UPnP / SSDP Client

Discovers a UPnP device via SSDP M-SEARCH, fetches the device description, and opens an interactive UPnP shell IGD actions. !/usr/bin/env python3 -- coding: utf-8 -- """UPnP bind listener — SSDP discover + device description session.""" from kittysploit import from lib.protocols.upnp.client impor...

WAYOS FBM-220G security vulnerabilities

WAYOS FBM-220G is a network behavior management router developed by the Chinese company Wayos. Version 24.10.19 of WAYOS FBM-220G contains a security vulnerability. This vulnerability stems from improper handling of parameters upnpwaniface/upnpssdpinterval/upnpmaxage in the sub40F820 function in...

EUVD-2019-5579

Malware in sbrugna...

CVE-2019-14363

A stack-based buffer overflow in the upnpd binary running on NETGEAR WNDR3400v3 routers with firmware version 1.0.1.181.0.63 allows an attacker to remotely execute arbitrary code via a crafted UPnP SSDP packet...

CVE-2019-14363: Out-of-bounds Write

A stack-based buffer overflow in the upnpd binary running on NETGEAR WNDR3400v3 routers with firmware version 1.0.1.181.0.63 allows an attacker to remotely execute arbitrary code via a crafted UPnP SSDP packet...

PT-2019-13642

Name of the Vulnerable Software and Affected Versions NETGEAR WNDR3400v3 router firmware version 1.0.1.18 1.0.63 Description A stack-based buffer overflow issue exists in the upnpd binary, allowing an attacker to remotely execute arbitrary code via a crafted UPnP SSDP packet. Recommendations For...