Polycom HDX Telnet Authorization Bypass

======================================================================== = Polycom HDX Telnet Authorization Bypass = = Vendor Website: = www.polycom.com = = Affected Version: = Polycom HDX devices: = All releases prior to and including Commercial 3.0.5 = = Public disclosure on January 18, 2013 =...

Linksys E1500/E2500 - Multiple Vulnerabilities

Exploit for hardware platform in category web applications ============ Device Description: ============ The Linksys E1500 is a Wireless-N Router with SpeedBoost. It lets you access the Internet via a wireless connection or through one of its four switched ports. You can also use the Linksys E150...

D-LINK DIR-300 / DIR-600 Remote Root Exploit

This exploit demonstrates the remote root vulnerability discovered by Michael Messner in D-Link DIR-300 and DIR-600 devices. !/usr/bin/python D-LINK TOTAL FAIL http://www.s3cur1ty.de/m1adv2013-003 Another Shit PoC by infodox SHODANS BELOW...

Raidsonic NAS Devices Unauthenticated Remote Command Execution

Different Raidsonic NAS devices are vulnerable to OS command injection via the web interface. The vulnerability exists in timeHandler.cgi, which is accessible without authentication. This module has been tested with the versions IB-NAS5220 and IB-NAS4220. Since this module is adding a new user an...

D-Link Devices Unauthenticated Remote Command Execution

Various D-Link Routers are vulnerable to OS command injection via the web interface. The vulnerability exists in command.php, which is accessible without authentication. This module has been tested with the versions DIR-600 2.14b01, DIR-300 rev B 2.13. Module Options msf use...

Unix Command Shell, Reverse TCP SSL (telnet)

Creates an interactive shell via mkfifo and telnet. This method works on Debian and other systems compiled without /dev/tcp support. This module uses the '-z' option included on some systems to encrypt using SSL. This module requires Metasploit: https://metasploit.com/download Current source:...

Unix Command Shell, Double Reverse TCP SSL (telnet)

Creates an interactive shell through two inbound connections, encrypts using SSL via "-z" option This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 136 include Msf::Payload::Single...

RHEL 5 : krb5 (RHSA-2011:1853)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:1853 advisory. Kerberos is a network authentication system which allows clients and servers to authenticate to each other using symmetric encryption and a trusted...

Polycom Command Shell Authorization Bypass

The login component of the Polycom Command Shell on Polycom HDX video endpoints, running software versions 3.0.5 and earlier, is vulnerable to an authorization bypass when simultaneous connections are made to the service, allowing remote network attackers to gain access to a sandboxed telnet prom...

Polycom Command Shell Authorization Bypass

The login component of the Polycom Command Shell on Polycom HDX video endpoints, running software versions 3.0.5 and earlier, is vulnerable to an authorization bypass when simultaneous connections are made to the service, allowing remote network attackers to gain access to a sandboxed telnet prom...

Allied Telesis AT-MCF2000M 3.0.2 Local Root

:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ posdubatgmail.com 2013-01-02 Allied Telesis AT-MCF2000M 3.0.2 Gaining Root Shell Access Device: "The AT-MCF2000M is the management module for the...

Allied Telesis AT-MCF2000M 3.0.2 - Remote Command Execution

Allied Telesis AT-MCF2000M 3.0.2 - Remote Command Execution :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ posdubatgmail.com 2013-01-02 Allied Telesis AT-MCF2000M 3.0.2 Gaining Root Shell Acces...

YeaLink IP Phone 9.70.0.100 CSRF / Default Credentials

+--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : YeaLink IP Phone SIP-TxxP firmware 0x90.nl Software link : http://yealink.com/SupportDownloadfilesdetail.aspx?ProductsID=64&CateID=187&flag=142 Vendor...

YeaLink IP Phone SIP-TxxP firmware <= 9.70.0.100 Vulnerabilities

Exploit for hardware platform in category web applications +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : YeaLink IP Phone SIP-TxxP firmware 0x90.nl Software link :...

YeaLink IP Phone SIP-TxxP Firmware 9.70.0.100 - Multiple Vulnerabilities

+--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : YeaLink IP Phone SIP-TxxP firmware 0x90.nl Software link : http://yealink.com/SupportDownloadfilesdetail.aspx?ProductsID=64&CateID=187&flag=142 Vendor...

PT-2025-31993 · D Link · Dir-600 Rev B +1

Name of the Vulnerable Software and Affected Versions: D-Link routers versions prior to 2.14b01 DIR-600 rev B D-Link routers versions prior to 2.13 DIR-300 rev B Description: The web interface of multiple D-Link routers contains an unauthenticated operating system command injection vulnerability ...

CVE-2012-5966

The restricted telnet shell on the D-Link DSL2730U router allows remote authenticated users to bypass intended command restrictions via shell metacharacters that follow a whitelisted command...

CVE-2012-5966

The restricted telnet shell on the D-Link DSL2730U router allows remote authenticated users to bypass intended command restrictions via shell metacharacters that follow a whitelisted command...

CVE-2012-5966

The CVE-2012-5966 issue affects the D-Link DSL2730U router's restricted Telnet shell. An authenticated remote attacker can bypass the command whitelist by chaining shell metacharacters that follow a whitelisted command, effectively injecting commands via sh -c (e.g., whitelisted command with subs...

PT-2012-6209 · D Link · D-Link Dsl 2730-U

Name of the Vulnerable Software and Affected Versions: D-Link DSL2730U router affected versions not specified Description: The issue allows remote authenticated users to bypass intended command restrictions on the D-Link DSL2730U router. This is achieved by using shell metacharacters that follow ...