VARIoT IoT exploits database

ZYXEL P-330W - Multiple Vulnerabilities.. remote exploit for Hardware platform

Ingres is prone to an unauthorized-access security vulnerability because of a flaw in user authentication. Attackers can exploit this issue to gain unauthorized access to the affected database. Successful exploits can allow attackers to access, create, or modify data; other attacks are possible. This issue affects Ingres 2.5 and 2.6 when running on Windows. NOTE: This issue does not affect the Ingres .NET data provider.

Cisco Firewall Services Module (FWSM) is prone to a remote denial-of-service vulnerability because it fails to handle specially crafted network packets. An attacker can exploit this issue to cause the affected device to reload, denying service to legitimate users. Repeated attacks will result in a prolonged denial-of-service condition.

SAP MaxDB is prone to an unspecified remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code with the privileges of the user running the application. Failed exploit attempts will crash the application. This issue affects MaxDB 7.6.00.37 and 7.4.3.32; other versions may also be affected.

Rejetto HTTP File Server (HFS) 2.2/2.3 - Arbitrary File Upload.. remote exploit for Multiple platform

Cisco Phone 7940 - Remote Denial of Service. CVE-40189CVE-2007-5583 . dos exploit for Hardware platform

Apache 2.2.4 - 413 Error HTTP Request Method Cross-Site Scripting. CVE-2007-6203CVE-39003 . remote exploit for Unix platform

Invensys Wonderware InTouch is prone to a privilege-escalation vulnerability because of poor default permissions on a NetDDE share. Attackers can exploit this issue to execute arbitrary applications that accept NetDDE connections. This can compromise the application and possibly the underlying computer. InTouch 8.0 is vulnerable.

ComponentOne FlexGrid 7.1 - ActiveX Control Multiple Buffer Overflow Vulnerabilities. CVE-2007-6028CVE-41939 . remote exploit for Windows platform

SAP GUI VSFlexGrid.VSFlexGridL sp 14 - Remote Buffer Overflow.. remote exploit for Windows platform

SonicWALL SSL-VPN - 'NeLaunchCtrl' ActiveX Control Remote Command Execution. CVE-39069CVE-2007-5603 . remote exploit for Windows platform

SonicWALL SSL VPN 1.3 3 WebCacheCleaner - ActiveX FileDelete Method Traversal Arbitrary File Deletion. CVE-2007-5815CVE-45534 . remote exploit for Windows platform

Cisco IOS is prone to multiple unspecified stack-overflow vulnerabilities. A successful attack may allow the attacker to execute arbitrary code and gain unauthorized access to the device. The attacker can also leverage this issue to cause an affected device to reload, denying service to legitimate users. The researchers responsible for these discoveries have stated that there are numerous other IOS security issues that will be released in the near future. NOTE: Judging by the limited information in the security advisory that induced this alert, we assume that all of Cisco IOS 12.x and IOS XR versions are affected by these issues. We cannot verify this at this time. We will update this information when more details emerge.

Cisco IOS 12.3 - 'LPD' Remote Buffer Overflow. CVE-2007-5381CVE-37935 . remote exploit for Hardware platform

Thomson SpeedTouch 716 - 'URL' Cross-Site Scripting. CVE-2007-6003CVE-38711 . remote exploit for Hardware platform

Cisco Catalyst 6500 and Cisco 7600 devices are prone to a vulnerability that may allow attackers to bypass access control lists (ACL). Attackers may leverage this issue to access a device from an unauthorized remote location; this may aid in further attacks.

The Apache mod_proxy module is prone to a denial-of-service vulnerability. A remote attacker may be able to exploit this issue to crash the child process. This could lead to denial-of-service conditions if the server is using a multithreaded Multi-Processing Module (MPM).

Cisco IP Phone 7940 - 10 SIP Messages Remote Denial of Service. CVE-2007-4459 . dos exploit for Hardware platform

Cisco IP Phone 7940 - 3 SIP Messages Remote Denial of Service. CVE-2007-4459 . dos exploit for Hardware platform

Cisco IOS 12.3 - Show IP BGP Regexp Remote Denial of Service. CVE-2007-4430CVE-37104 . dos exploit for Hardware platform