VARIoT IoT exploits database

Linksys WRT160N - Multiple Vulnerabilities. CVE-90094CVE-90093CVE-90092CVE-89916CVE-89915CVE-2013-2678CVE-89912CVE-89911 . webapps exploit for Hardware platform

MOXA EDR-G903 is prone to an unauthorized access vulnerability and a weakness in the entropy of the generated key. Successful exploits will allow attackers to gain access to the device and sensitive information. Successful exploits may result in the attacker executing arbitrary commands or gain unauthorized access on the affected system.

The Netgear N150 Wireless ADSL2+ Modem Router DGN1000 suffers from cross site scripting, OS command injection, and insecure cryptographic storage vulnerabilities. Firmware versions 1.1.00.24 and 1.1.00.45 are affected.

TP-Link TL-WR2543ND Router - Admin Panel Multiple Cross-Site Request Forgery Vulnerabilities.. remote exploit for Hardware platform

Netgear DGN1000B - Multiple Vulnerabilities. CVE-89986CVE-89985CVE-89984 . webapps exploit for Hardware platform

D-Link DIR-300 suffers from an administratively inflicted cross site scripting vulnerability.

Broadcom UPnP is prone to a format-string vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to execute arbitrary code with root privileges. Failed exploit attempts will likely result in a denial-of-service condition.

INFOMARK IMW-C920W MiniUPnPd 1.0 - Denial of Service. CVE-2013-0230CVE-2013-0229CVE-89625CVE-89624 . dos exploit for Hardware platform

MiniUPnPd 1.0 - Remote Stack Buffer Overflow Remote Code Execution (Metasploit). CVE-2013-0230CVE-89624 . remote exploit for Linux platform

MiniUPnPd 1.0 (MIPS) - Remote Stack Overflow Remote Code Execution for AirTies RT Series. CVE-2013-0230CVE-89624 . remote exploit for Multiple platform

The Cisco Wireless LAN Controller is prone to multiple security vulnerabilities. Exploiting these issues could allow an attacker to deny service to legitimate users, execute arbitrary code, or gain unauthorized access. Other attacks may also be possible.

SAP NetWeaver is prone to multiple security vulnerabilities. Attackers can exploit these issues to cause denial-of-service conditions, obtain sensitive information, or bypass certain security restrictions that may lead to further attacks.

F5 BIG-IP versions 11.2.0 and below suffer from a remote SQL injection vulnerability.

Schneider Electric Accutech Manager - Heap Overflow (PoC). CVE-2013-0658CVE-89691 . dos exploit for Windows platform

F5 Networks BIG-IP - XML External Entity Injection. CVE-2012-2997CVE-89447 . remote exploit for Hardware platform

This is an exploit for a stack buffer overflow in the NVidia Display Driver Service. The service listens on a named pipe (\\pipe\\nsvr) which has a NULL DACL configured, which should mean that any logged on user or remote user in a domain context (Windows firewall/file sharing permitting) should be able to exploit this vulnerability. This is updated by Sean de Regge to target the 30 Aug 2012 nvvsvc.exe build.

Linksys WRT54GL Firmware 4.30.15 build 2 - Multiple Vulnerabilities. CVE-89421CVE-89420CVE-89419CVE-2013-2679 . webapps exploit for Hardware platform

Rockwell Automation ControlLogix is prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause the NIC to crash, denying service to legitimate users.

Schmid Watson Management Console - Directory Traversal.. remote exploit for Linux platform