157 matches found
RE11S_1.11-formAccept-CommandInjection
RE11S1.11-formAccept-Befehlseinschleusung Während meines Praktikums im Qi An Xin Tiangong Lab entdeckte ich eine Befehlseinschleusungsschwachstelle im Router RE11S1.11. Durch die Analyse der Webs-Datei im bin-Verzeichnis fand ich heraus, dass die Funktion formAccept eine...
Emerson Dixell XWEB-500 - Arbitrary File Write
Emerson Dixell XWEB-500 contains an arbitrary file write caused by unauthenticated access to /cgi-bin/logoextraupload.cgi, /cgi-bin/calsave.cgi, and /cgi-bin/loutils.cgi, letting attackers write any file on the system, exploit requires no authentication. id: CVE-2021-45420 info: name: Emerson...
LB-LINK Routers - Unauthenticated Command Injection
LB-LINK X-PRO 1.0.22-20231206 contains a hardcoded credentials vulnerability caused by manipulation of an unknown function in /etc/shadow, letting remote attackers use hardcoded credentials, exploit requires high complexity id: CVE-2026-19900 info: name: LB-LINK Routers - Unauthenticated Command...
mud-visualizer
निर्माता उपयोग विवरण MUD विज़ुअलाइज़र चेतावनी: mud-visualizer वर्तमान में बीटा संस्करण है। अपने जोखिम पर उपयोग करें। इस उपकरण का उपयोग JSON प्रारूप में MUD फ़ाइलों को विज़ुअलाइज़ करने के लिए किया जा सकता है। विषय-सूची प्रेरणा स्थापना समर्थित MUD अमूर्तताएँ योगदान सहायता उद्धरण लाइसेंस प्रेरणा MUD...
IoT_vuln
POC per dispositivi TOTOLINK: TOTOLINK LR350: CVE-2024-10654 bypass di login TOTOLINK T6: CVE-2025-6916 bypass di login - per un approfondimento su questa CVE, leggi di più su: https://anduinbrian.github.io/posts/blogs/totolink-t6-v3/...
CVE-2021-27289
🐝 CVE-2021-27289: Bypass della protezione di riproduzione sui dispositivi Zigbee Ksix 📑 Indice Prima di prenderci sul serio La storia dietro questa CVE Vulnerabilità Dispositivi interessati Dettagli tecnici Scenario di attacco Impatto Prova di concetto Video dimostrativi Articolo originale del bl...
CVE-2022-4096
CVE 2022 -4096 Amine TITROFINE | 21 जनवरी, 2023 यह प्रयोग DNS रिबाइंडिंग हमले को एक अनुकरणित IoT पर कैसे काम करता है, यह प्रदर्शित करने के लिए है। सेटअप में, हमारे पास एक सिम्युलेटेड IoT डिवाइस है, जिसे वेब इंटरफ़ेस के माध्यम से नियंत्रित किया जा सकता है यह कई IoT उपकरणों के लिए विशिष्ट है। कई Io...
blackbox-fuzzing
IoT डिवाइसों की ब्लैकबॉक्स-फ़ज़िंग: उदाहरण के रूप में TL-WR902AC राउटर का उपयोग यह मेरे टर्म पेपर का HTML संस्करण है जिसे PDF के रूप में डाउनलोड किया जा सकता है यहाँ. परिचय फ़ज़िंग सॉफ़्टवेयर में बग खोजने का "सबसे प्रभावी तरीकों" में से एक बन गई है। इसी या समान दावों के साथ, कई वर्तमान...
MINI-RG49-H5RP-JFGR
Bulletin has no description...
A Malicious SIM Card Can Run Attacker Code Inside the Modems Behind Cellular IoT Devices
A malicious SIM card can order the device it sits in to run commands of the attacker's choosing. On the cellular modules built into electric-vehicle chargers, industrial routers, and car telematics units, that is enough to take the whole device over. Researchers at the University of Birmingham an...
Exploit for CVE-2026-38422
CVE-2026-38422: Remote Code Execution via Combined Buffer Over...
vulnerability-research
Vulnerability Research & Responsible Disclosure Shivam Paji...
SenseLive X3050 跨站请求伪造漏洞
The SenseLive X3050 is a data collection and environmental monitoring device designed for IoT scenarios by SenseLive Corporation. The SenseLive X3050 has a cross-site request forgeing vulnerability. This vulnerability arises from the lack of protection against cross-site request forgeing in the w...
CVE-2022-42054
Multiple stored cross-site scripting XSS vulnerabilities in GL.iNet GoodCloud IoT Device Management System Version 1.00.220412.00 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Company Name and Description text fields...
CVE-2022-42055
Multiple command injection vulnerabilities in GL.iNet GoodCloud IoT Device Management System Version 1.00.220412.00 via the ping and traceroute tools allow attackers to read arbitrary files on the system...
CVE-2021-22547
In IoT Devices SDK, there is an implementation of calloc that doesn't have a length check. An attacker could pass in memory objects larger than the buffer and wrap around to have a smaller buffer than required, allowing the attacker access to the other parts of the heap. We recommend upgrading th...
CVE-2025-66647 RIOT OS has buffer overflow in gnrc_ipv6_ext_frag_reass
RIOT is an open-source microcontroller operating system, designed to match the requirements of Internet of Things IoT devices and other embedded devices. A vulnerability was discovered in the IPv6 fragmentation reassembly implementation of RIOT OS v2025.07. When copying the contents of the first...
EUVD-2021-0029
Malware in sbrugna...