Humax-CLI

Humax-CLI An unofficial Humax IR4000HD terminal client with enhanced features. This all came from reversing the android app and there will be an article ASAP 😄 Screenshot Usage : usage: sendUDP.py -h -i IP -l --try-this --loop -j -b btn btn ... optional arguments: -h, --help show this help messag...

HUMAX Gateway - Backup Download Detection (CVE-2017-7315)

Detects CVE-2017-7315 by requesting /view/basic/GatewaySettings.bin without authentication and matching download headers. !/usr/bin/env python3 -- coding: utf-8 -- """HUMAX GatewaySettings.bin unauthenticated download CVE-2017-7315.""" from kittysploit import from lib.protocols.http.httpclient...

EUVD-2020-30294

Malware in sbrugna...

EUVD-2020-30191

Malware in sbrugna...

EUVD-2017-16342

Malware in sbrugna...

EUVD-2019-9482

Malware in sbrugna...

EUVD-2019-9483

Malware in sbrugna...

EUVD-2017-16344

Malware in sbrugna...

EUVD-2017-16343

Malware in sbrugna...

EUVD-2020-19878

Malware in sbrugna...

CVE-2020-9370

HUMAX HGA12R-02 BRGCAA 1.1.53 devices allow Session Hijacking...

CVE-2020-9477

An issue was discovered on HUMAX HGA12R-02 BRGCAA 1.1.53 devices. A vulnerability in the authentication functionality in the web-based interface could allow an unauthenticated remote attacker to capture packets at the time of authentication and gain access to the cleartext password. An attacker...

CVE-2020-27366

Cross Site Scripting XSS vulnerability in wlscanresults.html in Humax HGB10R-02 BRGCAB version 1.0.03, allows local attackers to execute arbitrary code...

CVE-2019-19890

An issue was discovered on Humax Wireless Voice Gateway HGB10R-2 201608171855 devices. Admin credentials are sent over cleartext HTTP...

CVE-2019-19889

An issue was discovered on Humax Wireless Voice Gateway HGB10R-2 201608171855 devices. The attacker can discover admin credentials in the backup file, aka backupsettings.conf...

CVE-2020-27366

Cross Site Scripting XSS vulnerability in wlscanresults.html in Humax HGB10R-02 BRGCAB version 1.0.03, allows local attackers to execute arbitrary code...

CVE-2020-27366

Cross Site Scripting XSS vulnerability in wlscanresults.html in Humax HGB10R-02 BRGCAB version 1.0.03, allows local attackers to execute arbitrary code...

Cross site scripting

Cross Site Scripting XSS vulnerability in wlscanresults.html in Humax HGB10R-02 BRGCAB version 1.0.03, allows local attackers to execute arbitrary code...

CVE-2020-27366

Cross Site Scripting XSS vulnerability in wlscanresults.html in Humax HGB10R-02 BRGCAB version 1.0.03, allows local attackers to execute arbitrary code...

CVE-2020-27366

Cross Site Scripting XSS vulnerability in wlscanresults.html in Humax HGB10R-02 BRGCAB version 1.0.03, allows local attackers to execute arbitrary code...