VARIoT IoT exploits database

Sitecom WLM-2501 suffers from multiple cross site request forgery vulnerabilities.

Sitecom WLM-2501 - Multiple Cross-Site Request Forgery Vulnerabilities. CVE-80538CVE-2012-1922CVE-2012-1921 . webapps exploit for ASP platform

Sitecom WLM-2501 is prone to multiple cross-site request-forgery vulnerabilities because the device fails to properly validate HTTP requests. Attackers can exploit these issues to gain unauthorized access to the affected device and perform certain administrative actions.

Cisco Wireless-G PTZ Internet Video Camera WVC200 is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Successfully exploiting this issue allows remote attackers to execute arbitrary code in the context of the application using an affected ActiveX control (typically Internet Explorer). Failed exploit attempts will likely result in denial-of-service conditions. Cisco Wireless-G PTZ Internet Video Camera WVC200 1.0.0.15 is vulnerable; other versions may also be affected.

D-Link DIR-605 suffers from a cross site request forgery vulnerability.

vtiger CRM is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker can exploit this vulnerability to view files and execute local scripts in the context of the webserver process. This may aid in further attacks. vtiger CRM 5.1.0 is vulnerable; other versions may also be affected. This BID is being retired as a duplicate of BID 47263 (vtiger CRM 'sortfieldsjson.php' Local File Include Vulnerability).

D-Link DIR-605 - Cross-Site Request Forgery. CVE-80549 . webapps exploit for Hardware platform

Citrix 11.6.1 - Licensing Administration Console Denial of Service.. dos exploit for Windows platform

Sitecom WLM-2501 suffers from a change wireless passphrase cross site request forgery vulnerability.

Cisco ASA is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause an affected device to reload, denying service to legitimate users. The following Cisco products are vulnerable: Cisco ASA 5500 Series Adaptive Security Appliances. Cisco Catalyst 6500 Series ASA Services Module. This issue is being tracked by Cisco Bug ID CSCtw35765.

Cisco ASA UDP Inspection Engine is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause an affected device to reload, denying service to legitimate users. The following Cisco products are vulnerable: Cisco ASA 5500 Series Adaptive Security Appliances. Cisco Catalyst 6500 Series ASA Services Module. This issue is being tracked by Cisco Bug ID CSCtq10441.

Multiple Cisco products are prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause an affected device to reload, denying service to legitimate users. The following Cisco products are vulnerable: Cisco Catalyst 6500 Series Firewall Services Module. Cisco ASA 5500 Series Adaptive Security Appliances. Cisco Catalyst 6500 ASA Services Module. This issue is being tracked by Cisco Bug ID CSCtu97367 and CSCtr47517.

Cisco ASA is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause an affected device to reload, denying service to legitimate users. The following Cisco products are vulnerable: Cisco ASA 5500 Series Adaptive Security Appliances. Cisco Catalyst 6500 Series ASA Services Module. This issue is being tracked by Cisco Bug ID CSCts39634.

Sitecom WLM-2501 - Cross-Site Request Forgery. CVE-2012-1922CVE-2012-1921CVE-80538 . webapps exploit for Hardware platform

Multiple Xerox devices are prone to multiple remote code-execution vulnerabilities. An attacker can exploit these issues to execute arbitrary code in the context of the affected application. Successful exploitation can completely compromise the vulnerable device.

TP-Link TL-WR740N 111130 - 'ping_addr' HTML Injection. CVE-80038 . remote exploit for Hardware platform

SAP Business Objects XI R2 suffers from a cross site scripting vulnerability.

SAP Business Objects InfoView System - '/webi/webi_modify.aspx?id' Cross-Site Scripting. CVE-80640 . webapps exploit for ASP platform

SAP Business Objects InfoVew System - 'listing.aspx?searchText' Cross-Site Scripting. CVE-80638 . webapps exploit for ASP platform

SAP Business Objects InfoView System - '/help/helpredir.aspx?guide' Cross-Site Scripting. CVE-80639 . webapps exploit for ASP platform