hardware

D-Link WBR-2310 1.0.4 – ‘GET’ Remote Buffer Overflow (PoC)

source: https://www.securityfocus.com/bid/42153/info

EMC Celerra NAS Appliance – Unauthorized Access to Root NFS Export

Trustwave's SpiderLabs Security Advisory TWSL2010-003:

Intellinet IP Camera MNC-L10 – Authentication Bypass

by Magnefikko

Harris Stratex StarMAX 2100 WIMAX Subscriber Station – Running Configuration Cross-Site Request Forgery

I found CSRF vulnerability in Harris Stratex WIMAX 2100 subscriber

Netgear WG111v2 Wireless Driver – Long Beacon Overflow (Metasploit)

##

Google Appliance ProxyStyleSheet – Command Execution (Metasploit)

##

Ubiquity Nanostation5 (Air OS) – Remote Command Execution

# Exploit Title: Ubiquity Nanostation5 (Air OS) 0day Remote Command Execution

D-Link DAP-1160 Wireless Access Point – DCC Protocol Security Bypass

source: https://www.securityfocus.com/bid/41187/info

Cisco Adaptive Security Response – HTTP Response Splitting

source: https://www.securityfocus.com/bid/41159/info

Linksys WAP54Gv3 Wireless Router – ‘debug.cgi’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/41061/info

Trend Micro Interscan Web Security Virtual Appliance – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/41072/info

GoodiWare GoodReader iPhone – ‘.XLS’ Denial of Service

I wrote a fuzzer "dumb fuzzer" and used a sample from http://www.ccp14.ac.uk/ccp/web-mirrors/bca-spreadsheets/scanplo...

Office^2 iPhone – ‘.XLS’ Denial of Service

I wrote a fuzzer "dumb fuzzer" and used a sample from http://www.ccp14.ac.uk/ccp/web-mirrors/bca-spreadsheets/scanplo...

Savy Soda Documents – Mobile Office Suite ‘.XLS’ Denial of Service

I wrote a fuzzer "dumb fuzzer" and used a sample from http://www.ccp14.ac.uk/ccp/web-mirrors/bca-spreadsheets/scanplo...

Juniper Networks SA2000 SSL VPN Appliance – ‘welcome.cgi’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/41664/info

Motorola SB5101 – Hax0rware Event Reset Remote Overflow

#!/usr/bin/perl

Motorola SB5101 Hax0rware Rajko HTTPd – Remote Denial of Service (PoC)

#!/usr/bin/perl

Motorola Surfboard Cable Modem – Directory Traversal

# Exploit Title: Motorola SURFBoard Cable Modem Directory Traversal

Cisco DPC2100 2.0.2 r1256-060303 – Multiple Security Bypass / Cross-Site Request Forgery Vulnerabilities

source: https://www.securityfocus.com/bid/40346/info

U.S.Robotics USR5463 0.06 Firmware – ‘setup_ddns.exe’ HTML Injection

source: https://www.securityfocus.com/bid/40292/info

Palo Alto Network Vulnerability – Cross-Site Scripting

Palo Alto Network Vulnerability - Cross-Site Scripting (XSS)

Cisco Application Control Engine (ACE) – HTTP Parsing Security

source: https://www.securityfocus.com/bid/40002/info

Huawei EchoLife HG520 3.10.18.5-1.0.5.0 – Remote Information Disclosure

source: https://www.securityfocus.com/bid/39646/info

Apple iPhone 3.1.2 – ‘7D11’ Model MB702LL Mobile Safari Denial of Service

Apple iPhone 3.1.2 (7D11) Model MB702LL Mobile Safari Denial-of-Service

Huawei EchoLife HG520 – Remote Information Disclosure

# Exploit Title: Huawei EchoLife HG520 Remote Information Disclosure

Huawei EchoLife HG520c – Modem Reset (Denial of Service)

# Exploit Title: Huawei EchoLife HG520c Denial of Service and Modem Reset

Iomega Home Media Network Hard Drive 2.038 < 2.061 - File-system Access

-----------------------------

IBM Bladecenter Management Module – Denial of Service

[DSECRG-09-049] IBM BladeCenter Management Module - DoS vulnerability

McAfee Email Gateway (formerly IronMail) – Denial of Service

Advisory Name: Denial of Service in McAfee Email Gateway (formerly IronMail)

McAfee Email Gateway (formerly IronMail) – Cross-Site Scripting

Advisory Name: Multiple Reflected Cross-Site Scripting (XSS) in McAfee Email Gateway (formerly

Edimax AR-7084GA Router – Cross-Site Request Forgery / Persistent Cross-Site Scripting

Lexmark Multiple Laser printers – Remote Stack Overflow

#####################################################################################

ZKSoftware Biometric Attendence Managnmnet Hardware[MIPS] 2 – Improper Authentication

# Exploit Title: ZKSoftware Biometric Attendence managnmnet Hardware[MIPS] Improper Authentication.

iPhone Springboard – Malformed Character Crash (PoC)

#!/usr/bin/python

Friendly-Tech FriendlyTR69 CPE Remote Management 2.8.9 – SQL Injection

=========================================

Sagem Routers – Remote Authentication Bypass

#!/usr/bin/perl

Sagem Routers – Remote Reset

#!/usr/bin/perl

iPhone / iTouch FtpDisc 1.0 – Buffer Overflow (Denial of Service) (PoC)

###############

RCA DCM425 Cable Modem – ‘micro_httpd’ Denial of Service (PoC)

#!/usr/bin/python

iPhone – ‘WebCore::CSSSelector()’ Remote Crash

#!/usr/bin/python

iPhone FTP Server By Zhang Boyang – Remote Denial of Service

#!/usr/bin/perl

iPhone FtpDisc 1.0 – Denial of Service

#!/usr/bin/perl

iPhone FTP Server (WiFi FTP) by SavySoda – Denial of Service (PoC)

#!/usr/bin/python

Huawei HG510 – Multiple Cross-Site Request Forgery Vulnerabilities

source: https://www.securityfocus.com/bid/38261/info

Nokia Symbian OS 3rd Edition – Multiple Web Browser Vulnerabilities

My name is Nishant Das Patnaik, an independent security researcher from India. I have discovered multiple vulnerabili...

Sterlite SAM300 AX Router – ‘Stat_Radio’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/39928/info

Xerox Workcenter 4150 – Remote Buffer Overflow (PoC)

#####################################################################################

COMTREND CT-507 IT ADSL Router – ‘scvrtsrv.cmd’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/38004/info

Cisco Secure Desktop 3.x – ‘translation’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/37960/info

Novatel Wireless MiFi 2352 – Password Information Disclosure

source: https://www.securityfocus.com/bid/37962/info