VARIoT IoT exploits database

D-Link DSL-320B - Multiple Vulnerabilities. CVE-93020CVE-93019CVE-93018CVE-93014CVE-93013 . webapps exploit for Hardware platform

Brother MFC-9970CDW Firmware 0D suffers from multiple cross site scripting vulnerabilities.

ABBS Audio Media Player 3.1 - '.lst' Local Buffer Overflow. CVE-75096 . local exploit for Windows platform

D-Link DNS-323 suffers from remote arbitrary file upload, directory traversal, and command execution vulnerabilities.

D-Link DNS-323 - Multiple Vulnerabilities. CVE-92942CVE-92941 . webapps exploit for Hardware platform

D-Link IP Cameras - Multiple Vulnerabilities. CVE-2013-1603CVE-2013-1602CVE-2013-1601CVE-2013-1600CVE-2013-1599CVE-92864CVE-92863CVE-92862CVE-92861CVE-92860 . webapps exploit for Hardware platform

Cisco Linksys E4200 - Multiple Vulnerabilities. CVE-2013-2684CVE-2013-2683CVE-2013-2682CVE-2013-2681CVE-2013-2680CVE-2013-2679CVE-2013-2678CVE-93065CVE-93064CVE-93063CVE-93062CVE-93061CVE-93060CVE-93059CVE-89911 . webapps exploit for Hardware platform

Cisco Linksys E4200 - '/apply.cgi' Multiple Cross-Site Scripting Vulnerabilities. CVE-2013-2679CVE-93060 . remote exploit for Hardware platform

D-Link DIR-635 suffers from cross site request forgery and multiple cross site scripting vulnerabilities.

D-Link DIR-635 - Multiple Vulnerabilities. CVE-92843CVE-92842CVE-90178CVE-89860 . webapps exploit for Hardware platform

D-Link DIR-635 is prone to the following security vulnerabilities: 1. An HTML-injection vulnerability 2. A cross-site request-forgery vulnerability 3. A cross-site scripting vulnerability 4. A security-bypass vulnerability An attacker can exploit these issues to execute HTML and arbitrary script code in the browser of an unsuspecting user in the context of the affected device, steal cookie-based authentication credentials, and perform unauthorized actions in the context of a user session. Other attacks are also possible.

Multiple Cisco NX-OS-Based products are prone to multiple remote buffer-overflow vulnerabilities because they fail to perform adequate boundary-checks on user-supplied data. An attacker can exploit these issues to execute arbitrary code with the elevated privileges. Failed exploit attempts will result in a denial-of-service condition. These issues being tracked by Cisco Bug IDs CSCtu10630, CSCtu10551, CSCtu10550, CSCtw56581, CSCtu10548, CSCtu10544, and CSCuf61275.

D-Link DIR-600 and DIR-300 are prone to the following security vulnerabilities: 1. Multiple command-injection vulnerabilities 2. A cross-site request-forgery vulnerability 3. A cross-site scripting vulnerability 4. A password encryption weakness 5. Multiple information-disclosure vulnerabilities 6. An HTTP-header-injection vulnerability 7. A security-bypass vulnerability An attacker can exploit these issues to gain access to potentially sensitive information, decrypt stored passwords, execute arbitrary commands in the context of the affected device, steal cookie-based authentication credentials, perform unauthorized actions in the context of a user session, or redirect users to arbitrary sites and perform HTTP-request smuggling. Other attacks are also possible.

TP-Link TL-WR741N / TL-WR741ND Routers - Multiple Denial of Service Vulnerabilities.. dos exploit for Hardware platform

D-Link DIR-865L - Cross-Site Request Forgery. CVE-2013-3095CVE-92550 . remote exploit for Hardware platform

Sitecom WLM-3500 routers contain an undocumented access backdoor that can be abused to bypass existing authentication mechanisms.

NetGear WNDR4700 is prone to an unspecified cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected device. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. NetGear WNDR4700 running firmware 1.0.0.34 is vulnerable.

Multiple Motorola devices for Android are prone to a local privilege-escalation vulnerability. Local attackers can exploit this issue to gain administrator privileges and perform unauthorized actions.

AT-TFTP is prone to a remote stack-based buffer-overflow vulnerability. Successful exploits will allow attackers to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions. AT-TFTP 2.0 is vulnerable; other versions may also be affected.

Cisco Adaptive Security Appliance is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause CPU exhaustion and reload an affected device, denying service to legitimate users. This issue is being tracked by Cisco Bug IDs CSCue31622 and CSCuc71272.