Linksys EA7500 2.0.8.194281 – Cross-Site Scripting
# Exploit Title: Linksys EA7500 2.0.8.194281 - Cross-Site Scripting
hardware
hardware 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
KZTech T3500V 4G LTE CPE 2.0.1 – Weak Default WiFi Password Algorithm
# Exploit Title: KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 - Weak Default WiFi Password Algorithm
KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 – Config Download (Unauthenticated)
# Exploit Title: KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 - Config Download (Unauthenticated)
KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 – Device Reboot (Unauthenticated)
# Exploit Title: KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 - Device Reboot (Unauthenticated)
KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 – Factory Reset (Unauthenticated)
# Exploit Title: KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 - Factory Reset (Unauthenticated)
KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 – Remote Code Execution
# Exploit Title: KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 - Remote Code Execution
KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 – Hard coded Credentials Shell Access
# Exploit Title: KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 - Hard coded Credentials Shell Access
KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 – Authentication Bypass
# Exploit Title: KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 - Authentication Bypass
KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 – Command Injection (Authenticated)
# Exploit Title: KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 - Command Injection (Authenticated)
SOYAL Biometric Access Control System 5.0 – ‘Change Admin Password’ CSRF
# Exploit Title: SOYAL Biometric Access Control System 5.0 - 'Change Admin Password' CSRF
SOYAL Biometric Access Control System 5.0 – Master Code Disclosure
# Exploit Title: SOYAL Biometric Access Control System 5.0 - Master Code Disclosure
NuCom 11N Wireless Router 5.07.90 – Remote Privilege Escalation
# Exploit Title: NuCom 11N Wireless Router 5.07.90 - Remote Privilege Escalation
SonicWall SSL-VPN 8.0.0.0 – ‘visualdoor’ Remote Code Execution (Unauthenticated)
# Exploit Title: SonicWall SSL-VPN 8.0.0.0 - 'shellshock/visualdoor' Remote Code Execution (Unauthenticated)
Tenda AC5 AC1200 Wireless – ‘WiFi Name & Password’ Stored Cross Site Scripting
# Exploit Title: Tenda AC5 AC1200 Wireless - 'WiFi Name & Password' Stored Cross Site Scripting
Selea Targa IP OCR-ANPR Camera – ‘addr’ Remote Code Execution (Unauthenticated)
# Exploit Title: Selea Targa IP OCR-ANPR Camera - 'addr' Remote Code Execution (Unauthenticated)
Selea Targa 512 IP OCR-ANPR Camera – Stream Disclosure (Unauthenticated)
# Exploit Title: Selea Targa IP OCR-ANPR Camera - RTP/RTSP/M-JPEG Stream Disclosure (Unauthenticated)
Selea Targa IP OCR-ANPR Camera – CSRF Add Admin
# Exploit Title: Selea Targa IP OCR-ANPR Camera - CSRF Add Admin
Selea Targa IP OCR-ANPR Camera – Multiple SSRF (Unauthenticated)
# Exploit Title: Selea Targa IP OCR-ANPR Camera - Multiple SSRF (Unauthenticated)
Selea Targa IP OCR-ANPR Camera – Directory Traversal File Disclosure (Unauthenticated)
# Exploit Title: Selea Targa IP OCR-ANPR Camera - Directory Traversal File Disclosure (Unauthenticated)
Selea Targa IP OCR-ANPR Camera – Developer Backdoor Config Overwrite
# Exploit Title: Selea Targa IP OCR-ANPR Camera - Developer Backdoor Config Overwrite
Selea Targa IP OCR-ANPR Camera – ‘files_list’ Remote Stored XSS
# Exploit Title: Selea Targa IP OCR-ANPR Camera - 'files_list' Remote Stored XSS
Cisco UCS Manager 2.2(1d) – Remote Command Execution
# Exploit Title: Cisco UCS Manager 2.2(1d) - Remote Command Execution
iBall-Baton WRA150N Rom-0 Backup – File Disclosure (Sensitive Information)
