CVE-2016-6557

In ASUS RP-AC52 access points with firmware version 1.0.1.1s and possibly earlier, the web interface, the web interface does not sufficiently verify whether a valid request was intentionally provided by the user. An attacker can perform actions with the same permissions as a victim user, provided...

Command injection

A command injection vulnerability exists in apply.cgi on the ASUS RP-AC52 access point, firmware version 1.0.1.1s and possibly earlier, web interface specifically in the actionscript parameter. The actionscript parameter specifies a script to be executed if the actionmode parameter does not conta...

CVE-2016-6553

Nuuo NT-4040 Titan, firmware NT-404001.07.0000.00151120, uses non-random default credentials of: admin:admin and localdisplay:111111. A remote network attacker can gain privileged access to a vulnerable device...

Default credentials

Synology NAS servers DS107, firmware version 3.1-1639 and prior, and DS116, DS213, firmware versions prior to 5.2-5644-1, use non-random default credentials of: guest:blank and admin:blank . A remote network attacker can gain privileged access to a vulnerable device...

CVE-2016-6551 Intellian Satellite TV antennas t-Series and v-Series, firmware version 1.07, uses default credentials

Intellian Satellite TV antennas t-Series and v-Series, firmware version 1.07, uses non-random default credentials of: ftp/ftp or intellian:12345678. A remote network attacker can gain elevated access to a vulnerable device...

Western Digital WD TV Live Hub RCE Vulnerability

The web server on Western Digital TV Live Hub 3.12.13 allow unauthenticated remote attackers to execute arbitrary code or cause denial of service via crafted HTTP requests to toServerValue.cgi. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced...

HID discoveryd command_blink_on Unauthenticated Remote Command Execution Exploit

This Metasploit module exploits an unauthenticated remote command execution vulnerability in the discoveryd service exposed by HID VertX and Edge door controllers. This Metasploit module was tested successfully on a HID Edge model EH400 with firmware version 2.3.1.603 Build 04/23/2012. This modul...

Schneider Electric Pelco Sarix Professional 1st generation cameras authentication password disclosure vulnerability

Schneider Electric Pelco Sarix Professional 1st generation cameras is an IP camera device from Schneider Electric France. A security vulnerability exists in Schneider Electric Pelco Sarix Professional 1st generation cameras using firmware versions prior to 3.29.69. The vulnerability can be...

Schneider Electric Pelco Sarix Professional 1st generation cameras elevation of privilege vulnerability

Schneider Electric Pelco Sarix Professional 1st generation cameras is an IP camera device from Schneider Electric France. A security vulnerability exists in Schneider Electric Pelco Sarix Professional 1st generation cameras using firmware versions prior to 3.29.69. The vulnerability can be...

Unspecified Vulnerability in Cloud Media Popcorn A-200

Cloud Media Popcorn A-200 is a multimedia playback device. A security vulnerability exists in Cloud Media Popcorn A-200 using firmware version 03-05-130708-21-POP-411-000. An attacker can exploit the vulnerability to take full control of the device by connecting to port 23...

TP-Link TL-WA850RE - Remote Command Execution

!/usr/bin/env python Exploit Title: TP-Link Technologies TL-WA850RE Wi-Fi Range Extender - Command Execution Date: 19/06/2018 Exploit Author: yoresongo - Advisability S.A.S Colombia www.advisability.co Vendor Homepage: https://www.tp-link.com/ Firmware Link:...

Teradek Cube 7.3.6 CSRF Change Password Exploit

Summary Cube packs world-class video quality into a rugged, portable chassis for quick IP video deployments at any location. Each encoder and decoder includes HDMI and 3G-SDI I/O, Ethernet / WiFI connectivity, and full duplex IFB. Description The application interface allows users to perform...

TP-Link TL-WA850RE Denial of Service Vulnerability (CNVD-2018-12045)

TP-Link TL-WA850RE Wi-Fi Range Extender is a wireless network signal extender from China P&L TP-LINK. A security vulnerability exists in the TP-Link TL-WA850RE Wi-Fi Range Extender using firmware version TL-WA850REv5180228. A remote attacker can exploit the vulnerability to cause a denial of...

TP-Link TL-WA850RE Wi-Fi Range Extender Heap Buffer Overflow Vulnerability

TP-Link TL-WA850RE Wi-Fi Range Extender is a wireless network signal extender from China P&L TP-LINK. A heap buffer overflow vulnerability exists in the TP-Link TL-WA850RE Wi-Fi Range Extender using firmware version TL-WA850REv5180228. A remote attacker can exploit this vulnerability to cause a...

AsusWRT RT-AC750GF - Cross-Site Request Forgery (Change Admin Password)

AsusWRT RT-AC750GF - Cross-Site Request Forgery Change Admin Password Exploit Title: AsusWRT RT-AC750GF - Cross-Site Request Forgery Change Admin Password Date: 2018-06-23 Exploit Author: Wadeek Vendor Homepage: https://www.asus.com/ Firmware Link:...

TP-Link TL-WA850RE Remote Arbitrary Code Execution Vulnerability

The TP-Link TL-WA850RE is a wireless extender. A remote arbitrary code execution vulnerability exists in the TP-Link TL-WA850RE Wi-Fi Range Extender using TL-WA850RE v5 firmware. A remote attacker can exploit this vulnerability by sending the 'wpssetuppin' parameter with shell metacharacters to t...

AsusWRT #RTAC750GF - Cross-Site Request Forgery (Change Admin Password) Vulnerability

Exploit for hardware platform in category web applications Exploit Title: AsusWRT RT-AC750GF - Cross-Site Request Forgery Change Admin Password Exploit Author: Wadeek Vendor Homepage: https://www.asus.com/ Firmware Link:...

Axis cameras there are security flaws, three of the vulnerabilities can be taken over-vulnerability warning-the black bar safety net

Network security company VDOO researchers recently discovered several vulnerabilities affect the Axis nearly 400 security cameras. From the network security company VDOO researchers on IOT devices conducted a study and found that the axis company manufacturing the camera of the presence of seven...

TP-Link TL-WA850RE Remote Command Execution

!/usr/bin/env python Exploit Title: TP-Link Technologies TL-WA850RE Wi-Fi Range Extender - Command Execution Date: 19/06/2018 Exploit Author: yoresongo - Advisability S.A.S Colombia www.advisability.co Vendor Homepage: https://www.tp-link.com/ Firmware Link:...

TP-Link TL-WA850RE - Remote Command Execution

TP-Link TL-WA850RE - Remote Command Execution !/usr/bin/env python Exploit Title: TP-Link Technologies TL-WA850RE Wi-Fi Range Extender - Command Execution Date: 19/06/2018 Exploit Author: yoresongo - Advisability S.A.S Colombia www.advisability.co Vendor Homepage: https://www.tp-link.com/ Firmwar...