VARIoT IoT exploits database

Hycus CMS 1.0.1 - Multiple Cross-Site Request Forgery Vulnerabilities. CVE-67576 . webapps exploit for PHP platform

Linux Kernel 2.6.33.3 - SCTP INIT Remote Denial of Service. CVE-2010-1173 . dos exploit for Linux platform

Linux Kernel 2.6.33.3 - SCTP INIT Remote Denial of Service. CVE-2010-1173 . dos exploit for Linux platform

OpenSSL - 'ssl3_get_key_exchange()' Use-After-Free Memory Corruption. CVE-2010-2939CVE-66946 . dos exploit for Linux platform

OpenSSL - 'ssl3_get_key_exchange()' Use-After-Free Memory Corruption. CVE-2010-2939CVE-66946 . dos exploit for Linux platform

Cisco ASA security appliances are prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause the affected device to reload, denying service to legitimate users. This issue is documented in Cisco bug ID CSCte46507.

InduSoft Web Studio - 'ISSymbol.ocx InternationalSeparator()' Heap Overflow (Metasploit). CVE-2011-0340CVE-72865 . remote exploit for Windows platform

Sunway ForceControl 6.1 - Multiple Heap Buffer Overflow Vulnerabilities. CVE-2011-2960CVE-73124 . remote exploit for Windows platform

D-Link WBR-2310 1.0.4 - 'GET' Remote Buffer Overflow (PoC).. dos exploit for Hardware platform

VxWorks is prone to a security vulnerability due to an insecure-hashing algorithm. Successful exploits will allow remote attackers to perform brute-force attacks and obtain the password used for FTP and Telnet services. The issue affects multiple products from multiple vendors that ship with the VxWorks operating system. NOTE: This document previously covered two vulnerabilities in VxWorks. The remote security-bypass issue has been moved to BID 42158 (VxWorks Debugging Service Security-Bypass Vulnerability) to allow for better documentation of both issues.

SAP Netweaver versions 6.4 through 7.0 suffer from a cross site scripting vulnerability.

SAP NetWeaver 6.4/7.0 - 'wsnavigator' Cross-Site Scripting.. webapps exploit for JSP platform

Siemens SIMATIC WinCC is affected by a vulnerability that allows attackers to bypass security. An attacker can exploit this issue to bypass certain security restrictions and gain access to the application's database. Successfully exploiting this issue may lead to further attacks.

Apache Struts < 2.2.0 - Remote Command Execution (Metasploit). CVE-2010-1870CVE-66280 . remote exploit for Multiple platform

Struts2/XWork < 2.2.0 - Remote Command Execution. CVE-2010-1870CVE-66280 . remote exploit for Multiple platform

Virtual Security Research, LLC. Security Advisory - VSR identified multiple weaknesses in the Cisco CSS 11500's handling of HTTP header interpretation and client-side SSL certificates.

Unauthenticated access and modification of several device parameters, including Wi-Fi SSID, keys and passphrases is possible on the D-Link DAP-1160. Unauthenticated remote reboot of the device can be also performed.

The D-Link DAP-1160 wireless access point (WAP) is prone to a security-bypass vulnerability. Remote attackers can exploit this issue to bypass security restrictions, access certain administrative functions, alter configuration, or trigger a denial-of-service condition. D-Link DAP-1160 running firmware v120b06, v130b10, and v131b01 are vulnerable.

D-Link DAP-1160 Wireless Access Point - DCC Protocol Security Bypass.. remote exploit for Hardware platform