Exploits

iOS < 12.2 / macOS < 10.14.4 XNU - pidversion Increment During execve is Unsafe

Privileged IPC services in userspace often have to verify the security context of their client processes (such as whe...

WebKit JavaScriptCore – Out-Of-Bounds Access in FTL JIT due to LICM Moving Array Access Before the Bounds Check

While fuzzing JavaScriptCore, I encountered the following JavaScript program which crashes jsc in current HEAD and re...

WebKit JavaScriptCore – CodeBlock Dangling Watchpoints Use-After-Free

While fuzzing JavaScriptCore, I encountered the following (simplified and commented) JavaScript program which crashes...

WebKitGTK+ – ‘ThreadedCompositor’ Race Condition

Google Chrome 72.0.3626.81 – ‘V8TrustedTypePolicyOptions::ToImpl’ Type Confusion

VULNERABILITY DETAILS

Google Chrome 73.0.3683.39 / Chromium 74.0.3712.0 – ‘ReadableStream’ Internal Object Leak Type Confusion

Click to start AudioContext

Google Chrome 72.0.3626.96 / 74.0.3702.0 – ‘JSPromise::TriggerPromiseReactions’ Type Confusion

Cisco RV320 and RV325 – Unauthenticated Remote Code Execution (Metasploit)

##

Inout EasyRooms – SQL Injection

# Exploit Title: Inout EasyRooms Ultimate Edition - SQL Injection

Inout RealEstate – ‘city’ SQL Injection

# Exploit Title: Inout RealEstate - SQL Injection

WordPress Plugin PayPal Checkout Payment Gateway 1.6.8 – Parameter Tampering

# Exploit Title: cgi-bin/webscr?cmd=_cart in the WooCommerce PayPal Checkout Payment Gateway plugin 1.6.8 for WordPre...

JioFi 4G M2S 1.0.2 – Cross-Site Request Forgery

# Exploit Title: JioFi 4G M2S 1.0.2 devices have CSRF via the SSID name and Security Key field under Edit Wi-Fi Setti...

LimeSurvey < 3.16 - Remote Code Execution

#!/usr/bin/python

CMS Made Simple < 2.2.10 - SQL Injection

#!/usr/bin/env python

AIDA64 Extreme / Engineer / Network Audit 5.99.4900 – SEH Buffer Overflow (EggHunter)

#!/usr/bin/python #

Fiverr Clone Script 1.2.2 – SQL Injection / Cross-Site Scripting

# Exploit Title: Fiverr Clone Script 1.2.2 - SQL Injection / Cross Site Scripting

phpFileManager 1.7.8 – Local File Inclusion

# Exploit Title: phpFileManager 1.7.8 - Local File Inclusion

CentOS Web Panel 0.9.8.789 – NameServer Field Persistent Cross-Site Scripting

# Exploit Title: CentOS Web Panel 0.9.8.789 - NameServer Field Stored Cross-Site Scripting Vulnerability

Thomson Reuters Concourse & Firm Central < 2.13.0097 - Directory Traversal / Local File Inclusion

'''

Airbnb Clone Script – Multiple SQL Injection

# Exploit Title: Homey BNB (Airbnb Clone Script) - Multiple SQL Injection

Fat Free CRM 0.19.0 – HTML Injection

# Exploit Title: Fat Free CRM v0.19.0 - HTML Injection

WordPress Plugin Anti-Malware Security and Brute-Force Firewall 4.18.63 – Local File Inclusion (PoC)

# Exploit Title: Wordpress Anti-Malware Security and Bruteforce Firewall - Local File Inclusion

WordPress Plugin Loco Translate 2.2.1 – Local File Inclusion

# Exploit Title: Wordpress Loco Translate (Version 2.2.1) Plugin LFI

i-doit 1.12 – ‘qr.php’ Cross-Site Scripting

# Exploit Title: i-doit 1.12 Cross Site Scripting on qr.php file

Microsoft Visio 2016 16.0.4738.1000 – ‘Log in accounts’ Denial of Service

# -⋆- coding: utf-8 -⋆-

Job Portal 3.1 – ‘job_submit’ SQL Injection

===========================================================================================

