Netgear R7000 - Command Injection Vulnerability

Exploit for cgi platform in category web applications Exploit Title: Netgear R7000 - Command Injection Date: 6-12-2016 Exploit Author: Acew0rm Contact: https://twitter.com/Acew0rm1 Vendor Homepage: https://www.netgear.com/ Category: Hardware Version: V1.0.7.21.1.93 -Vulnerability An unauthenticat...

NETGEAR R7000 - Command Injection

NETGEAR R7000 - Command Injection Exploit Title: Netgear R7000 - Command Injection Date: 6-12-2016 Exploit Author: Acew0rm Contact: https://twitter.com/Acew0rm1 Vendor Homepage: https://www.netgear.com/ Category: Hardware Version: V1.0.7.21.1.93 -Vulnerability An unauthenticated user can inject...

BlackStratus LOGStorm 4.5.1.35/4.5.1.96 - Remote Root Exploit

Exploit for hardware platform in category remote exploits !/usr/bin/python logstorm-root.py BlackStratus LOGStorm Remote Root Exploit Jeremy Brown jbrown3264/gmail Dec 2016 -Synopsis- "Better Security and Compliance for Any Size Business" BlackStratus LOGStorm has multiple vulnerabilities that...

Smart Guard Network Manager 6.3.2 - SQL Injection

Smart Guard Network Manager 6.3.2 - SQL Injection Exploit Title: SQL Injection In Smart Guard Network Manager Api Date: 03/12/2016 Exploit Author: Rahul Raz Vendor Homepage: http://www.xsinfoways.com/ Software Name: Smart Guard Network Manager Version: 6.3.2 Tested on: Ubuntu Linux Vulnerability...

InvoicePlane 1.4.8 Incorrect Access Control

Exploit Title: InvoicePlane v1.4.8 Incorrect Access Control for password reset Date: 12-11-2016 Exploit Author: feedersec Contact: [email protected] Vendor Homepage: https://invoiceplane.com Software Link: https://invoiceplane.com/download/v1.4.8 Version: v1.4.8=20 Tested on: ubuntu 16.04 LTS...

InvoicePlane 1.4.8 - Password Reset Vulnerability

Exploit for php platform in category web applications Exploit Title: InvoicePlane v1.4.8 Incorrect Access Control for password = reset Date: 12-11-2016 Exploit Author: feedersec Contact: email protected Vendor Homepage: https://invoiceplane.com Software Link:...

InvoicePlane 1.4.8 - Password Reset

Exploit Title: InvoicePlane v1.4.8 Incorrect Access Control for password = reset Date: 12-11-2016 Exploit Author: feedersec Contact: [email protected] Vendor Homepage: https://invoiceplane.com Software Link: https://invoiceplane.com/download/v1.4.8 Version: v1.4.8=20 Tested on: ubuntu 16.04 LTS...

WordPress YITH WooCommerce Compare 2.0.9 PHP Object Injection

------------------------------------------------------------------------ YITH WooCommerce Compare WordPress Plugin unauthenticated PHP Object injection vulnerability ------------------------------------------------------------------------ Yorick Koster, June 2016...

Juniper Networks Junos OS J-Web XSS Vulnerability

Junos OS J-Web is prone to a cross-site scripting vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:juniper:junos"; ...

Joomla! Component Catalog 1.0.7 - SQL Injection

Title: Unauthenticated SQL Injection in Huge-IT Catalog v1.0.7 for Joomla Author: Larry W. Cashdollar, @larry0 Date: 2016-09-16 Download Site: http://huge-it.com/joomla-catalog/ Vendor: huge-it.com Vendor Notified: 2016-09-17 Vendor Contact: [email protected] Description: Huge-IT Product Catalog i...

FreePBX 13.0.x 13.0.154 - Remote Command Execution

FreePBX 13.0.x 13.0.154 - Remote Command Execution Vulnerable software : Freepbx Tested versions : 13.0.x $this-commandline = $commandline; $this-cwd = $cwd; Line 275 $commandline = $this-commandline; if '\' === DIRECTORYSEPARATOR && $this-enhanceWindowsCompatibility $commandline = 'cmd /V:ON...

Vanderbilt IP-Camera CCPW3025-IR / CVMW3025-IR - Local File Disclosure

Vanderbilt IP-Camera CCPW3025-IR + CVMW3025-IR allows an unauthenticated user through the browser sends a request to obtain a user name and password Requesting links is as follows: http://host:port/cgi-bin/readfile.cgi?query=ADMINID Return information example: var AdmID="admin"; var...

VideoIQ Camera Remote File Disclosure

"cli" die$error0; if$argc "; echo"\nExample: php $argv0 localhost 8080"; die; ifisset$argv1 && isset$argv2 $host = $argv1; $port = $argv2; $pack = "GET /%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C..FILEPATH HTTP/1.0\r\n"; $pack.= "Host: $host\r\n"; $pack.= "Connection:...

VideoIQ Camera - Local File Disclosure

VideoIQ Camera - Local File Disclosure "cli" die$error0; if$argc "; echo"\nExample: php $argv0 localhost 8080"; die; ifisset$argv1 && isset$argv2 $host = $argv1; $port = $argv2; $pack = "GET /%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C..FILEPATH HTTP/1.0\r\n"; $pack.= "Host:...

JVC IP-Camera VN-T216VPRU - Local File Disclosure

JVC IP-Camera VN-T216VPRU - Local File Disclosure 1. Advisory Information ======================================== Title : JVC IP-Camera VN-T216VPRU Local File Inclusion Vendor Homepage : http://pro.jvc.com/ Remotely Exploitable : Yes Tested on Camera types : VN-T216VPRU Product References :...

VideoIQ Camera - Local File Disclosure

Exploit for php platform in category web applications "cli" die$error0; if$argc "; echo"\nExample: php $argv0 localhost 8080"; die; ifisset$argv1 && isset$argv2 $host = $argv1; $port = $argv2; $pack = "GET /%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C..FILEPATH HTTP/1.0\r\n";...

VideoIQ Camera - Local File Disclosure

"cli" die$error0; if$argc "; echo"\nExample: php $argv0 localhost 8080"; die; ifisset$argv1 && isset$argv2 $host = $argv1; $port = $argv2; $pack = "GET /%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C..FILEPATH HTTP/1.0\r\n"; $pack.= "Host: $host\r\n"; $pack.= "Connection:...

JVC IP-Camera VN-T216VPRU - Local File Disclosure

Advisory Information ======================================== Title : JVC IP-Camera VN-T216VPRU Local File Inclusion Vendor Homepage : http://pro.jvc.com/ Remotely Exploitable : Yes Tested on Camera types : VN-T216VPRU Product References :...

JVC IP-Camera VN-T216VPRU - Credentials Disclosure

Advisory Information ======================================== Title : JVC IP-Camera VN-T216VPRU Remote Credentials Disclosure Vendor Homepage : http://pro.jvc.com/ Remotely Exploitable : Yes Tested on Camera types : VN-T216VPRU Product References :...

JVC IP-Camera VN-T216VPRU - Credentials Disclosure

JVC IP-Camera VN-T216VPRU - Credentials Disclosure 1. Advisory Information ======================================== Title : JVC IP-Camera VN-T216VPRU Remote Credentials Disclosure Vendor Homepage : http://pro.jvc.com/ Remotely Exploitable : Yes Tested on Camera types : VN-T216VPRU Product...