VARIoT IoT exploits database

Linksys WAP54Gv3 Wireless Router - 'debug.cgi' Cross-Site Scripting.. remote exploit for Hardware platform

Trellian FTP Client 3.01 - PASV Remote Buffer Overflow (Metasploit). CVE-2010-1465CVE-63812 . remote exploit for Windows platform

The Linksys WAP54Gv3 has a debug interface allowing for the execution of root privileged shell commands. Hardcoded credentials, that cannot be changed by user, can be used for accessing the debug interface.

Linksys WAP54Gv3 wireless router devices are prone to a security-bypass vulnerability because they allow access to debugging scripts through hard coded credentials. Successful exploits allow attackers to gain privileged access to the device; other attacks may also be possible. The following firmware versions are vulnerable: 3.05.03 (Europe) 3.04.03 (US) Other versions or devices may also be affected.

Cisco ASA security appliances are prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause the affected device to reload, denying service to legitimate users. This issue is documented in Cisco bug IDs CSCsm11264 and CSCtb92911.

U.S.Robotics USR5463 firmware is prone to a cross-site request-forgery vulnerability. Successful exploits may allow attackers to perform unauthorized actions on the affected device in the context of a logged-in user. This may allow attackers to gain access to or modify sensitive information and perform HTML-injection attacks. U.S.Robotics USR5463 firmware versions 0.01 through 0.06 are vulnerable.

Cisco DPC2100 2.0.2 r1256-060303 - Multiple Security Bypass / Cross-Site Request Forgery Vulnerabilities. CVE-2010-2025CVE-64941 . remote exploit for Hardware platform

vtiger CRM version 5.2.0 suffers from a shell upload vulnerability.

vtiger CRM version 5.2.0 cross site request forgery exploit.

Rumba FTP client ActiveX control is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Successful exploits may allow an attacker to execute arbitrary code in the context of a user running the affected application. Failed attempts will likely result in denial-of-service conditions. The issue affects Rumba FTP client version 4.2.0.0.

U.S.Robotics USR5463 0.06 Firmware - 'setup_ddns.exe' HTML Injection.. remote exploit for Hardware platform

Cisco Application Control Engine (ACE) - HTTP Parsing Security.. remote exploit for Hardware platform

Mini Web Server is prone to a directory-traversal vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting these issues will allow an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, and to view arbitrary local files and directories within the context of the webserver. This may let the attacker steal cookie-based authentication credentials and other harvested information may aid in launching further attacks. Mini Web Server 1.0 is vulnerable; other versions may also be affected.

Tele Data's Contact Management Server 0.9 - 'Username' SQL Injection.. webapps exploit for PHP platform

Linux Kernel 2.6.34 - 'find_keyring_by_name()' Local Memory Corruption. CVE-2010-1437CVE-64549 . dos exploit for Linux platform

Linux Kernel 2.6.34 - 'find_keyring_by_name()' Local Memory Corruption. CVE-2010-1437CVE-64549 . dos exploit for Linux platform

The 3Com H3C SR6600 is prone to a remote denial-of-service vulnerability. Successfully exploiting this issue allows remote attackers to cause the affected device to restart, denying service to legitimate users.

Huawei EchoLife HG520 3.10.18.5-1.0.5.0 - Remote Information Disclosure.. remote exploit for Hardware platform

OpenSSL - Remote Denial of Service. CVE-2010-0740 . dos exploit for Linux platform

Apache Tomcat 5.5.0 < 5.5.29 / 6.0.0 < 6.0.26 - Information Disclosure. CVE-2010-1157 . remote exploit for Multiple platform