VARIoT IoT exploits database

SAP AG SAPgui is prone to a remote buffer-overflow vulnerability. Attackers can exploit this issue to execute arbitrary code within the context of an application that uses the ActiveX control (typically Internet Explorer). Failed exploit attempts will result in a denial-of-service condition. SAPgui 6.4 is vulnerable; other versions may also be affected.

SonicWALL SSL-VPN - 'cgi-bin/welcome/VirtualOffice' Remote Format String.. remote exploit for Hardware platform

Sun Java System Communications Express 6.3 - 'UWCMain' Cross-Site Scripting. CVE-2009-1729CVE-54609 . webapps exploit for Java platform

Sun Java System Communications Express 6.3 - 'search.xml' Cross-Site Scripting. CVE-2009-1729CVE-54610 . webapps exploit for Java platform

Linksys WAG54G2 router is prone to a remote command-injection vulnerability because it fails to adequately sanitize user-supplied input data. Remote attackers can exploit this issue to execute arbitrary shell commands with superuser privileges. This may facilitate a complete compromise of the affected device. Linksys WAG54G2 with firmware V1.00.10 is affected; other versions may also be vulnerable. UPDATE (May 29, 2009): The reporter indicates that this issue may not be remotely exploitable if the administrator credentials have been changed from the default values.

HP Data Protector 4.00-SP1b43064 - Remote Memory Leak/Denial of Service. CVE-2009-0714CVE-54509 . dos exploit for Windows platform

HP Data Protector 4.00-SP1b43064 - Remote Memory Leak/Denial of Service (Metasploit). CVE-2009-0714 . dos exploit for Windows platform

Pragyan CMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. Pragyan CMS 2.6.4 is vulnerable; other versions may also be affected.

IPsec-Tools < 0.7.2 (racoon frag-isakmp) - Multiple Remote Denial of Service Vulnerabilities (PoC). CVE-2009-1574CVE-54286 . dos exploit for Multiple platform

Trend Micro OfficeScan Client for Windows 8.0 SP1 suffers from a denial of service vulnerability. Proof of concept is in the zip file.

Trend Micro OfficeScan 8.0 Client - Denial of Service. CVE-2009-1435CVE-53890 . dos exploit for Windows platform

Linksys WRT54GC administration password changing exploit.

Linksys WRT54GC 1.5.7 Firmware - 'administration.cgi' Access Validation. CVE-2009-1561CVE-54092 . remote exploit for Hardware platform

MiniWeb 0.8.19 - Remote Buffer Overflow.. remote exploit for Windows platform

EnjoySAP SAP GUI - ActiveX Control Arbitrary File Download (Metasploit). CVE-2008-4830CVE-53680 . remote exploit for Windows platform

Oracle APEX 3.2 - Unprivileged DB users can see APEX Password hashes. CVE-53738CVE-2009-0981 . local exploit for Multiple platform

Oracle RDBms 10.2.0.3/11.1.0.6 - TNS Listener (PoC). CVE-53737CVE-2009-0991 . dos exploit for Windows platform