BigTree 4.3.4 CMS – Multiple SQL Injection

===========================================================================================

Jettweb PHP Hazır Rent A Car Sitesi Scripti V2 – ‘arac_kategori_id’ SQL Injection

# Exploit Title: Jettweb PHP Hazır Rent A Car Sitesi Scripti V2 - 'arac_kategori_id' SQL Injection

Base64 Decoder 1.1.2 – Local Buffer Overflow (SEH Egghunter)

#!/usr/bin/env python

gnutls 3.6.6 – ‘verify_crt()’ Use-After-Free

## Description of problem:

CMS Made Simple (CMSMS) Showtime2 – File Upload Remote Code Execution (Metasploit)

##

Oracle Weblogic Server Deserialization RCE – Raw Object (Metasploit)

##

Jettweb Hazır Rent A Car Scripti V4 – SQL Injection

# Exploit Title: Jettweb Hazır Rent A Car Scripti V4 - SQL Injection

Microsoft Windows 7/2008 – ‘Win32k’ Denial of Service (PoC)

# Exploit Title: Microsoft Windows Win32k CVE-2019-0808 Local Privilege Escalation Vulnerability

Firefox < 66.0.1 - 'Array.prototype.slice' Buffer Overflow

Jettweb Php Hazır İlan Sitesi Scripti V2 – SQL Injection

# Exploit Title: Jettweb Php Hazır İlan Sitesi Scripti V2 - SQL Injection

Rukovoditel ERP & CRM 2.4.1 – ‘path’ Cross-Site Scripting

# Exploit Title: Rukovoditel ERP & CRM 2.4.1 - 'path' Cross-Site Scripting

XooGallery – Multiple SQL Injection

# Exploit Title: XooGallery - Multiple SQL Injections

XooDigital – ‘p’ SQL Injection

# Exploit Title: XooDigital - 'p' SQL Injection

Titan FTP Server Version 2019 Build 3505 – Directory Traversal / Local File Inclusion

# Exploit Title: Titan FTP Server Version 2019 Build 3505 Directory Traversal/Local File Inclusion

SJS Simple Job Script – SQL Injection / Cross-Site Scripting

# Exploit Title: Simple Job Script - Multiple Vulnerabilities

Spidermonkey – IonMonkey Type Inference is Incorrect for Constructors Entered via OSR

A bug in IonMonkeys type inference system when JIT compiling and entering a constructor function via on-stack replace...

Apache CouchDB 2.3.1 – Cross-Site Request Forgery / Cross-Site Scripting

#####################################################################################################################...

X-NetStat Pro 5.63 – Local Buffer Overflow

#!/usr/bin/env python

Jettweb PHP Hazır Haber Sitesi Scripti V1 – SQL Injection

# Exploit Title: Jettweb PHP Hazır Haber Sitesi Scripti V1 - Multiple Vulnerabilities

Jettweb PHP Hazır Haber Sitesi Scripti V2 – SQL Injection (Authentication Bypass)

# Exploit Title: Jettweb PHP Hazır Haber Sitesi Scripti V2 - Authentication Bypass

Jettweb PHP Hazır Haber Sitesi Scripti V3 – SQL Injection

# Exploit Title: Jettweb PHP Hazır Haber Sitesi Scripti V3 - Multiple Vulnerabilities

VMware Workstation 14.1.5 / VMware Player 15.0.2 – Host VMX Process Impersonation Hijack Privilege Escalation

VMware: Host VMX Process Impersonation Hijack EoP

VMware Workstation 14.1.5 / VMware Player 15 – Host VMX Process COM Class Hijack Privilege Escalation

VMware: Host VMX Process COM Class Hijack EoP

Zeeways Jobsite CMS – ‘id’ SQL Injection

# Exploit Title: Zeeways Jobsite CMS - 'id' SQL Injection