VARIoT IoT exploits database

AT-TFTP Server is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue can allow an attacker to retrieve arbitrary files outside of the FTP server root directory. This may aid in further attacks. AT-TFTP Server 1.8 is vulnerable; other versions may also be affected. RETIRED: This issue is retired because it is a duplicate of BID 11584.

Trend Micro Titanium Maximum Security 2011 is prone to a local privilege-escalation vulnerability. Local attackers can exploit this issue to execute arbitrary code with SYSTEM-level privileges and completely compromise the affected computer. Failed exploit attempts will result in a denial-of-service condition. Trend Micro Titanium Maximum Security 2011 version 3.0.1303 is vulnerable; other versions may also be affected.

Trend Micro Titanium Maximum Security 2011 - Local Kernel. CVE-69018 . local exploit for Windows platform

Xerox 4595 Copier/Printer is prone to an unspecified remote denial-of-service vulnerability. An attacker can exploit this issue to cause the affected device to restart, denying service to legitimate users. 4595 Copier/Printer with firmware prior to 1.224.255 are vulnerable.

Microsoft Windows Mobile - Overly Long vCard Name Field Denial of Service.. dos exploit for Windows platform

Oracle JRE - java.net.URLConnection class Same-of-Origin 'SOP' Policy Bypass. CVE-2010-3573 . remote exploit for Windows platform

Oracle JRE - java.net.URLConnection class Same-of-Origin 'SOP' Policy Bypass. CVE-2010-3573 . remote exploit for Windows platform

DATAC RealWin SCADA Server 2.0 (Build 6.1.8.10) - Buffer Overflow. CVE-68812CVE-2010-4142 . dos exploit for Windows platform

DATAC RealWin SCADA Server 2.0 (Build 6.1.8.10) - SCPC_TXTEVENT Buffer Overflow (Metasploit). CVE-2010-4142CVE-68812 . remote exploit for Windows platform

DATAC RealWin SCADA Server 1.06 - Remote Buffer Overflow. CVE-2010-4142CVE-68812 . remote exploit for Windows platform

DATAC RealWin SCADA Server 2.0 (Build 6.1.8.10) - SCPC_INITIALIZE Buffer Overflow (Metasploit). CVE-2010-4142CVE-68812 . remote exploit for Windows platform

DATAC RealWin SCADA Server 2.0 (Build 6.1.8.10) - SCPC_INITIALIZE_RF Buffer Overflow (Metasploit). CVE-2010-4142CVE-68812 . remote exploit for Windows platform

FreeBSD 9.1 - 'ftpd' Remote Denial of Service. CVE-2011-0418CVE-90005 . dos exploit for FreeBSD platform

GNU glibc - 'regcomp()' Stack Exhaustion Denial of Service. CVE-2010-4052CVE-70447 . dos exploit for Linux platform

GNU libc/regcomp(3) - Multiple Vulnerabilities. CVE-2010-4051CVE-2010-4052 . dos exploit for Linux platform

libc/glob(3) - Resource Exhaustion / Remote ftpd-anonymous (Denial of Service). CVE-2010-2632CVE-68527 . dos exploit for Multiple platform

Research In Motion BlackBerry Device Software 4.7.1 - Cross Domain Information Disclosure.. remote exploit for Hardware platform

Java - RMIConnectionImpl Deserialization Privilege Escalation (Metasploit). CVE-2010-0094CVE-63484 . remote exploit for Multiple platform

Java - RMIConnectionImpl Deserialization Privilege Escalation (Metasploit). CVE-2010-0094CVE-63484 . remote exploit for Multiple platform

Cisco IOS is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause the affected device to reload, denying service to legitimate users. This issue is being tracked by Cisco Bug ID CSCtd86472.