VARIoT IoT exploits database

Cisco TelePresence endpoint devices are prone to multiple vulnerabilities. An attacker can exploit these issues to execute arbitrary commands, disclose potentially sensitive information, or cause denial-of-service conditions.

Cisco ASA 5500 series security appliances are prone to multiple remote vulnerabilities. An attacker can exploit these issues to disclose potentially sensitive information or to cause denial-of-service conditions.

Cisco TelePresence Manager is prone to multiple vulnerabilities. An attacker can exploit these issues to execute arbitrary commands, and bypass authentication. Successful exploits may aid in a complete compromise of an affected device.

Cisco TelePresence Multipoint Switch is prone to multiple vulnerabilities, including: 1. Multiple denial-of-service vulnerabilities 2. A security-bypass vulnerability 3. An unauthorized-access vulnerability An attacker can exploit these issues to bypass certain security restrictions and cause a denial-of-service condition. Other attacks are also possible. These issues are being tracked by the following Cisco Bug IDs: CSCtf01253 CSCtf97164 CSCth60993 CSCtj44534

Cisco TelePresence Recording Server is prone to multiple vulnerabilities. An attacker can exploit these issues to execute arbitrary commands, cause denial-of-service conditions, gain unauthorized access, or potentially completely compromise an affected device.

Control Microsystems ClearSCADA is prone to multiple remote vulnerabilities, including: 1. A cross-site scripting vulnerability 2. A buffer-overflow vulnerability 3. An information-disclosure vulnerability An attacker can exploit these issues to execute arbitrary code with elevated privileges, execute arbitrary script code within the context of the webserver, steal cookie-based authentication credentials, and gain access to sensitive information. Other attacks are also possible. The following products are affected: ClearSCADA 2005 ClearSCADA 2007 ClearSCADA 2009

7T Interactive Graphical SCADA System is prone to a remote memory-corruption vulnerability. An attacker can exploit this issue to execute arbitrary code with administrative privileges. Successfully exploiting this issue will completely comprise the affected system. Failed exploit attempts will result in a denial-of-service condition.

Microsoft SQL Server - sp_replwritetovarbin Memory Corruption (MS09-004) (via SQL Injection) (Metasploit). CVE-2008-5416CVE-50589CVE-MS09-004 . remote exploit for Windows platform

Microsoft SQL Server - sp_replwritetovarbin Memory Corruption (MS09-004) (via SQL Injection) (Metasploit). CVE-2008-5416CVE-50589CVE-MS09-004 . remote exploit for Windows platform

Oracle Java - Floating-Point Value Denial of Service. CVE-2010-4476CVE-70965 . dos exploit for Multiple platform

Oracle Java - Floating-Point Value Denial of Service. CVE-2010-4476CVE-70965 . dos exploit for Multiple platform

Hycus CMS version 1.0.3 suffers from a path disclosure vulnerability.

MuPDF is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code with the privileges of the user running the application or crash the application, denying service to legitimate users. MuPDF 0.7 is vulnerable; other versions may also be affected.

Microsoft SQL Server - sp_replwritetovarbin Memory Corruption (MS09-004) (Metasploit). CVE-2008-5416CVE-50589CVE-MS09-004 . remote exploit for Windows platform

Microsoft SQL Server - sp_replwritetovarbin Memory Corruption (MS09-004) (Metasploit). CVE-2008-5416CVE-50589CVE-MS09-004 . remote exploit for Windows platform

Airties AIR5444TT - Cross-Site Scripting. CVE-2018-8738 . webapps exploit for Windows platform

Sielco Sistemi Winlog 2.07.00 - Stack Overflow. CVE-2011-0517CVE-70418 . dos exploit for Windows platform

Sielco Sistemi Winlog - Remote Buffer Overflow (Metasploit). CVE-2011-0517CVE-70418 . remote exploit for Windows platform

The SAP Crystal Reports Server ActiveX control is prone to multiple insecure-method vulnerabilities. Successful exploits will compromise affected computers or cause denial-of-service conditions; other attacks are possible. SAP Crystal Reports Server 2008 is vulnerable.

SAP Crystal Reports Server is prone to multiple cross-site scripting vulnerabilities and a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. The cross-site scripting issues can be exploited to execute script code in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials. The directory-traversal issue can be exploited to disclose the contents of arbitrary files. SAP Crystal Reports Server 2008 is vulnerable.