MiniDVBLinux 5.4 Simple VideoDiskRecorder Protocol SVDRP – Remote Code Execution (RCE)
# Exploit Title: MiniDVBLinux 5.4 Simple VideoDiskRecorder Protocol SVDRP - Remote Code Execution (RCE)
hardware
hardware 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
MiniDVBLinux <=5.4 - Config Download Exploit
# Exploit Title: MiniDVBLinux
DLink DIR 819 A1 – Denial of Service
# Exploit Title: DLink DIR 819 A1 - Denial of Service
D-Link DNR-322L <=2.60B15 - Authenticated Remote Code Execution
# Exploit Title: D-Link DNR-322L
Linksys AX3200 V1.1.00 – Command Injection
# Exploit Title: Linksys AX3200 V1.1.00 - Command Injection
SoX 14.4.2 – Denial Of Service
# Exploit Title: SoX 14.4.2 - Denial Of Service
SmartRG Router SR510n 2.6.13 – Remote Code Execution
# Exploit Title: SmartRG Router SR510n 2.6.13 - RCE (Remote Code Execution)
AVEVA InTouch Access Anywhere Secure Gateway 2020 R2 – Path Traversal
Exploit Title: AVEVA InTouch Access Anywhere Secure Gateway 2020 R2 - Path Traversal
MSNSwitch Firmware MNT.2408 – Remote Code Execution
Exploit Title: MSNSwitch Firmware MNT.2408 - Remote Code Exectuion (RCE)
TP-Link Tapo c200 1.1.15 – Remote Code Execution (RCE)
# Exploit Title: TP-Link Tapo c200 1.1.15 - Remote Code Execution (RCE)
Buffalo TeraStation Network Attached Storage (NAS) 1.66 – Authentication Bypass
# Exploit Title: Buffalo TeraStation Network Attached Storage (NAS) 1.66 - Authentication Bypass
Sophos XG115w Firewall 17.0.10 MR-10 – Authentication Bypass
# Exploit Title: Sophos XG115w Firewall 17.0.10 MR-10 - Authentication Bypass
Omnia MPX 1.5.0+r1 – Path Traversal
# Exploit Title: Omnia MPX 1.5.0+r1 - Path Traversal
Wavlink WN530HG4 – Password Disclosure
# Exploit Title: Wavlink WN530HG4 - Password Disclosure
Wavlink WN533A8 – Password Disclosure
# Exploit Title: Wavlink WN533A8 - Password Disclosure
Wavlink WN533A8 – Cross-Site Scripting (XSS)
# Exploit Title: Wavlink WN533A8 - Cross-Site Scripting (XSS)
Schneider Electric SpaceLogic C-Bus Home Controller (5200WHC2) – Remote Code Execution
# Exploit Title: Schneider Electric SpaceLogic C-Bus Home Controller (5200WHC2) - Remote Code Execution
Carel pCOWeb HVAC BACnet Gateway 2.1.0 – Directory Traversal
# Exploit Title: Carel pCOWeb HVAC BACnet Gateway 2.1.0 - Directory Traversal
Dingtian-DT-R002 3.1.276A – Authentication Bypass
# Exploit Title: Dingtian-DT-R002 3.1.276A - Authentication Bypass
SolarView Compact 6.00 – ‘pow’ Cross-Site Scripting (XSS)
# Exploit Title: SolarView Compact 6.00 - 'pow' Cross-Site Scripting (XSS)
SolarView Compact 6.00 – ‘time_begin’ Cross-Site Scripting (XSS)
# Exploit Title: SolarView Compact 6.00 - 'time_begin' Cross-Site Scripting (XSS)
TP-Link Router AX50 firmware 210730 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: TP-Link Router AX50 firmware 210730 - Remote Code Execution (RCE) (Authenticated)
Algo 8028 Control Panel – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: Algo 8028 Control Panel - Remote Code Execution (RCE) (Authenticated)
SolarView Compact 6.00 – Directory Traversal
