Cisco RV110W 1.2.1.7 – ‘vpn_account’ Denial of Service (PoC)
January 17th, 2021 📆 | 2256 Views ⚑
# Exploit Title: Cisco RV110W 1.2.1.7 - 'vpn_account' Denial of Service (PoC) # Date: 2021-01 # Exploit Author: Shizhi He
Browsing the "hardware" Tag
Tagged with: account • cisco • CVE-2021-1167 • denial • hardware • PoC • rv110w • service • vpnaccount • webapps
iBall-Baton WRA150N Rom-0 Backup – File Disclosure (Sensitive Information)
January 9th, 2021 📆 | 7693 Views ⚑
# Exploit Title: iBall-Baton WRA150N Rom-0 Backup - File Disclosure (Sensitive Information) # Date: 07/01/2021 # Exploit Author: h4cks1n #
Tagged with: backup • baton • disclosure • File • hardware • iball • iBallBaton • information • Rom0 • sensitive • webapps • wra150n
[webapps] Sony Playstation 4 (PS4) < 6.72 - 'ValidationMessage::buildBubbleTree()' Use-After-Free WebKit Code Execution (PoC)
December 26th, 2020 📆 | 1605 Views ⚑
Sony Playstation 4 (PS4) < 6.72 - 'ValidationMessage::buildBubbleTree()' Use-After-Free WebKit Code Execution (PoC) Source link
Tagged with: after • buildbubbletree • code • execution • hardware • playstation • PoC • ps4 • Sony • UseAfterFree • validationmessage • ValidationMessagebuildBubbleTree • webapps • webkit
[webapps] Sony Playstation 4 (PS4) < 7.02 - 'ValidationMessage::buildBubbleTree()' Use-After-Free WebKit Code Execution (PoC)
December 26th, 2020 📆 | 6280 Views ⚑
Sony Playstation 4 (PS4) < 7.02 - 'ValidationMessage::buildBubbleTree()' Use-After-Free WebKit Code Execution (PoC) Source link
Tagged with: after • buildbubbletree • code • execution • hardware • playstation • PoC • ps4 • Sony • UseAfterFree • validationmessage • ValidationMessagebuildBubbleTree • webapps • webkit
DHS warns against using Chinese hardware and digital services
December 23rd, 2020 📆 | 4133 Views ⚑
Image: Martin Abegglen (Flickr/CC2.0) The US Department of Homeland Security has published a “business advisory” today warning US companies against
Tagged with: against • chinese • DHS • digital • hardware • services • using • warns
Macally WIFISD2-2A82 2.000.010 – Guest to Root Privilege Escalation
December 21st, 2020 📆 | 4433 Views ⚑
# Exploit Title: Macally WIFISD2-2A82 2.000.010 - Guest to Root Privilege Escalation # Date: 03.12.2020 # Exploit Author: Maximilian Barz
Tagged with: escalation • guest • hardware • macally • privilege • root • webapps • wifisd2 • WIFISD22A82
Cisco ASA 9.14.1.10 and FTD 6.6.0.1 – Path Traversal (2)
December 21st, 2020 📆 | 5451 Views ⚑
# Exploit Title: Cisco ASA 9.14.1.10 and FTD 6.6.0.1 - Path Traversal (2) # Date: 12 Dec 2020 # Exploit
Tagged with: ASA • cisco • CVE-2020-3452 • FTD • hardware • Path • traversal • webapps
Linksys RE6500 1.0.11.001 – Unauthenticated RCE
December 20th, 2020 📆 | 5893 Views ⚑
# Exploit Title: Linksys RE6500 1.0.11.001 - Unauthenticated RCE # Date: 31/07/2020 # Exploit Author: RE-Solver # Public disclosure: https://resolverblog.blogspot.com/2020/07/linksys-re6500-unauthenticated-rce-full.html#4
Tagged with: hardware • linksys • RCE • re6500 • unauthenticated • webapps
FRITZ!Box 7.20 – DNS Rebinding Protection Bypass
December 19th, 2020 📆 | 8136 Views ⚑
# Exploit Title: FRITZ!Box 7.20 - DNS Rebinding Protection Bypass # Date: 2020-06-23 # Exploit Author: RedTeam Pentesting GmbH #
Tagged with: bypass • CVE-2020-26887 • DNS • fritz • FRITZBox • hardware • protection • rebinding • remote
SpyCloud Hires Cybersecurity Veteran as First Chief Revenue Officer to Cap Momentous Year
December 8th, 2020 📆 | 3707 Views ⚑
AUSTIN, Texas, Dec. 8, 2020 /PRNewswire/ — SpyCloud, known for its unique anti-fraud platform powering account takeover prevention and fraud
Tagged with: 3G • africa • Asia • australia • bluetooth • cap • cellphones • chief • Chip • computer • cybersecurity • Electronics • email • Europe • finance • first • gaming • GPRS • Hard Drives • hardware • hires • india • internet • linux • Middle East • Momentous • MP3 • N. America • officer • pc • processor • revenue • S. America • Semicomductor • server • software • spycloud • SpyCloud Hires Cybersecurity Veteran as First Chief Revenue Officer to Cap Momentous Year • technology • telecom • Triple-Play • trojan • USB • veteran • voip • wi-fi • windows • wireless • Workstation • worms • year
Sony BRAVIA Digital Signage 1.7.8 – System API Information Disclosure
December 5th, 2020 📆 | 2434 Views ⚑