# Exploit Title: iBall-Baton WRA150N Rom-0 Backup - File Disclosure (Sensitive Information)
FRITZ!Box 7.20 – DNS Rebinding Protection Bypass
# Exploit Title: FRITZ!Box 7.20 - DNS Rebinding Protection Bypass
Linksys RE6500 1.0.11.001 – Unauthenticated RCE
# Exploit Title: Linksys RE6500 1.0.11.001 - Unauthenticated RCE
Sony Playstation 4 (PS4) < 7.02 - 'ValidationMessage::buildBubbleTree()' Use-After-Free WebKit Code Execution (PoC)
const OFFSET_ELEMENT_REFCOUNT = 0x10;
Cisco ASA 9.14.1.10 and FTD 6.6.0.1 – Path Traversal (2)
# Exploit Title: Cisco ASA 9.14.1.10 and FTD 6.6.0.1 - Path Traversal (2)
Macally WIFISD2-2A82 2.000.010 – Guest to Root Privilege Escalation
# Exploit Title: Macally WIFISD2-2A82 2.000.010 - Guest to Root Privilege Escalation
Sony BRAVIA Digital Signage 1.7.8 – System API Information Disclosure
# Exploit Title: Sony BRAVIA Digital Signage 1.7.8 - System API Information Disclosure
Sony BRAVIA Digital Signage 1.7.8 – Unauthenticated Remote File Inclusion
# Exploit Title: Sony BRAVIA Digital Signage 1.7.8 - Unauthenticated Remote File Inclusion
Intelbras Router RF 301K 1.1.2 – Authentication Bypass
# Exploit Title: Intelbras Router RF 301K 1.1.2 - Authentication Bypass
ATX MiniCMTS200a Broadband Gateway 2.0 – Credential Disclosure
# Exploit Title: ATX MiniCMTS200a Broadband Gateway 2.0 - Credential Disclosure
Ruckus IoT Controller (Ruckus vRIoT) 1.5.1.0.21 – Remote Code Execution
# Product: Ruckus IoT Controller (Ruckus vRIoT)
Seowon 130-SLC router 1.0.11 – ‘ipAddr’ RCE (Authenticated)
# Exploit Title: Seowon 130-SLC router 1.0.11 - 'ipAddr' RCE (Authenticated)
TP-Link TL-WA855RE V5_200415 – Device Reset Auth Bypass
# Exploit Title: TP-Link TL-WA855RE V5_200415 - Device Reset Auth Bypass
Genexis Platinum 4410 Router 2.1 – UPnP Credential Exposure
# Exploit Title: Genexis Platinum 4410 Router 2.1 - UPnP Credential Exposure
Fortinet FortiOS 6.0.4 – Unauthenticated SSL VPN User Password Modification
# Exploit Title: Fortinet FortiOS 6.0.4 - Unauthenticated SSL VPN User Password Modification
Cisco 7937G – DoS/Privilege Escalation
# Exploit Title: Cisco 7937G 1-4-5-7 - DoS/Privilege Escalation
Sony Playstation 4 (PS4) < 6.72 - 'ValidationMessage::buildBubbleTree()' Use-After-Free WebKit Code Execution (PoC)
const OFFSET_ELEMENT_REFCOUNT = 0x10;
Genexis Platinum-4410 P4410-V2-1.28 – Broken Access Control and CSRF
# Exploit Title: Genexis Platinum-4410 P4410-V2-1.28 - Broken Access Control and CSRF
TP-Link WDR4300 – Remote Code Execution (Authenticated)
# Exploit Title: TP-Link WDR4300 - Remote Code Execution (Authenticated)
iDS6 DSSPro Digital Signage System 6.2 – Improper Access Control Privilege Escalation
# Exploit Title: iDS6 DSSPro Digital Signage System 6.2 - Improper Access Control Privilege Escalation
iDS6 DSSPro Digital Signage System 6.2 – CAPTCHA Security Bypass
# Exploit Title: iDS6 DSSPro Digital Signage System 6.2 - CAPTCHA Security Bypass
iDS6 DSSPro Digital Signage System 6.2 – Cross-Site Request Forgery (CSRF)
# Exploit Title: iDS6 DSSPro Digital Signage System 6.2 - Cross-Site Request Forgery (CSRF)
Genexis Platinum-4410 P4410-V2-1.28 – Cross Site Request Forgery to Reboot
# Exploit Title: Genexis Platinum-4410 P4410-V2-1.28 - Cross Site Request Forgery to Reboot
GoAhead Web Server 5.1.1 – Digest Authentication Capture Replay Nonce Reuse
# Exploit Title: GoAhead Web Server 5.1.1 - Digest Authentication Capture Replay Nonce Reuse
Adtec Digital Multiple Products – Default Hardcoded Credentials Remote Root
# Exploit Title: Adtec Digital Multiple Products - Default Hardcoded Credentials Remote Root
ReQuest Serious Play F3 Media Server 7.0.3 – Remote Code Execution (Unauthenticated)
# Exploit Title: ReQuest Serious Play F3 Media Server 7.0.3 - Remote Code Execution (Unauthenticated)