# Exploit Title: SolarView Compact 6.00 - Directory Traversal
Schneider Electric C-Bus Automation Controller (5500SHAC) 1.10 – Remote Code Execution (RCE)
# Exploit Title: Schneider Electric C-Bus Automation Controller (5500SHAC) 1.10 - Remote Code Execution (RCE)
Telesquare SDT-CW3B1 1.1.0 – OS Command Injection
#!/usr/bin/python3
Zyxel USG FLEX 5.21 – OS Command Injection
# Exploit Title: Zyxel USG FLEX 5.21 - OS Command Injection
SolarView Compact 6.0 – OS Command Injection
# Exploit Title: SolarView Compact 6.0 - OS Command Injection
SDT-CW3B1 1.1.0 – OS Command Injection
# Exploit Title: SDT-CW3B1 1.1.0 - OS command injection
TLR-2005KSH – Arbitrary File Delete
# Exploit Title: TLR-2005KSH - Arbitrary File Delete
TLR-2005KSH – Arbitrary File Upload
# Exploit Title: TLR-2005KSH - Arbitrary File Upload
Ruijie Reyee Mesh Router – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: Ruijie Reyee Mesh Router - Remote Code Execution (RCE) (Authenticated)
DLINK DAP-1620 A1 v1.01 – Directory Traversal
# Exploit Title: DLINK DAP-1620 A1 v1.01 - Directory Traversal
Tenda HG6 v3.3.0 – Remote Command Injection
# Exploit Title: Tenda HG6 v3.3.0 - Remote Command Injection
DLINK DIR850 – Open Redirect
# Exploit Title: DLINK DIR850 - Open Redirect
DLINK DIR850 – Insecure Access Control
# Exploit Title: DLINK DIR850 - Insecure Access Control
USR IOT 4G LTE Industrial Cellular VPN Router 1.0.36 – Remote Root Backdoor
# Exploit Title: USR IOT 4G LTE Industrial Cellular VPN Router 1.0.36 - Remote Root Backdoor
Delta Controls enteliTOUCH 3.40.3935 – Cookie User Password Disclosure
Exploit Title: Delta Controls enteliTOUCH 3.40.3935 - Cookie User Password Disclosure
Delta Controls enteliTOUCH 3.40.3935 – Cross-Site Scripting (XSS)
# Exploit Title: Delta Controls enteliTOUCH 3.40.3935 - Cross-Site Scripting (XSS)
Delta Controls enteliTOUCH 3.40.3935 – Cross-Site Request Forgery (CSRF)
# Exploit Tile: Delta Controls enteliTOUCH 3.40.3935 - Cross-Site Request Forgery (CSRF)
Verizon 4G LTE Network Extender – Weak Credentials Algorithm
Exploit Title: Verizon 4G LTE Network Extender - Weak Credentials Algorithm
Zyxel NWA-1100-NH – Command Injection
# Exploit Title: Zyxel NWA-1100-NH - Command Injection
Razer Sila – Command Injection
# Exploit Title: Razer Sila - Command Injection
Razer Sila – Local File Inclusion (LFI)
# Exploit Title: Razer Sila - Local File Inclusion (LFI)
Telesquare TLR-2855KS6 – Arbitrary File Deletion
# Exploit Title: Telesquare TLR-2855KS6 - Arbitrary File Deletion
Telesquare TLR-2855KS6 – Arbitrary File Creation
# Exploit Title: Telesquare TLR-2855KS6 - Arbitrary File Creation
SAM SUNNY TRIPOWER 5.0 – Insecure Direct Object Reference (IDOR)
# Exploit Title: SAM SUNNY TRIPOWER 5.0 - Insecure Direct Object Reference (IDOR)
Kramer VIAware – Remote Code Execution (RCE) (Root)
# Exploit Title: Remote Code Execution as Root on KRAMER VIAware
Kramer VIAware 2.5.0719.1034 – Remote Code Execution (RCE)
# Exploit Title: Kramer VIAware 2.5.0719.1034 - Remote Code Execution (RCE)
ICT Protege GX/WX 2.08 – Client-Side SHA1 Password Hash Disclosure
# Exploit Title: ICT Protege GX/WX 2.08 - Client-Side SHA1 Password Hash Disclosure