VARIoT IoT exploits database

Cisco Adaptive Security Appliance (ASA) is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to reload an affected device, denying service to legitimate users. This issue is being tracked by Cisco Bug ID CSCuc80080.

Cisco Adaptive Security Appliance (ASA) is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to reload an affected device, denying service to legitimate users. This issue is being tracked by Cisco Bug ID CSCuc72408.

Multiple Cisco products are prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to reload an affected device, denying service to legitimate users. This issue is being tracked by Cisco Bug IDs CSCub85692 and CSCud20267. The following products are vulnerable: Cisco Adaptive Security Appliance Cisco Firewall Services Module (FWSM)

Cisco Adaptive Security Appliance (ASA) is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to reload an affected device, denying service to legitimate users. This issue is being tracked by Cisco Bug ID CSCud16590.

Netgear DGN1000B - 'setup.cgi' Remote Command Execution (Metasploit). CVE-89985 . remote exploit for Hardware platform

TP-Link TD-8817 Router is prone to a cross-site request-forgery vulnerability. Attackers can exploit this issue to perform certain administrative actions and gain unauthorized access to the affected device.

Draytek Vigor 3900 1.06 - Local Privilege Escalation. CVE-91811 . local exploit for Hardware platform

Rosewill RSVA11001 - Remote Command Injection. CVE-91630 . remote exploit for Hardware platform

Rosewill RSVA11001 Hi3515 suffers from a remote command execution vulnerability due to feeding unsanitized user-supplied data to ntpdate.

The Polycom Command Shell can be used to view and also change several settings of the system. However it can also be used to get system-level access (i.e. root access) to the HDX system. The "printenv" and "setenv" commands can be used to read and write variables respectively which are stored in flash memory. Polycom HDX series versions prior to 3.1.1.2 are affected.

Samsung TV is prone to denial-of-service vulnerability. Remote attackers can exploit this issue to cause the device to crash, denying service to legitimate users.

D-Link DSL-2740B ADSL Router - Authentication Bypass. CVE-2013-2271CVE-90822 . webapps exploit for Hardware platform

Honeywell HSC Remote Deployer - ActiveX Remote Code Execution (Metasploit). CVE-2013-0108CVE-90583 . remote exploit for Windows platform

Samsung Galaxy S3 is prone to a security-bypass vulnerability due to a failure to restrict access to locked devices. An attacker with physical access to a locked device can leverage this issue to bypass the lock screen and gain partial access to the device.

Polycom HDX - Telnet Authentication Bypass (Metasploit).. remote exploit for Hardware platform

KingView - Log File Parsing Buffer Overflow (Metasploit). CVE-2012-4711CVE-89690 . remote exploit for Windows platform

Schneider Electric Accutech Manager heap overflow proof of concept exploit.

D-Link DIR-615 is prone to multiple security vulnerabilities, including: 1. A remote command-injection vulnerability 2. An information-disclosure vulnerability 3. A cross-site request-forgery vulnerability Exploiting these issues could allow an attacker to disclose sensitive information, perform arbitrary actions, or execute arbitrary commands in the context of the affected device.

Linksys E1500/E2500 - Multiple Vulnerabilities. CVE-89916CVE-89915CVE-89914CVE-89913CVE-89912CVE-89911CVE-2013-2678 . webapps exploit for Hardware platform