP – Authentication Bypass

#!/usr/bin/python

2012-06-12 David Kennedy (ReL1K) remote

F5 BIG-IP – Authentication Bypass (PoC)

Matta Consulting - Matta Advisory

2012-06-11 Florent Daigniere dos

HP StorageWorks P4000 – Virtual SAN Appliance Command Execution (Metasploit)

##

2012-05-21 Metasploit remote

Belkin N150 Wireless Router – Password Disclosure

============================================

2012-05-11 Avinash Tangirala webapps

Linksys WRT54GL Wireless Router – Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/53427/info

2012-05-08 Kalashinkov3 remote

iGuard Security Access Control Device Firmware 3.6.7427A – Cross-Site Scripting

source: https://www.securityfocus.com/bid/53355/info

2012-05-02 Usman Saeed webapps

Mikrotik Router – Denial of Service

#!/usr/bin/python

2012-05-01 PoURaN dos

RuggedCom Devices – Backdoor Access

Title: Undocumented Backdoor Access to RuggedCom Devices

2012-04-24 jc remote

Samsung D6000 TV – Multiple Vulnerabilities

#######################################################################

2012-04-19 Luigi Auriemma dos

EMC IRM License Server 4.6.1.1995 – Denial of Service

#######################################################################

2012-04-12 Luigi Auriemma dos

Sony Bravia – Remote Denial of Service

# Exploit Title: Sony Bravia Remote Denial of Service

2012-04-05 Gabriel Menezes Nunes dos

Arbor Networks Peakflow SP 3.6.1 – ‘index/’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/52881/info

2012-04-03 b.saleh remote

EMC Data Protection Advisor 5.8.1 – Denial of Service

#######################################################################

2012-03-31 Luigi Auriemma dos

TRENDnet SecurView TV-IP121WN Wireless Internet Camera – UltraMJCam ActiveX Control OpenFileDlg WideCharToMultiByte Remote Stack Buffer Overflow

TRENDnet SecurView TV-IP121WN Wireless Internet Camera UltraMJCam ActiveX

2012-03-28 rgod remote

D-Link DCS-5605 Network Surveillance – ActiveX Control ‘DcsCliCtrl.dll’ lstrcpyW Remote Buffer Overflow

D-Link SecuriCam DCS-5605 Network Surveillance ActiveX Control

2012-03-28 rgod remote

Cyberoam UTM – Multiple Vulnerabilities

SECURITY ADVISORY: cyberoam-utm-command-executaion

2012-03-22 Saurabh Harit webapps

D-Link DIR-605 – Cross-Site Request Forgery

# Exploit Title: D-Link DIR-605 CSRF Vulnerability

2012-03-21 iqzer0 webapps

F5 FirePass 7.0 – SQL Injection

source: https://www.securityfocus.com/bid/52653/info

2012-03-14 anonymous remote

Sitecom WLM-2501 – Cross-Site Request Forgery

+--------------------------------------------------------------------------------------------------------------------...

2012-03-14 Ivano Binetti webapps

TP-Link TL-WR740N 111130 – ‘ping_addr’ HTML Injection

source: https://www.securityfocus.com/bid/52424/info

2012-03-12 l20ot remote

Barracuda CudaTel Communication Server 2.0.029.1 – Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/52358/info

2012-03-08 Benjamin Kunz Mejri remote

Yealink VOIP Phone – Persistent Cross-Site Scripting

==============================================================

2012-02-29 Narendra Shinde webapps

Endian Firewall 2.4 – ‘dansguardian.cgi?addrule’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/52076/info

2012-02-27 Vulnerability Research Laboratory remote

Endian Firewall 2.4 – ‘dnat.cgi?createrule’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/52076/info

2012-02-27 Vulnerability Research Laboratory remote

Endian Firewall 2.4 – ‘openvpn_users.cgi?PATH_INFO’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/52076/info

2012-02-27 Vulnerability Research Laboratory remote

D-Link DCS – ‘security.cgi’ Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/52134/info

2012-02-23 Rigan Iimrigan remote

Snom IP Phone – Privilege Escalation

Sense of Security - Security Advisory - SOS-12-001

2012-02-23 Sense of Security webapps

D-Link DSL-2640B ADSL Router – Authentication Bypass

+--------------------------------------------------------------------------------------------------------------------...

2012-02-22 Ivano Binetti webapps

D-Link DCS Series – Cross-Site Request Forgery (Change Admin Password)

Title: Dlink DCS series CSRF Change Admin Password

2012-02-22 rigan webapps

Sagem F@ST 2604 ADSL Router – Cross-Site Request Forgery

================================================================================

2012-02-22 KinG Of PiraTeS webapps

Mercury MR804 Router – Multiple HTTP Header Fields Denial of Service Vulnerabilities

source: https://www.securityfocus.com/bid/52106/info

2012-02-21 demonalex dos

Xavi 7968 ADSL Router – ‘/webconfig/wan/confirm.html/confirm?pvcName’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/52098/info

2012-02-21 Busindre remote

Xavi 7968 ADSL Router – ‘/webconfig/lan/lan_config.html/local_lan_config?host_name_txtbox’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/52098/info

2012-02-21 Busindre webapps

Xavi 7968 ADSL Router – Multiple Cross-Site Request Forgery Vulnerabilities

source: https://www.securityfocus.com/bid/52098/info

2012-02-21 Busindre remote

Cisco Linksys WAG54GS – Cross-Site Request Forgery (Change Admin Password)

+--------------------------------------------------------------------------------------------------------------------...

2012-02-21 Ivano Binetti webapps

D-Link DSL-2640B ADSL Router – Cross-Site Request Forgery

+--------------------------------------------------------------------------------------------------------------------...

2012-02-20 Ivano Binetti webapps

HP VSA – Remote Command Execution

#!/usr/bin/python

2012-02-17 Nicolas Gregoire remote

D-Link DAP-1150 1.2.94 – Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/51985/info

2012-02-13 MustLive remote

Trendnet Camera (Multiple Products) – Remote Security Bypass

source: https://www.securityfocus.com/bid/51922/info

2012-02-10 console-cowboys remote

D-Link ShareCenter Products – Multiple Remote Code Execution Vulnerabilities

source: https://www.securityfocus.com/bid/51918/info

2012-02-08 Roberto Paleari remote

AirTies-4450 – Unauthorized Remote Reboot (Denial of Service)

#!/usr/bin/perl

2012-01-08 rigan dos

Reaver – WiFi Protected Setup (WPS)

# Exploit Title: Reaver WiFi Protected Setup Exploit

2011-12-30 cheffner remote

Barracuda Control Center 620 – Cross-Site Scripting / HTML Injection

source: https://www.securityfocus.com/bid/51156/info

2011-12-21 Vulnerability-Lab remote

HomeSeer HS2 2.5.0.20 – Web Interface Log Viewer Page URI Cross-Site Scripting

source: https://www.securityfocus.com/bid/50978/info

2011-12-08 Silent Dream remote