GPON-LOADER

GPON-LOADER Эксплойт-загрузчик для удаленного выполнения кода с полезной нагрузкой на устройствах GPON Home Gateway CVE-2018-10562, написанный на Python. Зависимости requests Использование python gpon-loader.py...

Pingpon-Exploit

ЭКСПЛОЙТ PINGPON Автор: @037 Pingpon — это инструмент, используемый для получения тысяч уязвимых домашних маршрутизаторов GPON с помощью Shodan.io, чтобы затем выполнять любые команды Linux, используя ошибку удаленного выполнения кода CVE-2018-10562. ОТКАЗ ОТ ОТВЕТСТВЕННОСТИ Я НЕ несу...

GPON_RCE

GPONRCE GPON 가정용 라우터에서 원격 코드 실행을 위한 익스플로잇 CVE-2018-10562입니다. Python으로 작성되었습니다...

GPON

GPONホームルーターにおけるRCE（CVE-2018-10561） 脆弱性 現在、多くのルーターがGPONインターネットを利用しており、VPNMentorによって、デバイスのすべての認証をバイパスする方法（CVE-2018-10561 ）が発見されました。この認証バイパスにより、別のコマンドインジェクションの脆弱性（CVE-2018-10562 ）が明らかになり、デバイス上でコマンドを実行することも可能になります。 Shodanによると、執筆時点でこれらのデバイスのうち約100万台がインターネットに露出していました。 必要な依存関係 requests urllib2 テスト済み環境...

GPON ONT Home Gateway Router is vulnerable to authenticated remote command execution (CVE-2018-10562)

Binary data gponcve-2018-10562.nbin...

D-Link, Dasan Routers Under Attack In Yet Another Assault

Unpatched D-Link and Dasan GPON router vulnerabilities are being targeted by hackers attempting to build a botnet army, according to research published Friday by eSentire Threat Intelligence. Researchers observed on Thursday a massive uptick in exploit attempts from over 3,000 different source IP...

VulnCheck KEV: CVE-2018-10562

Dasan GPON Routers contain an authentication bypass vulnerability. When combined with CVE-2018-10561, exploitation can allow an attacker to perform remote code execution...

Exploit for OS Command Injection in Dasannetworks Gpon_Router_Firmware

GPONRCE Exploit f...

Dasan GPON Router Remote Command Injection (CVE-2018-10562)

A remote command execution vulnerability exists in Dasan GPON routers. A remote attacker could exploit this vulnerability by sending a malicious request to the victim. Successful exploitation of this vulnerability can result in the execution of arbitrary code in the context of the target user...

CVE-2018-10562

creationtimestamp| type| source ---|---|--- 2018-05-10 10:42:33+00:00| seen| MISP/5af412ea-4254-4668-b1ea-44bc950d210f 2018-05-11 16:06:05+00:00| exploited| https://t.me/canyoupwnme/3749 2018-06-18 09:04:20+00:00| seen| MISP/5b2774da-6bb4-46c0-8483-43e102de0b81 2020-01-08 13:22:45+00:00| seen|...

CVE-2018-10562

An issue was discovered on Dasan GPON home routers. Command Injection can occur via the desthost parameter in a diagaction=ping request to a GponForm/diagForm URI. Because the router saves ping results in /tmp and transmits them to the user when the user revisits /diag.html, it's quite simple to...

CVE-2018-10562

CVE-2018-10562 is a command-injection flaw in Dasan/GPON home routers. The issue allows remote code execution via the dest_host parameter in a diag_action=ping request to the GponForm/diag_Form URI. The vulnerability’s impact is that ping results are stored in /tmp and sent back to the user when ...