CVE-2014-8888

The remote administration interface in D-Link DIR-815 devices with firmware before 2.03.B02 allows remote attackers to execute arbitrary commands via vectors related to an "HTTP command injection issue."...

CVE-2017-10897

Input validation issue in Buffalo BBR-4HG and and BBR-4MG broadband routers with firmware 1.00 to 1.48 and 2.00 to 2.07 allows an attacker to cause the device to become unresponsive via unspecified vectors...

CVE-2017-13081

Wi-Fi Protected Access WPA and WPA2 that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key IGTK during the group key handshake, allowing an attacker within radio range to spoof frames from access points to clients...

Command injection

'/cgi-bin/admin/testserver.cgi' of the web service in most of the VIVOTEK Network Cameras is vulnerable to shell command injection, which allows remote attackers to execute any shell command as root via a crafted HTTP request. This vulnerability is already verified on VIVOTEK Network Camera...

CVE-2017-6019

An issue was discovered in Schneider Electric Conext ComBox, model 865-1058, all firmware versions prior to V3.03 BN 830. A series of rapid requests to the device may cause it to reboot...

Code injection

An issue was discovered in Carlo Gavazzi VMU-C EM prior to firmware Version A11U05, and VMU-C PV prior to firmware Version A17. Sensitive information is stored in clear-text...

Crestron AM-100 - Multiple Vulnerabilities

Exploit for hardware platform in category remote exploits ================================================================= Crestron AM-100 Multiple Vulnerabilities ================================================================= Exploit Author: Zach Lanier Vendor Homepage:...

CVE-2016-3988

CVE-2016-3988 affects Meinberg NTP Time Server interfaces across multiple IMS-LANTIME/LANTIME/SyncFire/LCES devices (M3000, M1000, M500, M900, M600, M400, M300, M200, M100, SyncFire 1100, LCES) with firmware prior to 6.20.004. The vulnerability is due to multiple stack-based buffer overflows in t...

CVE-2016-1395

CVE-2016-1395 affects Cisco RV110W, RV130W, and RV215W routers. The web-based management interface vulnerable due to insufficient sanitization of HTTP input, enabling unauthenticated remote code execution as root via a crafted HTTP request. Affected firmware versions are before 1.2.1.7 (RV110W), ...

CVE-2013-5669

The Thecus NAS server N8800 with firmware 5.03.01 uses cleartext credentials for administrative authentication, which allows remote attackers to obtain sensitive information by sniffing the network...

PT-2025-31687

Name of the Vulnerable Software and Affected Versions D-Link DIR-300 version 1.05 D-Link DIR-615 version 4.13 Description An OS command injection vulnerability exists in multiple D-Link routers via the authenticated tools vct.xgi CGI endpoint. The web interface does not properly sanitize...

CVE-2007-4747

The telnet service in Cisco Video Surveillance IP Gateway Encoder/Decoder Standalone and Module firmware 1.8.1 and earlier, Video Surveillance SP/ISP Decoder Software firmware 1.11.0 and earlier, and the Video Surveillance SP/ISP firmware 1.23.7 and earlier does not require authentication, which...

U.S. Robotics Broadband Router 8003 admin password visible

Hello. US Robotics Broadband Router 8003 is a small home/SOHO router which is configured using a HTML interface. This interface, as usual, asks for a password in order to let you view or change configuration parameters. But the password is checked first by a javascript function that just compares...

D-Link 704p Broadband Router Remote / Local DoS

02 August 2003 Hardware: D-Link 704p Vulnerability: Multiple Local/Remote see below Warning Level: Moderate Description: This small advisory is on the D-Link 704p router with firmware version 2.70. The router is a small 4 port DSL/CABLE router. Earlier this year I made a small post on BUGTRAQ abo...

D-Link DI-704P - Long URL Denial of Service

source: https://www.securityfocus.com/bid/8355/info D-Link DI-704P has been reported prone to a remote denial of service vulnerability. The issue presents itself when a request of excessive length is sent to the router. This causes the device to behave in an unstable manner. Malicious requests ma...

Cisco Aironet AP1100 Valid Account Disclosure Vulnerability

VIGILANTe Security Watch Advisory Name: Cisco Aironet AP1100 Valid Account Disclosure Vulnerability Systems Affected: Tested on a Cisco Aironet AP1100 Model 1120B Series Wireless device. Firmware version 12.24JA and earlier. NB : A large number of Cisco IOSes are affected by this flaw. Severity:...

Cacheflow CacheOS 3.1.x/4.0.x/4.1 - Unresolved Domain Cross-Site Scripting

source: https://www.securityfocus.com/bid/5305/info CacheOS is the firmware designed and distributed with CacheFlow web cache systems. It is maintained and distributed by CacheFlow. User supplied data is not sanitized before being included in an unresolved host error page. An attacker may constru...

KPMG-2002008: Watchguard SOHO IP Restrictions Flaw

-------------------------------------------------------------------- -=Watchguard SOHO IP Restrictions Flaw=- courtesy of KPMG Denmark BUG-ID: 2002008 Released: 10th Apr 2002 -------------------------------------------------------------------- Problem: ======== A flaw in the Watchguard SOHO...

3Com® HomeConnect® Cable Modem Denial of Service

INFO: ====================================================== object class Failure to Handle Exceptional Conditions remote Yes local No vulnerable: 3Com® HomeConnect® Cable Modem External with USB 3CR29223 -- DISCONTINUED Not Tested: 3CR29223-A -- DISCONTINUED DISCUSSION:...

3Com OfficeConnect DSL Router 812 1.1.7840 1.1.7 - HTTP Port Router Denial of Service

3Com OfficeConnect DSL Router 812 1.1.7840 1.1.7 - HTTP Port Router Denial of Service // source: https://www.securityfocus.com/bid/2721/info OfficeConnect 812 is a DSL router manufactured by 3Com, and distributed by numerous DSL providers. OfficeConnect 812 is an integrated ADSL router with an...