VARIoT IoT exploits database

Rockwell RSLogix 19 - Denial of Service. CVE-2011-3489CVE-75569 . dos exploit for Windows platform

progea movicon / powerhmi 11.2.1085 - Multiple Vulnerabilities. CVE-2011-3499CVE-2011-3498CVE-2011-3491CVE-75494CVE-75493CVE-75492CVE-75491 . dos exploit for Windows platform

ScadaTEC ModbusTagServer & ScadaPhone - '.zip' Local Buffer Overflow. CVE-75375CVE-2011-4535 . local exploit for Windows platform

ScadaTEC ScadaPhone 5.3.11.1230 - Local Stack Buffer Overflow (Metasploit). CVE-75375CVE-2011-4535 . local exploit for Windows platform

Procyon Core Server HMI 1.13 - 'Coreservice.exe' Remote Stack Buffer Overflow (Metasploit). CVE-2011-3322CVE-75371 . remote exploit for Windows platform

TPLINK TD-8810 cross site request forgery exploit that performs a reboot of the modem.

BroadWin WebAccess Client is prone to multiple remote vulnerabilities, including: 1. A format-string vulnerability 2. Multiple memory corruption vulnerabilities Attackers could exploit these issues to execute arbitrary code in the context of the application using the ActiveX control (typically Internet Explorer). Failed exploit attempts will likely result in denial-of-service conditions. BroadWin WebAccess Client 7.0 is vulnerable; other verisons may also bea ffected.

Wibu-Systems CodeMeter is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue can allow an attacker to download arbitrary files with certain extensions from outside the server root directory. This may aid in further attacks. CodeMeter 4.30c is affected; other versions may also be vulnerable.

ICONICS IcoSetServer ActiveX control is prone to a vulnerability that can allow an attacker to insert an arbitrary domain into the Trusted Zone. A successful exploit will result in the addition of an arbitrary attacker-supplied domain into the Trusted Zone of the browser. This may potentially allow for the execution of arbitrary code.

The InduSoft ISSymbol ActiveX control is prone to multiple buffer-overflow vulnerabilities. Attackers could exploit these issues to execute arbitrary code in the context of the application using the ActiveX control (typically Internet Explorer). Failed exploit attempts will likely result in denial-of-service conditions.

Multiple vendors products are prone to a security-bypass vulnerability. An attacker can exploit this issue to bypass the security mechanisms built into an affected device. This may aid in further attacks.

Cisco TelePresence SOS-11-010 - Multiple Vulnerabilities. CVE-2011-2577CVE-75663CVE-2011-2544CVE-2011-2543CVE-75662CVE-74901 . webapps exploit for Hardware platform

ClearSCADA - Remote Authentication Bypass. CVE-75022 . remote exploit for Windows platform

LifeSize Room - Command Injection (Metasploit). CVE-2011-2763CVE-75212 . webapps exploit for PHP platform

PHP 5.3.8 - Hashtables Denial of Service. CVE-2011-4885CVE-78115 . dos exploit for PHP platform

Apache - Remote Memory Exhaustion (Denial of Service). CVE-2014-5329CVE-74721CVE-2011-3192 . dos exploit for Multiple platform

Multiple Sagem F@st Routers are prone to a remote authentication-bypass vulnerability. Successful exploits allow remote authenticated attackers to obtain other users' passwords and gain access to the vulnerable device. This will completely compromise an affected device. The following routers are affected: Sagem F@st 3304 Sagem F@st 3464 Sagem F@st 3504

CiscoKits 1.0 - TFTP Server 'Write Command' Denial of Service.. dos exploit for Windows platform

CiscoKits CCNA TFTP Server is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to obtain sensitive information that could aid in further attacks. CiscoKits CCNA TFTP Server 1.0 is vulnerable; other versions may also be affected.