ReQuest Serious Play F3 Media Server 7.0.3 – Remote Denial of Service
# Exploit Title: ReQuest Serious Play F3 Media Server 7.0.3 - Remote Denial of Service
hardware
hardware 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
ReQuest Serious Play F3 Media Server 7.0.3 – Debug Log Disclosure
# Exploit Title: ReQuest Serious Play F3 Media Server 7.0.3 - Debug Log Disclosure
ReQuest Serious Play Media Player 3.0 – Directory Traversal File Disclosure
# Exploit Title: ReQuest Serious Play Media Player 3.0 - Directory Traversal File Disclosure Vulnerability
Genexis Platinum-4410 – ‘SSID’ Persistent XSS
# Exploit Title: Persistent XSS in SSID
Comtrend AR-5387un router – Persistent XSS (Authenticated)
#!/usr/bin/env python3
HiSilicon Video Encoders – Unauthenticated RTSP buffer overflow (DoS)
#!/usr/bin/env bash
HiSilicon Video Encoders – Full admin access via backdoor password
#!/usr/bin/env bash
HiSilicon video encoders – RCE via unauthenticated upload of malicious firmware
#!/usr/bin/env bash
HiSilicon Video Encoders – RCE via unauthenticated command injection
#!/usr/bin/env bash
HiSilicon Video Encoders – Unauthenticated file disclosure via path traversal
#!/usr/bin/env bash
Cisco ASA and FTD 9.6.4.42 – Path Traversal
# Exploit Title: Cisco ASA and FTD 9.6.4.42 - Path Traversal
D-Link DSR-250N 3.12 – Denial of Service (PoC)
# Exploit Title: D-Link DSR-250N 3.12 - Denial of Service (PoC)
Karel IP Phone IP1211 Web Management Panel – Directory Traversal
# Exploit Title: Karel IP Phone IP1211 Web Management Panel - Directory Traversal
SpinetiX Fusion Digital Signage 3.4.8 – Username Enumeration
# Exploit Title: SpinetiX Fusion Digital Signage 3.4.8 - Username Enumeration
SpinetiX Fusion Digital Signage 3.4.8 – Cross-Site Request Forgery (Add Admin)
# Exploit Title: SpinetiX Fusion Digital Signage 3.4.8 - Cross-Site Request Forgery (Add Admin)
SpinetiX Fusion Digital Signage 3.4.8 – Database Backup Disclosure
# Exploit Title: SpinetiX Fusion Digital Signage 3.4.8 - Database Backup Disclosure
BrightSign Digital Signage Diagnostic Web Server 8.2.26 – File Delete Path Traversal
# Exploit Title: SpinetiX Fusion Digital Signage 3.4.8 - File Delete Path Traversal
BrightSign Digital Signage Diagnostic Web Server 8.2.26 – Server-Side Request Forgery (Unauthenticated)
# Exploit Title: BrightSign Digital Signage Diagnostic Web Server 8.2.26 - Server-Side Request Forgery (Unauthenticated)
Sony IPELA Network Camera 1.82.01 – ‘ftpclient.cgi’ Remote Stack Buffer Overflow
# Exploit Title: Sony IPELA Network Camera 1.82.01 - 'ftpclient.cgi' Remote Stack Buffer Overflow
Mida eFramework 2.8.9 – Remote Code Execution
# Exploit Title: Mida eFramework 2.8.9 - Remote Code Execution
Mida eFramework 2.9.0 – Back Door Access
# Exploit Title: Mida eFramework 2.9.0 - Back Door Access
RAD SecFlow-1v SF_0290_2.3.01.26 – Cross-Site Request Forgery (Reboot)
# Exploit Title: RAD SecFlow-1v SF_0290_2.3.01.26 - Cross-Site Request Forgery (Reboot)
RAD SecFlow-1v SF_0290_2.3.01.26 – Persistent Cross-Site Scripting
# Exploit Title: RAD SecFlow-1v SF_0290_2.3.01.26 - Persistent Cross-Site Scripting
ZTE Router F602W – Captcha Bypass
# Exploit Title: ZTE Router F602W - Captcha Bypass
Tiandy IPC and NVR 9.12.7 – Credential Disclosure
# Exploit Title: Tiandy IPC and NVR 9.12.7 - Credential Disclosure
Eibiz i-Media Server Digital Signage 3.8.0 – Privilege Escalation
# Exploit Title: Eibiz i-Media Server Digital Signage 3.8.0 - Privilege Escalation
Eibiz i-Media Server Digital Signage 3.8.0 – Configuration Disclosure
