VARIoT IoT exploits database

Cisco IOS is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause an affected device to reload, denying service to legitimate users. This issue is tracked by Cisco Bug ID CSCta63555. http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCsq24002

Research In Motion BlackBerry Device Software is prone to a remote denial-of-service vulnerability. Successful exploits allow an attacker to crash the affected browser, resulting in a denial-of-service condition. Versions prior to Research In Motion BlackBerry Device Software 6.0.0 are vulnerable.

Multiple vendors' products are prone to an IPv6-related denial-of-service vulnerability. A remote attacker can exploit this issue to make affected computers and devices unresponsive, denying service to legitimate users.

Cisco ASA 5500 series appliances are prone to multiple remote vulnerabilities, including: Multiple security-bypass vulnerabilities Multiple denial-of-service vulnerabilities Attackers can exploit these issues to cause denial-of-service conditions or bypass certain security restrictions.

KingView 6.5.3 - SCADA HMI Heap Overflow. CVE-2011-0406CVE-70366 . remote exploit for Windows platform

D-Link WBR-1310 - Authentication Bypass.. webapps exploit for Hardware platform

D-Link WBR-1310 is prone to an authentication-bypass vulnerability. Attackers can exploit this issue to bypass authentication, change the administrative password and gain administrative control of the affected device. D-Link WBR-1310 with firmware version 2.00 is vulnerable; other versions may also be affected.

Hycus CMS version 1.0.3 suffers from a remote SQL injection vulnerability.

Ecava IntegraXor is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share location that contains a specially crafted Dynamic Link Library (DLL) file. IntegraXor 3.6.4000.0 is vulnerable; other versions may also be affected.

Hycus CMS version 1.0.3 suffers from a local file inclusion vulnerability.

Hycus CMS version 1.0.3 suffers from a remote SQL injection vulnerability.

Ecava IntegraXor versions 3.6.4000.0 and below suffer from a directory traversal vulnerability.

ecava IntegraXor 3.6.4000.0 - Directory Traversal. CVE-2010-4598CVE-69968 . remote exploit for Windows platform

Hycus CMS - Multiple Vulnerabilities. CVE-2010-4613CVE-2010-4612CVE-70218CVE-70217CVE-70148CVE-70147CVE-70146CVE-70145 . webapps exploit for PHP platform

D-Link DIR-300 suffers from a cross site request forgery vulnerability.

D-Link DIR-300 - Cross-Site Request Forgery (Change Admin Account Settings).. webapps exploit for Hardware platform

The D-Link DIR-300 router is prone to a cross-site request-forgery vulnerability. Successful exploits may allow attackers to run privileged commands on the affected device, change configuration, cause denial-of-service conditions, or inject arbitrary script code. Other attacks are also possible. This issue affects D-Link DIR-300 running firmware 1.04.

Apple Time Capsule and AirPort Base Station are prone to a remote denial-of-service vulnerability when handling an overly large quantity of Router Advertisement (RA) and Neighbor Discovery (ND) packets. An attacker can exploit this issue to cause an affected device to restart, triggering a denial-of-service condition for legitimate users. Apple Time Capsule and AirPort Base Station running firmware versions prior to 7.5.2 are affected. NOTE: This issue was previously discussed in BID 45466 (Apple Time Capsule and AirPort Base Station Multiple Remote Vulnerabilities) but has been given its own record to better document it.

Apple Time Capsule and AirPort Base Station are prone to a remote denial-of-service vulnerability because of an implementation issue in the network bridge. An attacker can exploit this issue to cause an affected device to stop responding to the network traffic, triggering a denial-of-service condition for legitimate users. Apple Time Capsule and AirPort Base Station running firmware versions prior to 7.5.2 are affected. NOTE: This issue was previously discussed in BID 45466 (Apple Time Capsule and AirPort Base Station Multiple Remote Vulnerabilities) but has been given its own record to better document it.

Ecava IntegraXor Remote - ActiveX Buffer Overflow (PoC). CVE-2010-4597CVE-69960 . dos exploit for Windows platform