ICT Protege GX/WX 2.08 – Stored Cross-Site Scripting (XSS)
# Exploit Title: ICT Protege GX/WX 2.08 - Stored Cross-Site Scripting (XSS)
hardware
hardware 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
iRZ Mobile Router – CSRF to RCE
# Exploit Title: iRZ Mobile Router - CSRF to RCE
Seowon SLR-120 Router – Remote Code Execution (Unauthenticated)
# Exploit Title: Seowon SLR-120 Router - Remote Code Execution (Unauthenticated)
WAGO 750-8212 PFC200 G2 2ETH RS – Privilege Escalation
# Exploit Title: WAGO 750-8212 PFC200 G2 2ETH RS Privilege Escalation
ICL ScadaFlex II SCADA Controllers SC-1/SC-2 1.03.07 – Remote File CRUD
# Exploit Title: CL ScadaFlex II SCADA Controllers SC-1/SC-2 1.03.07 Remote File CRUD
Dbltek GoIP – Local File Inclusion
# Exploit Title: Dbltek GoIP - Local File Inclusion
Cyclades Serial Console Server 3.3.0 – Local Privilege Escalation
# Exploit Title: Cyclades Serial Console Server 3.3.0 - Local Privilege Escalation
Network Video Recorder NVR304-16EP – Reflected Cross-Site Scripting (XSS) (Unauthenticated)
# Exploit Title: Network Video Recorder NVR304-16EP - Reflected Cross-Site Scripting (XSS) (Unauthenticated)
H3C SSL VPN – Username Enumeration
# Exploit Title: H3C SSL VPN - Username Enumeration
Kyocera Command Center RX ECOSYS M2035dn – Directory Traversal File Disclosure (Unauthenticated)
# Exploit Title: Kyocera Command Center RX ECOSYS M2035dn - Directory Traversal File Disclosure (Unauthenticated)
Huawei DG8045 Router 1.0 – Credential Disclosure
# Title: Huawei DG8045 Router 1.0 - Credential Disclosure
Creston Web Interface 1.0.0.2159 – Credential Disclosure
# Exploit Title: Creston Web Interface 1.0.0.2159 - Credential Disclosure
Dixell XWEB 500 – Arbitrary File Write
# Exploit Title: Dixell XWEB-500 - Arbitrary File Write
Vodafone H-500-s 3.5.10 – WiFi Password Disclosure
# Exploit Title: Vodafone H-500-s 3.5.10 - WiFi Password Disclosure
Accu-Time Systems MAXIMUS 1.0 – Telnet Remote Buffer Overflow (DoS)
# Exploit Title: Accu-Time Systems MAXIMUS 1.0 - Telnet Remote Buffer Overflow (DoS)
Siemens S7 Layer 2 – Denial of Service (DoS)
# Exploit Title: Siemens S7 Layer 2 - Denial of Service (DoS)
Zucchetti Axess CLOKI Access Control 1.64 – Cross Site Request Forgery (CSRF)
# Exploit Title: Zucchetti Axess CLOKI Access Control 1.64 - Cross Site Request Forgery (CSRF)
Auerswald COMpact 8.0B – Multiple Backdoors
# Exploit Title: Auerswald COMpact 8.0B - Multiple Backdoors
Auerswald COMpact 8.0B – Arbitrary File Disclosure
# Exploit Title: Auerswald COMpact 8.0B - Arbitrary File Disclosure
Auerswald COMpact 8.0B – Privilege Escalation
# Exploit Title: Auerswald COMpact 8.0B - Privilege Escalation
Auerswald COMfortel 2.8F – Authentication Bypass
# Exploit Title: Auerswald COMfortel 2.8F - Authentication Bypass
YeaLink SIP-TXXXP 53.84.0.15 – ‘cmd’ Command Injection (Authenticated)
# Exploit Title: YeaLink SIP-TXXXP 53.84.0.15 - 'cmd' Command Injection (Authenticated)
Sonicwall SonicOS 6.5.4 – ‘Common Name’ Cross-Site Scripting (XSS)
# Exploit Title: Sonicwall SonicOS 6.5.4 - 'Common Name' Cross-Site Scripting (XSS)
Hikvision Web Server Build 210702 – Command Injection
# Exploit Title: Hikvision Web Server Build 210702 - Command Injection
SonicWall SMA 10.2.1.0-17sv – Password Reset
# Exploit Title: SonicWall SMA 10.2.1.0-17sv - Password Reset
Mitsubishi Electric & INEA SmartRTU – Reflected Cross-Site Scripting (XSS)
# Exploit Title: Mitsubishi Electric & INEA SmartRTU - Reflected Cross-Site Scripting (XSS)
Mitsubishi Electric & INEA SmartRTU – Source Code Disclosure
