CVE-2021-27132

SerComm AG Combo VD625 AGSOT2.1.0 devices allow CRLF injection for HTTP header injection in the download function via the Content-Disposition header...

Sercomm AG Combo VD625 AGSOT Injection Vulnerability

Sercomm AG Combo VD625 AGSOT is an application from Sercomm China. provides a comprehensive telecom broadband solution. An injection vulnerability exists in SerComm AG Combo VD625 AGSOT2.1.0 that allows CRLF injection...

SerComm Device - Remote Code Execution

No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = GreatRanking include Msf::Exploit::Remote::Tcp include...

Sercomm TCP/32674 Backdoor Reactivation

No description provided by source. / PoC to reactivate Sercomm TCP/32674 backdoor See http://www.synacktiv.com/ressources/TCP32764backdooragain.pdf Eloi Vanderbeken - Synacktiv THIS SOFTWARE IS PROVIDED BY SYNACKTIV ''AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, T...

Routers TCP 32764 Backdoor Vulnerability Secretly Re-Activated Again

At the beginning of this year, we reported about the secret backdoor ‘TCP 32764’ discovered in several routers including, Linksys, Netgear, Cisco and Diamond that allowed an attacker to send commands to the vulnerable routers at TCP port 32764 from a command-line shell without being authenticated...

Sercomm TCP/32674 Backdoor Reactivation

Exploit for hardware platform in category remote exploits / PoC to reactivate Sercomm TCP/32674 backdoor See http://www.synacktiv.com/ressources/TCP32764backdooragain.pdf Eloi Vanderbeken - Synacktiv THIS SOFTWARE IS PROVIDED BY SYNACKTIV ''AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING...

Sercomm TCP/32674 - Backdoor Reactivation

/ PoC to reactivate Sercomm TCP/32674 backdoor See http://www.synacktiv.com/ressources/TCP32764backdooragain.pdf Eloi Vanderbeken - Synacktiv THIS SOFTWARE IS PROVIDED BY SYNACKTIV ''AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF...

Sercomm TCP/32674 Backdoor Reactivation

/ PoC to reactivate Sercomm TCP/32674 backdoor See http://www.synacktiv.com/ressources/TCP32764backdooragain.pdf Eloi Vanderbeken - Synacktiv THIS SOFTWARE IS PROVIDED BY SYNACKTIV ''AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF...

Sercomm TCP32674 - Backdoor Reactivation

Sercomm TCP32674 - Backdoor Reactivation / PoC to reactivate Sercomm TCP/32674 backdoor See http://www.synacktiv.com/ressources/TCP32764backdooragain.pdf Eloi Vanderbeken - Synacktiv THIS SOFTWARE IS PROVIDED BY SYNACKTIV ''AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED...

多个Linksys产品后门未授权访问漏洞

BUGTRAQ ID：64675 Linksys是思科系统一个销售家用与小型业务用网络产品的部门。Linksys最初于1988年创立，2003年被思科收购。尽管Linksys最知名的是其宽带与无线路由器，但亦有生产以太网交换与VoIP装置以及多种其他产品。 多款Linksys产品（包括Linksys WAG200G、Linksys WAG320N、Linksys WAG54G2、Linksys WAG120N、Linksys WAP4410N）在实现上存在未授权访问漏洞。攻击者可利用这些漏洞以管理员权限在受影响设备上执行命令。 0 Cisco Linksys WAG200G null...

SerComm Device远程代码执行漏洞

No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = GreatRanking include Msf::Exploit::Remote::Tcp include...

SerComm Device - Remote Code Execution (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "SerComm Device Remote Code Execution", 'Description' = %q This module will cause remote code execution on several SerComm devices...

SerComm Device Remote Code Execution Vulnerability

This Metasploit module will cause remote code execution on several SerComm devices. These devices typically include routers from NetGear and Linksys. Tested against NetGear DG834. This module requires Metasploit: http//metasploit.com/download Current source:...

SerComm Device Remote Code Execution

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "SerComm Device Remote Code Execution", 'Description' = %q This module will cause remote code execution on several SerComm devices...

Hacking Wireless DSL routers via Administrative password Reset Vulnerability

If you want to hack a Netgear and Linkys Wireless Routers, there is a quick backdoor entry available, that allow an attacker to reset the admin panel password to defaults. Eloi Vanderbeken, a hacker and reverse-engineer from France has discovered an administration password Reset vulnerability in...

SerComm Network Device Backdoor Detection

This module can identify SerComm manufactured network devices which contain a backdoor, allowing command injection or account disclosure. Module Options msf use auxiliary/scanner/misc/sercomm/backdoorscanner msf undefinedbackdoorscanner show actions ...actions... msf undefinedbackdoorscanner set...

SerComm Device Remote Code Execution

This module will cause remote code execution on several SerComm devices. These devices typically include routers from NetGear and Linksys. This module was tested successfully against several NetGear, Honeywell and Cisco devices. Module Options msf use exploit/linux/misc/sercomm/exec msf...

SerComm Device Configuration Dump

This module will dump the configuration of several SerComm devices. These devices typically include routers from NetGear and Linksys. This module was tested successfully against the NetGear DG834 series ADSL modem router. Module Options msf use auxiliary/admin/misc/sercomm/dumpconfig msf...