Category: Uncategorized

security advisory, Uncategorized

[ICS] Nordex Control 2 (NC2) SCADA V16 and prior versions – XSS Vulnerability

[ICS] Nordex Control 2 (NC2) SCADA V16 and prior versions – XSS Vulnerability

CERT published an Advisory ICSA-15-286-01, …

security advisory, Uncategorized

PIXORD Vehicle 3G Wi-Fi Router 3GR-431P – Multiple Vulnerabilities

New exploit / advisory posted on Exploit-db & Packetstorm:

https://www.exploit-db.com/exploits/38370/
https://packetstormsecurity.com/files/133834/PIXORD-Vehicle-3G-Wi-Fi-Router-Command-Injection-Information-Disclosure.html

# Exploit Title: [Vehicle 3G Wi-Fi Router – PIXORD – Multiple
Vulnerabilities]
# Date: May 01, …

security advisory, Uncategorized

Netgear Voice Gateway 2.3.0.23_2.3.23 – Multiple Vulnerabilities

New advisory / exploit posted on Exploit-db & Packetstorm:

https://www.exploit-db.com/exploits/38449/
https://packetstormsecurity.com/files/133941/Netgear-Voice-Gateway-2.3.0.23_2.3.23-XSS-Code-Execution.html

# Exploit Title: [Netgear Voice Gateway Multiple Vulnerabilities]
# Date: May 01, …

Uncategorized

New Metasploit Modules

I wrote new Metasploit auxiliary modules & they landed at master branch recently.

http://www.metasploit.com/modules/auxiliary/scanner/http/sevone_enum
http://www.metasploit.com/modules/auxiliary/scanner/http/rfcode_reader_enum
http://www.metasploit.com/modules/auxiliary/scanner/http/infovista_enum

This next module for CA eHealth application –