VARIoT IoT exploits database

D-Link DSL-2750u ME_1.09 - Cross-Site Request Forgery. CVE-101776 . webapps exploit for Hardware platform

D-Link DSL-2750U is prone to a cross-site request-forgery vulnerability. Exploiting this issue may allow a remote attacker to perform certain administrative actions and gain unauthorized access to the affected device. Other attacks are also possible.

Huawei Technologies du Mobile Broadband 16.0 - Local Privilege Escalation. CVE-90090CVE-2014-8359CVE-2014-8358 . local exploit for Windows platform

Huawei B593u-12 And T-Mobile HOME NET Router are prone to the following security vulnerabilities: 1. An information-disclosure vulnerability 2. A security-bypass vulnerability 3. A command-injection vulnerability 4. A directory-traversal vulnerability. 5. A cross-site request-forgery vulnerability Exploiting these issues may allow a remote attacker to obtain sensitive information, perform certain administrative actions, bypass certain security restrictions, access arbitrary files, execute arbitrary commands, and gain unauthorized access to the affected device. Other attacks are also possible. The following products are vulnerable: Huawei B593u-12 version V100R001C54SP063 T-Mobile HOME NET Router version V100R001C54SP063

ABB MicroSCADA - 'wserver.exe' Remote Code Execution (Metasploit). CVE-100324 . remote exploit for Windows platform

TP-Link TL-WR740N/TL-WR740ND are prone to a denial-of-service vulnerability. Attackers may exploit this issue to cause an affected device to crash, resulting in a denial-of-service condition. TP-Link TL-WR740N/TL-WR740ND running firmware version 3.12.11 Build 120320 Rel.51047n is vulnerable.

D-Link DIR-Series Routers - '/model/__show_info.php' Local File Disclosure. CVE-100579 . webapps exploit for Hardware platform

Cisco Secure Access Control System is prone to a remote information-disclosure vulnerability. Successful exploits will allow attackers to obtain sensitive information. This may result in further attacks. This issue is tracked by Cisco Bug ID CSCuj39274.

ZyXEL GS1510-16 is prone to a password-disclosure vulnerability. Attackers can exploit this issue to gain access to administrator password that may lead to further attacks.

D-Link DSL-6740U is prone to a cross-site request-forgery vulnerability. Exploiting this issue may allow a remote attacker to perform certain administrative actions and gain unauthorized access to the affected device. Other attacks are also possible.

ADB Discus DRG A125G is prone to multiple cross-site request-forgery vulnerabilities. Exploiting these issues may allow a remote attacker to perform certain unauthorized actions and compromise the affected device.

TPLINK TL-WR740N/TL-WR740ND are prone to a cross-site request-forgery vulnerability because it fails to properly validate HTTP requests. Exploiting this issue may allow a remote attacker to perform certain unauthorized administrative actions. Other attacks are also possible. TP-Link TL-WR740N/TL-WR740ND running firmware 3.16.6 Build 130529 are vulnerable; other versions may also be affected.

Discus DRG A125G is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Discus DRG A125G is vulnerable; other versions may also be affected.

D-Link DSL-500B Gen 2 - Parental Control Configuration Panel Persistent Cross-Site Scripting. CVE-2013-5223CVE-99603 . webapps exploit for Hardware platform

D-Link DSL-500B Gen 2 - URL Filter Configuration Panel Persistent Cross-Site Scripting. CVE-2013-5223CVE-99603 . webapps exploit for Hardware platform

vTiger CRM 5.3.0 5.4.0 - (Authenticated) Remote Code Execution (Metasploit). CVE-2013-3591CVE-99150 . remote exploit for PHP platform

The ASUS RT-N13U home router comes configured with an administrative root shell with a default password and is available via telnetd. Changing the password on the web interface does not remediate the issue.

Stem Innovation - 'IZON' Hard-Coded Credentials. CVE-2013-6236CVE-99069 . webapps exploit for Hardware platform

ARRIS DG860A - NVRAM Backup Password Disclosure. CVE-98759 . webapps exploit for Hardware platform