VARIoT IoT exploits database

Apache 7.0.x mod_proxy - Reverse Proxy Security Bypass. CVE-2011-4317CVE-77310 . remote exploit for Linux platform

LibLime Koha 4.2 - Local File Inclusion. CVE-77322CVE-2011-4715 . webapps exploit for CGI platform

SAP Netweaver is prone to multiple cross-site scripting vulnerabilities, a path traversal vulnerability, an html-injection vulnerability, a cross-site request-forgery vulnerability, and an authentication-bypass vulnerability. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, execute arbitrary commands in the context of the application, disclose sensitive information, perform certain administrative actions, gain unauthorized access, or bypass certain security restrictions.

InduSoft Web Studio - Arbitrary File Upload / Remote Code Execution (Metasploit). CVE-2011-4051CVE-77179 . remote exploit for Windows platform

SAP NetWeaver Dispatcher 7.0 ehp1/2 - Multiple Vulnerabilities. CVE-2012-2612CVE-2012-2611CVE-2012-2514CVE-2012-2513CVE-2012-2512CVE-2012-2511CVE-81760CVE-81759 . dos exploit for Multiple platform

SAP NetWeaver Dispatcher - Multiple Vulnerabilities. CVE-2012-2612CVE-81760CVE-81759CVE-2012-2611CVE-2012-2514CVE-2012-2513CVE-2012-2512CVE-2012-2511CVE-2011-1516 . dos exploit for Windows platform

SAP NetWeaver Dispatcher - DiagTraceR3Info Buffer Overflow (Metasploit). CVE-2012-2611CVE-81759 . remote exploit for Windows platform

Vtiger CRM is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local scripts in the context of the webserver process. This may allow the attacker to compromise the application and the computer; other attacks are also possible. Vtiger CRM 5.2.1 is vulnerable; prior versions may also be affected.

Apache < 2.0.64 / < 2.2.21 mod_setenvif - Integer Overflow. CVE-2011-4415CVE-2011-3607 . dos exploit for Linux platform

ZTE ZXDSL 831IIV7.5.0a_Z29_OV - Multiple Vulnerabilities. CVE-76925CVE-76924CVE-2012-4746 . webapps exploit for Hardware platform

vTiger CRM 5.2.1 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities (2).. webapps exploit for PHP platform

Cisco IOS is prone to multiple remote denial-of-service vulnerabilities. An attacker can exploit these issues to cause an affected device to stop responding, denying service to legitimate users. These issues are being tracked by Cisco Bug IDs: CSCtq36327 CSCtq36336

Trend Micro IWSS 3.1 - Local Privilege Escalation.. local exploit for Linux platform

Cisco Nexus OS (NX-OS) suffers from command injection and sanitization issues. Nexus 7000, 5000, 4000, 3000, 2000, and 1000V are all affected. MDS and UCS are also affected. Local access is required.

SAP Management Console - OSExecute Payload Execution (Metasploit).. webapps exploit for Windows platform

Cyclope Internet Filtering Proxy is prone to a denial-of-service vulnerability. Attackers can exploit this issue to crash the application, denying service to legitimate users. Note that code execution may be possible; however, this has not been confirmed. Cyclope Internet Filtering Proxy 4.0 is vulnerable; other versions may also be affected.

Cyclope Internet Filtering Proxy is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

Check Point UTM-1 Edge and Safe 8.2.43 - Multiple Vulnerabilities.. remote exploit for Hardware platform

Toshiba e-Studio (Multiple Devices) - Security Bypass. CVE-2012-1239CVE-81507 . remote exploit for Multiple platform