hardware

hardware 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

TP-Link TL-PS110U / TL-PS110P – Cross-Site Scripting

GotGeek Labs

2011-04-04 b0telh0 webapps

Encore ENPS-2012 – Cross-Site Scripting

GotGeek Labs

2011-04-04 b0telh0 webapps

ACTi ASOC 2200 Web Configurator 2.6 – Remote Command Execution

#!perl

2011-03-17 Todor Donev remote

Nokia N97 – ‘.m3u’ Playlist Crash (PoC)

#!/usr/bin/perl

2011-03-08 KedAns-Dz dos

COMTREND ADSL Router CT-5367 C01_R12 – Remote Code Execution

=============================================================================

2011-03-04 Todor Donev remote

Cisco Linksys WAG120N – Cross-Site Request Forgery

----------------------------------------------------------------

2011-02-26 Khashayar Fereidani webapps

iphone mydocs 2.7 – Directory Traversal

----------------------------------------------------------------

2011-02-25 Khashayar Fereidani remote

iphone ifile 2.0 – Directory Traversal

----------------------------------------------------------------

2011-02-25 Khashayar Fereidani remote

iphone folders 2.5 – Directory Traversal

----------------------------------------------------------------

2011-02-25 Khashayar Fereidani remote

iphone pdf reader pro 2.3 – Directory Traversal

----------------------------------------------------------------

2011-02-24 Khashayar Fereidani remote

iPhone Guitar – Directory Traversal

----------------------------------------------------------------

2011-02-24 Khashayar Fereidani remote

iphone ishred 1.93 – Directory Traversal

----------------------------------------------------------------

2011-02-24 Khashayar Fereidani remote

iSO Filer Lite 2.1.0 – Directory Traversal

# Exploit Title: Filer Lite v2.1.0 for iPhone / iPod touch, Directory Traversal

2011-02-24 R3d@l3rt, Sp@2K, Sunlight remote

iSO Air Files 2.6 – Directory Traversal

# Exploit Title: Air Files v2.6 for iPhone / iPod touch, Directory Traversal

2011-02-24 R3d@l3rt, Sp@2K, Sunlight remote

Linksys WAP610N – Root Access Security

Secure Network - Security Research Advisory

2011-02-10 Matteo Ignaccolo remote

Multiple Check Point Endpoint Security Products – Information Disclosure

source: https://www.securityfocus.com/bid/46224/info

2011-02-07 Rapid7 remote

Comcast DOCSIS 3.0 Business Gateways – Multiple Vulnerabilities

Trustwave's SpiderLabs Security Advisory TWSL2011-002:

2011-02-06 Trustwave's SpiderLabs remote

Tandberg E & EX & C Series Endpoints – Default Root Account Credentials

-----BEGIN PGP SIGNED MESSAGE-----

2011-02-02 Cisco Security remote

Polycom SoundPoint IP Devices – Denial of Service

Source: http://packetstormsecurity.org/files/view/97948/polycomsoundpoint-dos.txt

2011-01-28 pawel gawinek dos

Lexmark X651de – Printer Ready Message Value HTML Injection

source: https://www.securityfocus.com/bid/45688/info

2011-01-06 dave b remote

DD-WRT 24-preSP2 – Information Disclosure

# Exploit Title: DD-WRT Information Disclosure Vulnerability

2010-12-29 Craig Heffner remote

D-Link WBR-1310 – Authentication Bypass

# Exploit Title: D-Link WBR-1310 Authentication Bypass Vulnerability

2010-12-23 Craig Heffner webapps

Apple iOS Safari – ‘JS .’ Remote Crash

2010-12-22 Yakir Wizman dos

Apple iOS Safari – ‘decodeURIComponent’ Remote Crash

2010-12-21 Yakir Wizman dos

Apple iOS Safari – ‘decodeURI’ Remote Crash

2010-12-20 Yakir Wizman dos

Apple iOS Safari – body alink Remote Crash

2010-12-20 Yakir Wizman dos

D-Link DIR-300 – Cross-Site Request Forgery (Change Admin Account Settings)

2010-12-17 outlaw.dll webapps

Clear iSpot/Clearspot 2.0.0.0 – Cross-Site Request Forgery

Trustwave's SpiderLabs Security Advisory TWSL2010-008:

2010-12-12 Trustwave's SpiderLabs webapps

Linksys Routers – Cross-Site Request Forgery

It seems to be fairly well known that there are multiple unpatched

2010-12-04 Martin Barbella webapps

D-Link Routers – Authentication Bypass (1)

# Exploit Title: Multiple D-Link Router Authentication Bypass Vulnerabilities

2010-12-03 Craig Heffner webapps

HP LaserJet – Directory Traversal in PJL Interface

n.runs AG

2010-11-29 n.runs AG remote

D-Link DIR-300 – WiFi Key Security Bypass

source: https://www.securityfocus.com/bid/45038/info

2010-11-24 Gaurav Saha remote

Camtron CMNC-200 IP Camera – Denial of Service

Finding 5: Camera Denial of Service

2010-11-13 Trustwave's SpiderLabs dos

Camtron CMNC-200 IP Camera – Undocumented Default Accounts

Finding 4: Undocumented Default Accounts

2010-11-13 Trustwave's SpiderLabs webapps

Camtron CMNC-200 IP Camera – Authentication Bypass

Finding 3: Web Based Administration Interface Bypass

2010-11-13 Trustwave's SpiderLabs webapps

Camtron CMNC-200 IP Camera – Directory Traversal

Finding 2: Directory Traversal in Camera Web Server

2010-11-13 Trustwave's SpiderLabs remote

Camtron CMNC-200 IP Camera – ActiveX Buffer Overflow

Finding 1: Buffer Overflow in ActiveX Control

2010-11-13 Trustwave's SpiderLabs dos

D-Link DIR-300 – Multiple Security Bypass Vulnerabilities

source: https://www.securityfocus.com/bid/44743/info

2010-11-09 Karol Celia remote

pfSense – ‘interfaces.php?if’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/45272/info

2010-11-08 dave b remote

pfSense – ‘status_graph.php?if’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/45272/info

2010-11-08 dave b remote

pfSense – ‘pkg.php?xml’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/45272/info

2010-11-08 dave b remote

pfSense – ‘pkg_edit.php?id’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/45272/info

2010-11-08 dave b remote

Cisco Unified Communications Manager 8.0 – Invalid Argument Privilege Escalation

source: https://www.securityfocus.com/bid/44672/info

2010-11-03 Knud Erik Hjgaard local

Xerox 4595 – Denial of Service

#!/usr/bin/perl

2010-11-01 chap0 dos

ContentKeeper Web – Remote Command Execution (Metasploit)

##

2010-10-09 Metasploit webapps

Research In Motion BlackBerry Device Software 4.7.1 – Cross Domain Information Disclosure

source: https://www.securityfocus.com/bid/43685/info

2010-10-04 599eme Man remote

Linksys WRT54 Access Point – ‘apply.cgi’ Remote Buffer Overflow (Metasploit)

##

2010-09-24 Metasploit remote

iPhone MobileMail – LibTIFF Buffer Overflow (Metasploit)

##

2010-09-20 Metasploit remote

Apple iPhone MobileSafari LibTIFF – ’email’ Remote Buffer Overflow (Metasploit) (2)

##

2010-09-20 Metasploit remote

Apple iPhone MobileSafari LibTIFF – ‘browser’ Remote Buffer Overflow (Metasploit) (1)

##

2010-09-20 Metasploit remote