# Exploit Title: Sony BRAVIA Digital Signage 1.7.8 - System API Information Disclosure # Date: 20.09.2020 # Exploit Author: LiquidWorm
Tagged with: API • bravia • digital • disclosure • hardware • information • signage • Sony • system • webapps
Sony BRAVIA Digital Signage 1.7.8 – Unauthenticated Remote File Inclusion
December 5th, 2020 📆 | 1709 Views ⚑
# Exploit Title: Sony BRAVIA Digital Signage 1.7.8 - Unauthenticated Remote File Inclusion # Date: 20.09.2020 # Exploit Author: LiquidWorm
Tagged with: bravia • digital • File • hardware • inclusion • remote • signage • Sony • unauthenticated • webapps
Intelbras Router RF 301K 1.1.2 – Authentication Bypass
November 30th, 2020 📆 | 4024 Views ⚑
# Exploit Title: Intelbras Router RF 301K 1.1.2 - Authentication Bypass # Date: 27/11/2020 # Exploit Author: Kaio Amaral #
Tagged with: 301K • authentication • bypass • hardware • intelbras • router • webapps
ATX MiniCMTS200a Broadband Gateway 2.0 – Credential Disclosure
November 30th, 2020 📆 | 8203 Views ⚑
# Exploit Title: ATX MiniCMTS200a Broadband Gateway 2.0 - Credential Disclosure # Date: 2020-11-20 # Exploit Author: Zagros Bingol #
Tagged with: ATX • broadband • credential • disclosure • gateway • hardware • minicmts200a • webapps
Ruckus IoT Controller (Ruckus vRIoT) 1.5.1.0.21 – Remote Code Execution
November 27th, 2020 📆 | 2355 Views ⚑
*] *]# Product: Ruckus IoT Controller (Ruckus vRIoT) # Version: < = 1.5.1.0.21 # Vendor: https://support.ruckuswireless.com/ # Vulnerability: Command Injection
Tagged with: code • controller • execution • hardware • IoT • remote • ruckus • vriot • webapps
Gamers derail eBay listings to stop hardware scalpers profiting on latest technology | Science & Tech News
November 27th, 2020 📆 | 4544 Views ⚑
Gamers are sharing tips on how to derail auctions for high-end graphics cards and consoles to try to end scalping
Tagged with: derail • Ebay • gamers • hardware • latest • listings • News • profiting • scalpers • science • Stop • tech • technology
Seowon 130-SLC router 1.0.11 – ‘ipAddr’ RCE (Authenticated)
November 24th, 2020 📆 | 5816 Views ⚑
# Exploit Title: Seowon 130-SLC router 1.0.11 - 'ipAddr' RCE (Authenticated) # Date: 5 Aug 2020 # Exploit Author: maj0rmil4d
Tagged with: 130SLC • authenticated • hardware • ipaddr • RCE • router • seowon • webapps
TP-Link TL-WA855RE V5_200415 – Device Reset Auth Bypass
November 23rd, 2020 📆 | 8585 Views ⚑
# Exploit Title: TP-Link TL-WA855RE V5_200415 - Device Reset Auth Bypass # Date: 2020/07/29 # Exploit Author: malwrforensics # Vendor
Tagged with: 200415 • Auth • bypass • CVE-2020-24363 • device • hardware • reset • TLWA855RE • tplink • V5200415 • wa855re • webapps
Cisco 7937G – DoS/Privilege Escalation
November 21st, 2020 📆 | 3558 Views ⚑
# Exploit Title: Cisco 7937G 1-4-5-7 - DoS/Privilege Escalation # Date: 2020-08-10 # Exploit Author: Cody Martin # Vendor Homepage:
Tagged with: 7937g • cisco • DoSPrivilege • escalation • hardware • privilege • remote
Fortinet FortiOS 6.0.4 – Unauthenticated SSL VPN User Password Modification
November 19th, 2020 📆 | 3229 Views ⚑
# Exploit Title: Fortinet FortiOS 6.0.4 - Unauthenticated SSL VPN User Password Modification # Google Dork: intitle:"Please Login" "Use FTM
Tagged with: CVE-2018-13382 • fortinet • fortios • hardware • modification • password • SSL • unauthenticated • user • VPN • webapps
Popular
The best security conferences of 2021 December 21, 2020 The COVID-19 pandemic certainly threw a monkey wrench into the…
A second hacking group has targeted SolarWinds systems December 21, 2020 As forensic evidence is slowly being unearthed in the aftermath…
GitLab 11.4.7 – Remote Code Execution (Authenticated) December 20, 2020 # Exploit Title: GitLab 11.4.7 Authenticated Remote Code Execution (No…
Windows 10 bug corrupts your hard drive on seeing… January 15, 2021 An unpatched zero-day in Microsoft Windows 10 allows attackers to…
Rioters Open Capitol’s Doors to Potential Cyberthreats January 7, 2021 Business Continuity Management / Disaster Recovery , Critical Infrastructure Security…
WordPress Contact Form 7 5.3.1 Shell Upload ≈ Packet Storm December 22, 2020 # Exploit Title: Wordpress Plugin Contact Form 7 5.3.1 -…- Task Management System 1.0 –… December 20, 2020 # Exploit Title: Task Management System 1.0 - 'page' Local…
Members
Comments