Social Engineering Neo

4 exploits Active since Apr 2019
CVE-2019-17600 EXPLOITDB CRITICAL html WORKING POC
Intelbras IWR 1000N 1.6.4 - Information Disclosure via v1/system/user Endpoint
Intelbras IWR 1000N 1.6.4 devices allow disclosure of the administrator login name and password because v1/system/user is mishandled.
CVSS 9.8
CVE-2019-11416 EXPLOITDB HIGH html WORKING POC
Intelbras IWR 3000N 1.5.0 - Cross-Site Request Forgery via v1/system/user
A CSRF issue was discovered on Intelbras IWR 3000N 1.5.0 devices, leading to complete control of the router, as demonstrated by v1/system/user.
CVSS 8.8
EIP-2026-101860 EXPLOITDB bash WORKING POC
Netgear DGN2200 / DGND3700 - Admin Password Disclosure
CVE-2019-11415 EXPLOITDB HIGH bash WORKING POC
Intelbras IWR 3000N 1.5.0 - Denial of Service via Malformed Login Request
An issue was discovered on Intelbras IWR 3000N 1.5.0 devices. A malformed login request allows remote attackers to cause a denial of service (reboot), as demonstrated by JSON misparsing of the \""} string to v1/system/login.
CVSS 7.5