Exploits

Zeeways Matrimony CMS – SQL Injection

# Exploit Title: Zeeways Matrimony CMS - SQL Injection

Matri4Web Matrimony Website Script – Multiple SQL Injection

# Exploit Title: Matrimony Website Script - Multiple SQL Injection

Meeplace Business Review Script – ‘id’ SQL Injection

# Exploit Title: Meeplace Business Review Script - 'id' SQL Injection

Inout Article Base CMS – SQL Injection

# Exploit Title: Inout Article Base CMS - SQL Injection

snap – seccomp BBlacklist for TIOCSTI can be Circumvented

snap uses a seccomp filter to prevent the use of the TIOCSTI ioctl; in the

Netartmedia Vlog System – ’email’ SQL Injection

# Exploit Title: Netartmedia Vlog System - 'email' SQL Injection

DVD X Player 5.5.3 – ‘.plf’ Buffer Overflow

#!/usr/bin/env python

Rails 5.2.1 – Arbitrary File Content Disclosure

'''

The Company Business Website CMS – Multiple Vulnerabilities

# Exploit Title: The Company Business Website CMS - 'user_name' SQL

uHotelBooking System – ‘system_page’ SQL Injection

# Exploit Title: uHotelBooking System - 'system_page' SQL Injection

Placeto CMS Alpha v4 – ‘page’ SQL Injection

Placeto CMS Alpha v4 - 'page' SQL Injection

Canarytokens 2019-03-01 – Detection Bypass

## Exploit Title: Canarytokens 2019-03-01 - Detection Bypass

Bootstrapy CMS – Multiple SQL Injection

# Exploit Title: Bootstrapy CMS - Multiple SQL Injection

Netartmedia PHP Car Dealer – SQL Injection

# Exploit Title: Netartmedia PHP Car Dealer- SQL Injection

Netartmedia PHP Real Estate Agency 4.0 – SQL Injection

# Exploit Title: Netartmedia PHP Real Estate Agency 4.0 - SQL Injection

Netartmedia Jobs Portal 6.1 – SQL Injection

# Exploit Title: Netartmedia Jobs Portal 6.1 - SQL Injection

Netartmedia PHP Dating Site – SQL Injection

# Exploit Title: Netartmedia Php Dating Site - SQL Injection

Netartmedia PHP Business Directory 4.2 – SQL Injection

# Exploit Title: Netartmedia PHP Business Directory 4.2 - SQL Injection

NetShareWatcher 1.5.8.0 – Local SEH Buffer Overflow

# Exploit Title: NetShareWatcher 1.5.8.0 - SEH Buffer Overflow

202CMS v10beta – Multiple SQL Injection

===========================================================================================

PLC Wireless Router GPN2.4P21-C-CN – Incorrect Access Control

# Exploit Title: PLC Wireless Router GPN2.4P21-C-CN -Incorrect Access

PLC Wireless Router GPN2.4P21-C-CN – Cross-Site Request Forgery

# Exploit Title: PLC Wireless Router GPN2.4P21-C-CN -Cross-Site Request Forgery (CSRF)

Netartmedia Deals Portal – ‘Email’ SQL Injection

# Exploit Title: Netartmedia Deals Portal - 'Email' SQL Injection

Gila CMS 1.9.1 – Cross-Site Scripting

# Exploit Title: Gila CMS (search) Cross Site Scripting

MyBB Upcoming Events Plugin 1.32 – Cross-Site Scripting

# Exploit Title: MyBB Upcoming Events Plugin 1.32 - Cross-Site Scripting

eNdonesia Portal 8.7 – Multiple Vulnerabilities

===========================================================================================

Netartmedia Event Portal 2.0 – ‘Email’ SQL Injection

# Exploit Title: Netartmedia Event Portal 2.0 - 'Email' SQL Injection

Advanced Host Monitor 11.92 beta – Local Buffer Overflow

#!/usr/bin/env python

Netartmedia PHP Mall 4.1 – SQL Injection

# Exploit Title: Netartmedia PHP Mall 4.1 - Multiple SQL Injection

Netartmedia Real Estate Portal 5.0 – SQL Injection

# Exploit Title: Netartmedia Real Estate Portal 5.0 - Multiple SQL Injection

libseccomp < 2.4.0 - Incorrect Compilation of Arithmetic Comparisons

When libseccomp compiles filters for 64-bit systems, it needs to split 64-bit

Google Chrome < M73 - Double-Destruction Race in StoragePartitionService

There's a race condition in the destruction of the BindingState for bindings to the StoragePartitionService.

Google Chrome < M73 - Data Race in ExtensionsGuestViewMessageFilter

There appears to be a race condition in the destruction of the ExtensionsGuestViewMessageFilter if the ProcessIdToFil...

Microsoft Internet Explorer 11 – VBScript Execution Policy Bypass in MSHTML

Microsoft VBScript – VbsErase Memory Corruption

Microsoft Edge – Flash click2play Bypass with CObjectElement::FinalCreateObject

Attached is a PoC file that bypasses Flash click2play in Microsoft Edge. This was tested on Windows 10 64bit v 1809 w...

Google Chrome < M73 - MidiManagerWin Use-After-Free

MidiManagerWin uses a similar instance_id mechanism to the TaskService implementation to ensure that delayed tasks ar...

Google Chrome < M73 - FileSystemOperationRunner Use-After-Free

There's a comment in FileSystemOperationRunner::BeginOperation

Jenkins 2.137 and Pipeline Groovy Plugin 2.61 – ACL Bypass and Metaprogramming Remote Code Execution (Metasploit)

##

WinMPG Video Convert 9.3.5 – Denial of Service

# Exploit Title: WinMPG Video Convert Local Dos Exploit

WinAVI iPod/3GP/MP4/PSP Converter 4.4.2 – Denial of Service

# Exploit Title: WinAVI iPod/3GP/MP4/PSP Converter 4.4.2 Local Dos Exploit

TheCarProject 2 – Multiple SQL Injection

===========================================================================================

BMC Patrol Agent – Privilege Escalation Code Execution Execution (Metasploit)

##

NetData 1.13.0 – HTML Injection

# ************************************************************************

CMS Made Simple Showtime2 Module 3.6.2 – (Authenticated) Arbitrary File Upload

#!/usr/bin/env python

Mail Carrier 2.5.1 – ‘MAIL FROM’ Buffer Overflow

# Exploit Title: Tabs Mail Carrier 2.5.1 MAIL FROM: Buffer Overflow

ICE HRM 23.0 – Multiple Vulnerabilities

===========================================================================================

Vembu Storegrid Web Interface 4.4.0 – Multiple Vulnerabilities

# Exploit Title: Vembu Storegrid Web Interface 4.4.0 - Multiple Vulnerabilities

Laundry CMS – Multiple Vulnerabilities

===========================================================================================

Moodle 3.4.1 – Remote Code Execution