# Exploit Title: Mitsubishi Electric & INEA SmartRTU - Source Code Disclosure
Sonicwall SonicOS 7.0 – Host Header Injection
# Exploit Title: Sonicwall SonicOS 7.0 - Host Header Injection
Cypress Solutions CTM-200 2.7.1 – Root Remote OS Command Injection
# Exploit Title: Cypress Solutions CTM-200 2.7.1 - Root Remote OS Command Injection
Cypress Solutions CTM-200/CTM-ONE – Hard-coded Credentials Remote Root (Telnet/SSH)
# Exploit Title: Cypress Solutions CTM-200/CTM-ONE - Hard-coded Credentials Remote Root (Telnet/SSH)
Mitrastar GPT-2541GNAC-N1 – Privilege escalation
# Exploit Title: Mitrastar GPT-2541GNAC-N1 - Privilege escalation
FatPipe Networks WARP/IPVPN/MPVPN 10.2.2 – Remote Privilege Escalation
# Exploit Title: FatPipe Networks MPVPN 10.2.2 - Remote Privilege Escalation
FatPipe Networks WARP/IPVPN/MPVPN 10.2.2 – Hidden Backdoor Account (Write Access)
# Exploit Title: FatPipe Networks WARP/IPVPN/MPVPN 10.2.2 - Hidden Backdoor Account (Write Access)
FatPipe Networks WARP/IPVPN/MPVPN 10.2.2 – Config Download (Unauthenticated)
# Exploit Title: FatPipe Networks WARP/IPVPN/MPVPN 10.2.2 - Config Download (Unauthenticated)
FatPipe Networks WARP 10.2.2 – Authorization Bypass
# Exploit Title: FatPipe Networks WARP 10.2.2 - Authorization Bypass
FatPipe Networks WARP/IPVPN/MPVPN 10.2.2 – ‘Add Admin’ Cross-Site Request Forgery (CSRF)
# Exploit Title: FatPipe Networks WARP/IPVPN/MPVPN 10.2.2 - 'Add Admin' Cross-Site Request Forgery (CSRF)
Cisco small business RV130W 1.0.3.44 – Inject Counterfeit Routers
# Exploit Title: Cisco small business RV130W 1.0.3.44 - Inject Counterfeit Routers
Seowon 130-SLC router – ‘queriesCnt’ Remote Code Execution (Unauthenticated)
# Exploit Title: Seowon 130-SLC router - 'queriesCnt' Remote Code Execution (Unauthenticated)
ECOA Building Automation System – Arbitrary File Deletion
# Exploit Title: ECOA Building Automation System - Arbitrary File Deletion
ECOA Building Automation System – Local File Disclosure
# Exploit Title: ECOA Building Automation System - Local File Disclosure
ECOA Building Automation System – Remote Privilege Escalation
# Exploit Title: ECOA Building Automation System - Remote Privilege Escalation
ECOA Building Automation System – Missing Encryption Of Sensitive Information
# Exploit Title: ECOA Building Automation System - Missing Encryption Of Sensitive Information
ECOA Building Automation System – Hard-coded Credentials SSH Access
# Exploit Title: ECOA Building Automation System - Hard-coded Credentials SSH Access
ECOA Building Automation System – Configuration Download Information Disclosure
# Exploit Title: ECOA Building Automation System - Configuration Download Information Disclosure
ECOA Building Automation System – Cookie Poisoning Authentication Bypass
# Exploit Title: ECOA Building Automation System - Cookie Poisoning Authentication Bypass
ECOA Building Automation System – ‘multiple’ Cross-Site Request Forgery (CSRF)
# Exploit Title: ECOA Building Automation System - 'multiple' Cross-Site Request Forgery (CSRF)
ECOA Building Automation System – Directory Traversal Content Disclosure
# Exploit Title: ECOA Building Automation System - Directory Traversal Content Disclosure
ECOA Building Automation System – Path Traversal Arbitrary File Upload
# Exploit Title: ECOA Building Automation System - Path Traversal Arbitrary File Upload
ECOA Building Automation System – Weak Default Credentials
# Exploit Title: ECOA Building Automation System - Weak Default Credentials
Compro Technology IP Camera – ‘ mjpegStreamer.cgi’ Screenshot Disclosure
# Exploit Title: Compro Technology IP Camera - ' mjpegStreamer.cgi' Screenshot Disclosure