VARIoT IoT exploits database

Affected products: vendor, model and version
Type can be e.g: Remote Code Execution or Denial of Service
Look up free text in title and description

VAR-E-201808-0292 CVE-2017-12576
PLANEX CS-QR20 Command Execution

Related entries in the VARIoT vulnerabilities database: VAR-201808-0126
No EDB ID
PLANEX CS-QR20 suffers from a remote command execution vulnerability due to a hidden management page existing.
VAR-E-201808-0510 CVE-2017-12575
NEC Aterm WG2600HP2 Information Disclosure

Related entries in the VARIoT vulnerabilities database: VAR-201808-0125
No EDB ID
NEC Aterm WG2600HP2 suffers from an information disclosure vulnerability due to missing authentication.
VAR-E-201808-0240 CVE-2017-12574
PLANEX CS-W50HD Hardcoded Credential

Related entries in the VARIoT vulnerabilities database: VAR-201808-0124
No EDB ID
PLANEX CS-W50HD suffers from a hardcoded credential vulnerability.
VAR-E-201808-0293 No CVE ZyXEL VMG3312-B10B Cross Site Scripting No EDB ID
ZyXEL VMG3312-B10B suffers from a cross site scripting vulnerability.
VAR-E-201808-0012 No CVE ZyXEL VMG3312-B10B - Cross-Site Scripting - Hardware webapps Exploit EDB ID: 45236
ZyXEL VMG3312-B10B - Cross-Site Scripting.. webapps exploit for Hardware platform
VAR-E-201808-0387 No CVE Mikrotik WinBox 6.42 Credential Disclosure No EDB ID
Mikrotik WinBox version 6.42 suffers from a credential disclosure vulnerability.
VAR-E-201808-0215 No CVE Mikrotik WinBox 6.42 - Credential Disclosure (golang) - Hardware webapps Exploit EDB ID: 45209
Mikrotik WinBox 6.42 - Credential Disclosure (golang).. webapps exploit for Hardware platform
VAR-E-201808-0495 No CVE TP-Link WR840N 0.9.1 3.16 - Denial of Service Exploit No EDB ID
VAR-E-201808-0169 No CVE Mikrotik WinBox 6.42 - Credential Disclosure Exploit No EDB ID
VAR-E-201808-0461 No CVE Mikrotik WinBox 6.42 - Credential Disclosure (Metasploit) - Windows remote Exploit EDB ID: 45170
Mikrotik WinBox 6.42 - Credential Disclosure (Metasploit).. remote exploit for Windows platform
VAR-E-201808-0279 No CVE TP-Link TL-WR840N - Denial of Service Vulnerability No EDB ID
VAR-E-201808-0273 CVE-2018-15172
TP-Link WR840N 0.9.1 3.16 - Denial of Service (PoC) - Hardware dos Exploit

Related entries in the VARIoT vulnerabilities database: VAR-201808-0631
EDB ID: 45203
TP-Link WR840N 0.9.1 3.16 - Denial of Service (PoC). CVE-2018-15172 . dos exploit for Hardware platform
VAR-E-201808-0113 No CVE ASUS DSL-N12E C1 1.1.2.3_345 - Remote Command Execution Exploit No EDB ID
VAR-E-201808-0442 No CVE ASUS DSL-N12E_C1 1.1.2.3_345 - Remote Command Execution - Hardware webapps Exploit EDB ID: 45135
ASUS DSL-N12E_C1 1.1.2.3_345 - Remote Command Execution.. webapps exploit for Hardware platform
VAR-E-201807-0308 No CVE Micro Focus Secure Messaging Gateway (SMG) < 471 - Remote Code Execution Exploit No EDB ID
VAR-E-201807-0180 No CVE D-link DAP-1360 - Path Traversal / Cross-Site Scripting - Hardware webapps Exploit EDB ID: 45084
D-link DAP-1360 - Path Traversal / Cross-Site Scripting.. webapps exploit for Hardware platform
VAR-E-201807-0149 No CVE D-link DAP-1360 - Path Traversal / Cross-Site Scripting Vulnerabilities No EDB ID
VAR-E-201807-0252 No CVE Davolink DVW 3200 Router - Password Disclosure Exploit No EDB ID
VAR-E-201807-0309 No CVE NUUO NVRmini - upgrade_handle.php Remote Command Execution Vulnerability No EDB ID
VAR-E-201807-0173 No CVE NUUO NVRmini - 'upgrade_handle.php' Remote Command Execution - Hardware webapps Exploit EDB ID: 45070
NUUO NVRmini - 'upgrade_handle.php' Remote Command Execution.. webapps exploit for Hardware platform