VARIoT IoT exploits database

7-Technologies IGSS 9 - IGSSdataServer .Rms Rename Buffer Overflow (Metasploit). CVE-2011-1567CVE-72352 . remote exploit for Windows platform

7-Technologies IGSS 9.00.00 b11063 - 'IGSSdataServer.exe' Remote Stack Overflow (Metasploit). CVE-2011-1567 . remote exploit for Windows platform

7-Technologies IGSS 9.00.00.11059 - Multiple Vulnerabilities. CVE-2011-1568CVE-2011-1567CVE-2011-1566CVE-2011-1565CVE-72354CVE-72353CVE-72352CVE-72351CVE-72350CVE-72349 . remote exploit for Windows platform

DATAC RealWin - Multiple Vulnerabilities. CVE-2011-1564CVE-72827CVE-2011-1563 . dos exploit for Windows platform

Siemens Tecnomatix FactoryLink is prone to multiple security vulnerabilities, including buffer-overflow issues, a memory-corruption issue, information-disclosure issues, and denial-of-service issues. Attackers can leverage these issues to obtain sensitive information, run arbitrary code, or cause a denial of service. Other attacks may also be possible. Siemens Tecnomatix FactoryLink 8.0.1.1473 is vulnerable; other versions may also be affected.

Iconics GENESIS32 and GENESIS64 are prone to multiple security vulnerabilities including multiple memory-corruption vulnerabilities and multiple integer-overflow vulnerabilities because they fail to properly validate user-supplied input. Successful exploits may allow the attacker to execute arbitrary code in the context of the application. Failed exploit attempts will likely result in denial-of-service conditions. The following versions are vulnerable; other versions may also be affected: GENESIS32 9.21 GENESIS64 10.51

Multiple cross site scripting vulnerabilities have been discovered in the PerformanceManagement application module in SAP Crystal Reports Server 2008.

ABBS Electronic Flash Cards version 2.1 buffer overflow exploit.

Progea Movicon 11 - 'TCPUploadServer' Remote File System. CVE-78614CVE-2011-2963CVE-72888 . remote exploit for Windows platform

ABBS Audio Media Player - '.m3u' / '.LST' Local Buffer Overflow. CVE-75096 . local exploit for Windows platform

ABBS Electronic Flash Cards 2.1 - '.fcd' Local Buffer Overflow.. local exploit for Windows platform

ABBS Audio Media Player 3.0 - '.lst' Local Buffer Overflow (SEH).. local exploit for Windows platform

Trend Micro WebReputation API 10.5 - URI SecURIty Bypass.. remote exploit for Multiple platform

SAP GUI is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share location that contains a specially crafted Dynamic Link Library (DLL) file. SAP GUI versions 6.4 through 7.2 are vulnerable; other versions may also be affected.

WebKit is prone to a memory-corruption vulnerability. An attacker can exploit this issue by enticing an unsuspecting victim to view a malicious webpage. Successful exploits will allow attackers to execute arbitrary code in the context of the browser. Failed exploit attempts will result in a denial-of-service condition. NOTE: This issue was previously discussed in BID 46833 (Blackberry Browser Multiple Unspecified Information Disclosure and Integer Overflow Vulnerabilities), but has been given its own record to better document it.

KingView 6.5.3 SCADA - ActiveX. CVE-72889CVE-2011-3142 . remote exploit for Windows platform

vTiger CRM 5.0.4 - Local File Inclusion. CVE-2009-3249 . webapps exploit for PHP platform

PHP 'Exif' Extension - 'exif_read_data()' Remote Denial of Service. CVE-2011-0708 . dos exploit for Multiple platform

Cisco Linksys WAG120N - Cross-Site Request Forgery. CVE-71032 . webapps exploit for Hardware platform

Pragyan CMS is prone to an SQL-injection vulnerability and a code-execution vulnerability because it fails to sufficiently sanitize user-supplied data. Successfully exploiting these issues may allow an attacker to compromise the application, access or modify data, exploit latent vulnerabilities in the underlying database, or execute arbitrary PHP code in the context of the application. Pragyan CMS 3.0 rev 274 is vulnerable; other versions may be affected.