# Exploit Title: Eibiz i-Media Server Digital Signage 3.8.0 - Configuration Disclosure
Eibiz i-Media Server Digital Signage 3.8.0 – Authentication Bypass
# Exploit Title: Eibiz i-Media Server Digital Signage 3.8.0 - Authentication Bypass
Seowon SlC 130 Router – Remote Code Execution
# Exploit Title: Seowon SlC 130 Router - Remote Code Execution
PNPSCADA 2.200816204020 – ‘interf’ SQL Injection (Authenticated)
# Exploit Title: PNPSCADA 2.200816204020 - 'interf' SQL Injection (Authenticated)
Ruijie Networks Switch eWeb S29_RGOS 11.4 – Directory Traversal
# Exploit Title: Ruijie Networks Switch eWeb S29_RGOS 11.4 - Directory Traversal
QiHang Media Web Digital Signage 3.0.9 – Remote Code Execution (Unauthenticated)
# Exploit Title: QiHang Media Web Digital Signage 3.0.9 - Remote Code Execution (Unauthenticated)
QiHang Media Web Digital Signage 3.0.9 – Unauthenticated Arbitrary File Disclosure
# Exploit Title: QiHang Media Web Digital Signage 3.0.9 - Unauthenticated Arbitrary File Disclosure
QiHang Media Web Digital Signage 3.0.9 – Unauthenticated Arbitrary File Deletion
# Exploit Title: QiHang Media Web Digital Signage 3.0.9 - Unauthenticated Arbitrary File Deletion
QiHang Media Web Digital Signage 3.0.9 – Cleartext Credential Disclosure
# Exploit Title: QiHang Media Web Digital Signage 3.0.9 - Cleartext Credential Disclosure
Artica Proxy 4.3.0 – Authentication Bypass
# Exploit Title: Artica Proxy 4.3.0 - Authentication Bypass
All-Dynamics Digital Signage System 2.0.2 – Cross-Site Request Forgery (Add Admin)
# Exploit Title: All-Dynamics Digital Signage System 2.0.2 - Cross-Site Request Forgery (Add Admin)
Cisco Adaptive Security Appliance Software 9.7 – Unauthenticated Arbitrary File Deletion
# Exploit Title: Cisco Adaptive Security Appliance Software 9.7 - Unauthenticated Arbitrary File Deletion
Cisco Adaptive Security Appliance Software 9.11 – Local File Inclusion
# Exploit Title: Cisco Adaptive Security Appliance Software 9.11 - Local File Inclusion
F5 Big-IP 13.1.3 Build 0.0.6 – Local File Inclusion
# Exploit Title: F5 Big-IP 13.1.3 Build 0.0.6 - Local File Inclusion
UBICOD Medivision Digital Signage 1.5.1 – Cross-Site Request Forgery (Add Admin)
# Title: UBICOD Medivision Digital Signage 1.5.1 - Cross-Site Request Forgery (Add Admin)
UBICOD Medivision Digital Signage 1.5.1 – Authorization Bypass
# Title: UBICOD Medivision Digital Signage 1.5.1 - Authorization Bypass
Zyxel Armor X1 WAP6806 – Directory Traversal
# Exploit Title: Zyxel Armor X1 WAP6806 - Directory Traversal
SuperMicro IPMI WebInterface 03.40 – Cross-Site Request Forgery (Add Admin)
# Exploit Title: SuperMicro IPMI WebInterface 03.40 - Cross-Site Request Forgery (Add Admin)
BSA Radar 1.6.7234.24750 – Cross-Site Request Forgery (Change Password)
# Exploit title: BSA Radar 1.6.7234.24750 - Cross-Site Request Forgery (Change Password)
SuperMicro IPMI 03.40 – Cross-Site Request Forgery (Add Admin)
# Exploit Title: SuperMicro IPMI 03.40 - Cross-Site Request Forgery (Add Admin)
Sickbeard 0.1 – Remote Command Injection
# Exploit Title: Sickbeard 0.1 - Remote Command Injection
mySCADA myPRO 7 – Hardcoded Credentials
# Exploit Title: mySCADA myPRO v7 Hardcoded Credentials
Eaton Intelligent Power Manager 1.6 – Directory Traversal
# Exploit Title: Eaton Intelligent Power Manager 1.6 - Directory Traversal
Netgear R7000 Router – Remote Code Execution
# EDB Note: Download ~ https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/48588.zip