VARIoT IoT exploits database

ABBS Audio Media Player 3.0 - Local Buffer Overflow (Metasploit).. local exploit for Windows platform

Siemens SIMATIC S7-300 is prone to a security-bypass vulnerability caused by hard-coded credentials. Successful attacks can allow a remote attacker to gain access to the vulnerable device.

Avaya Secure Access Link (SAL) gateway is prone to an information-disclosure vulnerability. To exploit this issue, attackers need to host malicious email servers with 'secavaya.com' and 'secaxeda.com' domain names. Exploiting this issue may allow an attacker to access sensitive information that may aid in further attacks. This issue affects Secure Access Link 1.5, 1.8, and 2.0.

HP Network Automation 9.10 - SQL Injection. CVE-2011-2403CVE-74134 . webapps exploit for PHP platform

Sagem F@st 3304 Routers - PPPoE Credentials Information Disclosure.. remote exploit for Hardware platform

Dlink DPH IP phones are prone to multiple remote vulnerabilities. An attacker with access to the web interface of the device can exploit these issues to compromise the affected device, upload arbitrary files, gain access to sensitive information and cause a denial-of-service condition. The following devices are affected: Dlink DPH 150SE Dlink DPH 150E Dlink DPH 150F1

CiscoKits CCNA TFTP Server is prone to a remote denial-of-service vulnerability. Successfully exploiting this issue allows remote attackers to crash the affected application, denying service to legitimate users. CiscoKits CCNA TFTP Server 1.0 is affected; other versions may also be vulnerable.

HTC devices running the Bluetooth OBEX FTP service on Android OS is prone to a directory-traversal vulnerability. Exploiting this issue allows an attacker to read or download arbitrary files from locations outside the application's current directory and obtain sensitive information. Other attacks may also be possible.

Iconics GENESIS32 9.21.201.01 - Integer Overflow (Metasploit). CVE-72817 . remote exploit for Windows platform

Alice Modem version 1111 suffers from cross site scripting and denial of service vulnerabilities.

Alice Modem 1111 - 'rulename' Cross-Site Scripting / Denial of Service.. dos exploit for Hardware platform

D-Link DSL-2650U remote denial of service proof of concept exploit.

D-Link DSL-2650U - Denial of Service (PoC).. dos exploit for Hardware platform

Portech MV-372 VoIP Gateway - Multiple Vulnerabilities.. remote exploit for Hardware platform

Portech MV-372 suffers from bypass, information disclosure, and denial of service vulnerabilities.

HP Operations Manager is prone to an arbitrary-file-deletion vulnerability. An attacker can exploit this issue to delete arbitrary files on an affected computer. Successful exploits will result in a denial-of-service condition or the corruption of applications running on the affected computer.

AzeoTech DaqFactory - Denial of Service. CVE-2011-2956CVE-73390 . dos exploit for Multiple platform

H3C ER5100 - Authentication Bypass.. webapps exploit for ASP platform

Multiple IP cameras are prone to an unauthorized access vulnerability. Successful exploits will allow a remote attacker to gain unauthorized access to the affected device. The following IP cameras are affected: IPUX ICS1033 Digicom IP Camera 100W TRENDnet TV-IP422W

Adobe Flash Player - AVM Verification Logic Array Indexing Code Execution (Metasploit). CVE-2011-2110CVE-48268CVE-2008-4192 . remote exploit for Windows platform