Compro Technology IP Camera – ‘ index_MJpeg.cgi’ Stream Disclosure
# Exploit Title: Compro Technology IP Camera - ' index_MJpeg.cgi' Stream Disclosure
hardware
hardware 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Compro Technology IP Camera – ‘Multiple’ Credential Disclosure
# Exploit Title: Compro Technology IP Camera - 'Multiple' Credential Disclosure
Compro Technology IP Camera – RTSP stream disclosure (Unauthenticated)
# Exploit Title: Compro Technology IP Camera - RTSP stream disclosure (Unauthenticated)
Compro Technology IP Camera – ‘killps.cgi’ Denial of Service (DoS)
# Exploit Title: Compro Technology IP Camera - 'killps.cgi' Denial-of-Service (DoS)
COMMAX UMS Client ActiveX Control 1.7.0.2 – ‘CNC_Ctrl.dll’ Heap Buffer Overflow
# Exploit Title: COMMAX UMS Client ActiveX Control 1.7.0.2 - 'CNC_Ctrl.dll' Heap Buffer Overflow
COMMAX WebViewer ActiveX Control 2.1.4.5 – ‘Commax_WebViewer.ocx’ Buffer Overflow
# Exploit Title: COMMAX WebViewer ActiveX Control 2.1.4.5 - 'Commax_WebViewer.ocx' Buffer Overflow
HP OfficeJet 4630/7110 MYM1FN2025AR/2117A – Stored Cross-Site Scripting (XSS)
# Exploit Title: HP OfficeJet 4630/7110 MYM1FN2025AR 2117A – Stored Cross-Site Scripting (XSS)
GeoVision Geowebserver 5.3.3 – Local FIle Inclusion
# Exploit Title: GeoVision Geowebserver 5.3.3 - LFI / XSS / HHI / RCE
COMMAX CVD-Axx DVR 5.1.4 – Weak Default Credentials Stream Disclosure
# Exploit Title: COMMAX CVD-Axx DVR 5.1.4 - Weak Default Credentials Stream Disclosure
COMMAX Smart Home Ruvie CCTV Bridge DVR Service – Config Write / DoS (Unauthenticated)
# Exploit Title: COMMAX Smart Home Ruvie CCTV Bridge DVR Service - Config Write / DoS (Unauthenticated)
COMMAX Smart Home Ruvie CCTV Bridge DVR Service – RTSP Credentials Disclosure
# Exploit Title: COMMAX Smart Home Ruvie CCTV Bridge DVR Service - RTSP Credentials Disclosure
COMMAX Smart Home IoT Control System CDP-1020n – SQL Injection Authentication Bypass
# Exploit Title: COMMAX Smart Home IoT Control System CDP-1020n - SQL Injection Authentication Bypass
COMMAX Biometric Access Control System 1.0.0 – Authentication Bypass
# Exploit Title: COMMAX Biometric Access Control System 1.0.0 - Authentication Bypass
NetGear D1500 V1.0.0.21_1.0.1PE – ‘Wireless Repeater’ Stored Cross-Site Scripting (XSS)
# Exploit Title: NetGear D1500 V1.0.0.21_1.0.1PE - 'Wireless Repeater' Stored Cross-Site Scripting (XSS)
Panasonic Sanyo CCTV Network Camera 2.03-0x – Cross-Site Request Forgery (Change Password)
# Exploit Title: Panasonic Sanyo CCTV Network Camera 2.03-0x - 'Disable Authentication / Change Password' CSRF
Longjing Technology BEMS API 1.21 – Remote Arbitrary File Download
# Exploit Title: Longjing Technology BEMS API 1.21 - Remote Arbitrary File Download
Denver IP Camera SHO-110 – Unauthenticated Snapshot
# Exploit Title: Denver IP Camera SHO-110 - Unauthenticated Snapshot
Denver Smart Wifi Camera SHC-150 – ‘Telnet’ Remote Code Execution (RCE)
# Exploit Title: Denver Smart Wifi Camera SHC-150 - 'Telnet' Remote Code Execution (RCE)
KevinLAB BEMS 1.0 – File Path Traversal Information Disclosure (Authenticated)
# Exploit Title: KevinLAB BEMS 1.0 - File Path Traversal Information Disclosure (Authenticated)
KevinLAB BEMS 1.0 – Authentication Bypass
# Exploit Title: KevinLAB BEMS 1.0 - Unauthenticated SQL Injection / Authentication Bypass
KevinLAB BEMS 1.0 – Undocumented Backdoor Account
# Exploit Title: KevinLAB BEMS 1.0 - Undocumented Backdoor Account
Aruba Instant 8.7.1.0 – Arbitrary File Modification
# Exploit Title: Aruba Instant 8.7.1.0 - Arbitrary File Modification
Seagate BlackArmor NAS sg2000-2000.1331 – Command Injection
# Exploit Title: Seagate BlackArmor NAS sg2000-2000.1331 - Command Injection
Visual Tools DVR VX16 4.2.28 – Local Privilege Escalation
# Exploit Title: Visual Tools DVR VX16 4.2.28 - Local Privilege Escalation
Black Box Kvm Extender 3.4.31307 – Local File Inclusion
