VARIoT IoT exploits database

MiCasaVerde VeraLite - Remote Code Execution. CVE-2013-4863CVE-2016-6255 . remote exploit for Hardware platform

vTiger CRM 5.4.0 SOAP - Multiple Vulnerabilities. CVE-2013-3215CVE-2013-3214CVE-2013-3213CVE-2013-3212CVE-95903CVE-95902CVE-95901CVE-95900CVE-95899CVE-95898 . webapps exploit for PHP platform

vTiger CRM 5.4.0 SOAP - AddEmailAttachment Arbitrary File Upload (Metasploit). CVE-2013-3214CVE-95902 . remote exploit for PHP platform

TRENDnet TEW-812DRU - Cross-Site Request Forgery/Command Injection Root. CVE-2013-3365CVE-2013-3098CVE-95804CVE-95803 . webapps exploit for Hardware platform

Broadkam PJ871 - Authentication Bypass. CVE-95777 . webapps exploit for Hardware platform

ASUS RT-AC66U - 'acsd' Remote Command Execution. CVE-2013-4659CVE-95778 . remote exploit for Linux_MIPS platform

Broadkam PJ871 is prone to an authentication-bypass vulnerability. An attacker may exploit this issue to bypass certain security restrictions and perform unauthorized actions. http://drupal.org/node/207891

Samsung PS50C7700 TV - Denial of Service. CVE-2013-4890CVE-95574 . dos exploit for Hardware platform

Huawei E587 3G Mobile Hotspot version 11.203.27 is prone to a command injection vulnerability in the Web UI. Successful exploitation allows unauthenticated attackers to execute arbitrary commands with root privileges.

Verizon Wireless Network Extender is prone to a local privilege-escalation vulnerability. Successfully exploiting this issue may allow an attacker to execute arbitrary code with elevated privileges and completely compromise the device. Note: This issue was previously covered in BID 61169 (Verizon Wireless Network Extender Multiple Local Privilege Escalation Vulnerabilities), but has been moved to its own record for better documentation. Verizon Wireless Network Extender SCS-2U01 is vulnerable.

Linksys WRT110 - Remote Command Execution (Metasploit). CVE-2013-3568CVE-95186 . remote exploit for Hardware platform

SAP Netweaver is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may lead to further attacks. SAP Netweaver 7.03 and prior are vulnerable.

Cisco WebEx One-Click Client Password Encryption - Information Disclosure.. local exploit for Windows platform

ABBS Audio Media Player - '.LST' Local Buffer Overflow (Metasploit). CVE-75096 . local exploit for Windows platform

Fortigate Firewalls - Cross-Site Request Forgery. CVE-2013-1414CVE-94724 . webapps exploit for Hardware platform

ASUS RT-N66U when HTTPS WebService via AiCloud is enabled suffers from a remote directory traversal vulnerability.

TRENDnet TE100-P1U is prone to multiple authentication-bypass vulnerabilities. An attacker can exploit these issues to bypass the authentication mechanism and perform unauthorized actions on the affected device. This may aid in further attacks. TRENDnet TE100-P1U firmware version 4.11 is affected; other versions may also be vulnerable.

Cisco Linksys X3000 Router is prone to the following security vulnerabilities: 1. Multiple command-execution vulnerabilities 2. A security-bypass vulnerability 3. Multiple cross-site scripting vulnerabilities An attacker can exploit these issues to execute arbitrary commands, bypass certain security restrictions, steal cookie-based authentication credentials, or perform unauthorized actions in the context of a user session. Cisco Linksys X3000 1.0.03 build 001 is vulnerable; other versions may also be affected.

TP-Link TL-PS110U Print Server - 'tplink-enum.py' Security Bypass.. remote exploit for Hardware platform