VARIoT IoT exploits database

Cherokee Web server 0.5.4 - Denial of Service. CVE-2009-4587CVE-61624 . dos exploit for Windows platform

3Com OfficeConnect ADSL Wireless 11g Firewall Router is prone to an authentication-bypass vulnerability and a remote command-execution vulnerability. An attacker can exploit these issues to gain unauthorized administrative access to the affected device or execute arbitrary commands. Successful exploits will completely compromise the device.

HP LaserJet Printers - Multiple Persistent Cross-Site Scripting Vulnerabilities. CVE-2009-2684 . remote exploit for Hardware platform

The BlackBerry Device Software browser is prone to a weakness that may cause affected users to trust malicious sites. This issue may potentially lead to other attacks, because users may operate under a false sense of security. This issue affects all versions prior to BlackBerry Device Software 4.5.0.173, 4.6.0.303, 4.6.1.309, 4.7.0.179, and 4.7.1.57. NOTE: This issue affects all built-in browsers installed on BlackBerry devices: BlackBerry Browser Internet Browser WAP Browser Wi-Fi (Hotspot) Browser

Cisco IOS is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause the affected device to reload, denying service to legitimate users. This issue is being tracked by Cisco Bug ID CSCsz38104.

Cisco IOS is prone to multiple remote denial-of-service vulnerabilities. An attacker can exploit these issues to cause an affected device to reload, denying service to legitimate users. These issues are being tracked by Cisco Bug IDs CSCsh97579, CSCsq31776, and CSCsx70889.

Cisco IOS is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause an affected device to reload, denying service to legitimate users. This issue is being tracked by Cisco Bug IDs CSCsu24505 and CSCsv75948.

SAP Crystal Reports Server is prone to multiple unspecified remote vulnerabilities, including: - A denial-of-service vulnerability caused by an infinite loop. - A heap-based buffer-overflow vulnerability. - An unspecified remote code-execution vulnerability. Attackers can exploit these issues to execute code within the context of the affected server and cause denial-of-service conditions.

SAP NetWeaver is prone to multiple unspecified remote vulnerabilities, including: - Multiple information-disclosure vulnerabilities. - A NULL-pointer dereference vulnerability. - Multiple heap-overflow vulnerabilities. - A denial-of-service vulnerability. Attackers can exploit these issues to execute code within the context of the affected server, cause denial-of-service conditions, and obtain potentially sensitive information.

HP Operations Manager - Default Manager 8.1 Account Remote Security. CVE-2009-3099CVE-57898 . remote exploit for Multiple platform

HP Operations Dashboard 2.1 - Portal Default Manager Account Remote Security. CVE-2009-4188CVE-60669 . remote exploit for Multiple platform

HP Operations Dashboard 2.1 - Portal Default Manager Account Remote Security. CVE-2009-4188CVE-60669 . remote exploit for Multiple platform

Cisco Unified Communications Manager is prone to multiple denial-of-service vulnerabilities. An attacker can exploit these issues to cause denial-of-service conditions in the affected application. These issues are documented by these Cisco bug IDs: CSCsi46466 CSCsz40392 CSCsq22534 CSCsx32236 CSCsx23689

Cisco Lightweight Access Point is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause the affected device to stop responding, denying service to legitimate users. This issue is being tracked by Cisco Bug ID CSCtb56664.

vTiger CRM 5.0.4 - Remote Code Execution / Cross-Site Request Forgery / Local File Inclusion / Cross-Site Scripting. CVE-58269CVE-2009-3250CVE-58268CVE-2009-3249CVE-58267CVE-2009-3248CVE-57240CVE-2009-3247CVE-57239CVE-57238CVE-57237 . webapps exploit for PHP platform

SAP NetWeaver Application Server version 7.0 suffers from a cross site scripting vulnerability.

Cisco Wireless LAN Controller is prone to a denial-of-service vulnerability when handling specially crafted HTTP requests. An attacker can exploit this issue to trigger an affected device to reboot, causing denial-of-service conditions. This issue affects Cisco Wireless LAN Controller 4402 (software release 5.1.151.0); other versions and devices may be affected as well.

Multiple Browsers - Denial of Service. CVE-56253CVE-2009-2535 . dos exploit for Multiple platform

SAP GUI 6.4 - ActiveX (Accept) Remote Buffer Overflow (PoC). CVE-55060 . dos exploit for Windows platform