# Exploit Title: Black Box Kvm Extender 3.4.31307 - Local File Inclusion
Netgear DGN2200v1 – Remote Command Execution (RCE) (Unauthenticated)
# Exploit Title: Netgear DGN2200v1 - Remote Command Execution (RCE) (Unauthenticated)
Ricon Industrial Cellular Router S9922XL – Remote Command Execution (RCE)
# Exploit Title: Ricon Industrial Cellular Router S9922XL - Remote Command Execution (RCE)
AKCP sensorProbe SPX476 – ‘Multiple’ Cross-Site Scripting (XSS)
# Exploit Title: AKCP sensorProbe SPX476 - 'Multiple' Cross-Site Scripting (XSS)
Netgear WNAP320 2.0.3 – ‘macAddress’ Remote Code Execution (RCE) (Unauthenticated)
# Exploit Title: Netgear WNAP320 2.0.3 - 'macAddress' Remote Code Execution (RCE) (Unauthenticated)
TP-Link TL-WR841N – Command Injection
# Exploit Title: TP-Link TL-WR841N - Command Injection
Dlink DSL2750U – ‘Reboot’ Command Injection
# Exploit Title: Dlink DSL2750U - 'Reboot' Command Injection
Intelbras Router RF 301K – ‘DNS Hijacking’ Cross-Site Request Forgery (CSRF)
# Exploit Title: Intelbras Router RF 301K - 'DNS Hijacking' Cross-Site Request Forgery (CSRF)
OptiLink ONT1GEW GPON 2.1.11_X101 Build 1127.190306 – Remote Code Execution (Authenticated)
# Exploit Title: OptiLink ONT1GEW GPON 2.1.11_X101 Build 1127.190306 - Remote Code Execution (Authenticated)
CHIYU IoT Devices – Denial of Service (DoS)
# Exploit Title: CHIYU IoT Devices - Denial of Service (DoS)
CHIYU IoT Devices – ‘Telnet’ Authentication Bypass
# Exploit Title: CHIYU IoT Devices - 'Telnet' Authentication Bypass
Thecus N4800Eco Nas Server Control Panel – Comand Injection
# Exploit Title: Thecus N4800Eco Nas Server Control Panel - Comand Injection
Ubee EVW327 – ‘Enable Remote Access’ Cross-Site Request Forgery (CSRF)
# Exploit Title: Ubee EVW327 - 'Enable Remote Access' Cross-Site Request Forgery (CSRF)
Sipwise C5 NGCP CSC – Click2Dial Cross-Site Request Forgery (CSRF)
# Exploit Title: Sipwise C5 NGCP CSC - Click2Dial Cross-Site Request Forgery (CSRF)
Sipwise C5 NGCP CSC – ‘Multiple’ Persistent Cross-Site Scripting (XSS)
# Exploit Title: Sipwise C5 NGCP CSC - 'Multiple' Stored/Reflected Cross-Site Scripting (XSS)
Adtran Personal Phone Manager 10.8.1 – DNS Exfiltration
# Exploit Title: Adtran Personal Phone Manager 10.8.1 - DNS Exfiltration
Adtran Personal Phone Manager 10.8.1 – ‘Multiple’ Reflected Cross-Site Scripting (XSS)
# Exploit Title: Adtran Personal Phone Manager 10.8.1 - 'Multiple' Reflected Cross-Site Scripting (XSS)
Adtran Personal Phone Manager 10.8.1 – ’emailAddress’ Stored Cross-Site Scripting (XSS)
# Exploit Title: Adtran Personal Phone Manager 10.8.1 - 'emailAddress' Stored Cross-Site Scripting (XSS)
Tenda D151 & D301 – Configuration Download (Unauthenticated)
# Exploit Title: Tenda D151 & D301 - Configuration Download (Unauthenticated)
Multilaser Router RE018 AC1200 – Cross-Site Request Forgery (Enable Remote Access)
# Exploit Title: Multilaser Router RE018 AC1200 - Cross-Site Request Forgery (Enable Remote Access)
Genexis PLATINUM 4410 2.1 P4410-V2-1.28 – RCE
# Exploit Title: Genexis PLATINUM 4410 2.1 P4410-V2-1.28 - RCE
F5 BIG-IP 16.0.x – iControl REST Remote Code Execution (Unauthenticated)
# Exploit Title: F5 BIG-IP 16.0.x - iControl REST Remote Code Execution (Unauthenticated)
ZBL EPON ONU Broadband Router 1.0 – Remote Privilege Escalation
# Exploit Title: ZBL EPON ONU Broadband Router 1.0 - Remote Privilege Escalation
DD-WRT 45723 – UPNP Buffer Overflow (PoC)
# Exploit Title: DD-WRT 45723 - UPNP Buffer Overflow (PoC)
TP-Link Devices – ‘setDefaultHostname’ Stored Cross-site Scripting (Unauthenticated)
# Exploit Title: TP-Link Devices - 'setDefaultHostname' Stored Cross-site Scripting (Unauthenticated)
Genexis Platinum-4410 P4410-V2-1.31A – ‘start_addr’ Persistent Cross-Site Scripting
# Exploit Title: Genexis Platinum-4410 P4410-V2-1.31A - 'start_addr' Persistent Cross-Site Scripting