CVE-2020-25078

CVE-2020-25078 使用说明 instructions 攻击url放同一目录下 ip.txt The attack IP is placed in the same directory as ip.txt Terminal log root@localhost:/CVE-2020-25078ls CVE-2020-25078.py ip.txt root@localhost:/CVE-2020-25078cat ./ip.txt https://xxx.xxx.xxx.xxx:3128 http://xxx.xxx.xxx.xxx:80...

abyss-c2

ABYSS C2 — HiSilicon DVR Exploit Framework ⚠️ 仅供教育/演示目的 本软件仅供在受控且授权环境中进行教育和授权的安全研究 。旨在演示常见的 IoT 漏洞及后渗透技术。 您不得在以下设备上使用本软件： 任何您不拥有的系统或设备 任何未经您明确书面授权测试的系统或设备 任何未经事先批准的生产基础设施 创建者对使用本软件进行的任何滥用、损坏或非法活动不承担任何责任。 使用本软件即表示您承认自己有责任确保遵守所在司法管辖区所有适用法律法规。未经授权访问计算机系统在诸如《计算机欺诈与滥用法》（CFAA）及全球类似法规下均属非法。 本项目旨在演示：...

D-Link DCS-2530L/DCS-2670L - Administrator Password Disclosure

D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices are vulnerable to password disclosures vulnerabilities because the /config/getuser endpoint allows for remote administrator password disclosure. id: CVE-2020-25078 info: name: D-Link DCS-2530L/DCS-2670L - Administrator...

CVE-2020-25078

An issue was discovered on D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices. The unauthenticated /config/getuser endpoint allows for remote administrator password disclosure...

CVE-2020-25078

creationtimestamp| type| source ---|---|--- 2021-03-30 09:46:39+00:00| published-proof-of-concept| https://t.me/pwnwikizhchannel/63 2021-04-05 10:59:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/3056 2022-06-01 02:32:51+00:00| published-proof-of-concept|...

CVE-2020-25078

An issue was discovered on D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices. The unauthenticated /config/getuser endpoint allows for remote administrator password disclosure...

CVE-2020-25078

CVE-2020-25078 affects D-Link DCS-2530L (up to 1.06.01 Hotfix) and DCS-2670L (up to 2.02). The unauthenticated /config/getuser endpoint allows remote administrator password disclosure. Impact: attacker could obtain the admin password, enabling unauthorized access. Remediation: update firmware to ...