VARIoT IoT exploits database

D-Link DIR-605L - Captcha Handling Buffer Overflow (Metasploit). CVE-86824 . remote exploit for Hardware platform

This exploit lets your extract the ARRIS DG860A NVRAM backup where password information is stored in plain text.

SAP Sybase Adaptive Server Enterprise - XML External Entity Information Disclosure. CVE-2013-6025CVE-98655 . remote exploit for Multiple platform

D-Link / PLANEX COMMUNICATIONS - 'RuntimeDiagnosticPing()' Remote Stack Buffer Overflow. CVE-2013-6027CVE-98805 . remote exploit for Hardware platform

Indusoft Thin Client version 7.1 suffers from an active-x buffer overflow vulnerability.

Indusoft Thin Client 7.1 - ActiveX Buffer Overflow. CVE-98333 . remote exploit for Windows platform

InduSoft Thin Client is prone to a remote buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer. Attackers can exploit this issue to execute arbitrary code in the context of the application (typically Internet Explorer) using the ActiveX control. Failed exploit attempts will likely result in denial-of-service conditions. InduSoft Thin Client 7.1 is vulnerable; other versions may also be affected.

ONO Hitron CDE-30364 router is prone to a denial-of-service vulnerability because it fails to properly bounds-check user-supplied data. An attacker can exploit this issue to cause a denial-of-service condition.

ASUS RT-N66U suffers from a cross site request forgery vulnerability that allows for arbitrary command execution.

Asus RT-N66U 3.0.0.4.374_720 - Cross-Site Request Forgery. CVE-98455 . webapps exploit for Hardware platform

ASUS RT-N66U is prone to a cross-site request-forgery vulnerability. Attackers can exploit this issue to perform certain administrative actions and gain unauthorized access to the affected device. ASUS RT-N66U 3.0.0.4.374_720 is vulnerable; other versions may also be affected.

FiberHome Modem Router HG-110 is prone to directory traversal and security bypass vulnerabilities. Exploiting these issues will allow an attacker to bypass security restrictions, perform unauthorized actions and access, read and execute files outside the webroot folder. Information harvested may aid in launching further attacks. FiberHome Modem Router HG-110 running firmware HG110_BH_V1.6 is vulnerable; other versions may also be affected.

vTiger CRM 5.4.0 - 'index.php?onlyforuser' SQL Injection. CVE-2013-5091CVE-97504 . webapps exploit for PHP platform

ONO Hitron CDE-30364 is prone to multiple cross-site request-forgery vulnerabilities. Attackers can exploit these issues to perform certain administrative actions and gain unauthorized access to the affected device.

D-Link DIR-505 devices suffer from privilege escalation issues due to hard-coded credentials, path traversal, command injection, weak encryption, and authentication bypass vulnerabilities. Firmware versions 1.06 and below are affected.

D-Link DIR-505 1.06 - Multiple Vulnerabilities. CVE-97179CVE-97178CVE-97177CVE-97176CVE-97175CVE-97174 . webapps exploit for Hardware platform

Sagemcom F@st 3184 2.1.11 - Multiple Vulnerabilities. CVE-2013-5220CVE-99381CVE-2013-5219CVE-2013-5218CVE-2013-5039CVE-2013-5038CVE-2013-5037CVE-99360CVE-99359CVE-99358CVE-99357CVE-99356 . webapps exploit for Hardware platform

D-Link DIR-505 router is prone to the following security vulnerabilities: 1. A command-injection vulnerability 2. A file encryption weakness 3. A directory-traversal vulnerability 4. An arbitrary file-upload vulnerability 5. Multiple authentication bypass vulnerabilities An attacker can exploit these issues to gain access to potentially sensitive information, execute arbitrary commands in the context of the affected device, upload arbitrary files and bypass certain security restrictions to perform unauthorized actions. Other attacks are also possible. D-Link DIR-505 running firmware versions 1.06 and prior are vulnerable.

D-Link DSL-2740B - Multiple Cross-Site Request Forgery Vulnerabilities. CVE-2013-5730CVE-97278 . webapps exploit for Hardware platform

Apple Time Capsule and AirPort Base Station are prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause an unexpected base station system termination, triggering a denial-of-service condition for legitimate users. Apple Time Capsule and AirPort Base Station running firmware versions prior to 7.6.4 are affected.