Exploits

NetSetMan 4.7.1 – ‘Workgroup’ Denial of Service (PoC)

#Exploit Title: NetSetMan 4.7.1 'Workgroup' - Denial of Service (PoC)

Find a Place CMS Directory 1.5 – ‘assets/external/data_2.php cate’ SQL Injection

# Exploit Title: Find a Place CMS Directory 1.5 - 'assets/external/data_2.php cate' SQL Injection

Listing Hub CMS 1.0 – ‘pages.php id’ SQL Injection

# Exploit Title: Listing Hub CMS 1.0 - 'pages.php id' SQL Injection

Zuz Music 2.1 – ‘zuzconsole/___contact ‘ Persistent Cross-Site Scripting

# Exploit Title: Zuz Music 2.1 - 'zuzconsole/___contact ' Persistent Cross-site Scripting

Valentina Studio 9.0.4 – ‘Host’ Denial of Service (PoC)

#Exploit Title: Valentina Studio 9.0.4 - Denial of Service (PoC)

BulletProof FTP Server 2019.0.0.50 – ‘SMTP Server’ Denial of Service (PoC)

#Exploit Title: BulletProof FTP Server 2019.0.0.50 - Denial of Service (PoC)

eDirectory – SQL Injection

# Exploit Title: Admin auth bypass, SQLi and File Disclosure

XAMPP 5.6.8 – SQL Injection / Persistent Cross-Site Scripting

Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2 – Path Traversal / Cross-Site Scripting

Ask Expert Script 3.0.5 – Cross Site Scripting / SQL Injection

# Exploit Title: Ask Expert Script 3.0.5 - Cross Site Scripting / SQL Injection

Jenkins Plugin Script Security < 1.50/Declarative < 1.3.4.1/Groovy < 2.61.1 - Remote Code Execution (PoC)

In the exploitation, the target is always escalating the read primitive or write primitive to code execution! From th...

Realterm Serial Terminal 2.0.0.70 – Denial of Service

# -*- coding: utf-8 -*-

Realterm Serial Terminal 2.0.0.70 – Local Buffer Overflow (SEH)

# -*- coding: utf-8 -*-

mIRC < 7.55 - 'Custom URI Protocol Handlers' Remote Command Execution

# Exploit Title: RCE on mIRC

qdPM 9.1 – ‘type’ Cross-Site Scripting

===========================================================================================

qdPM 9.1 – ‘search[keywords]’ Cross-Site Scripting

===========================================================================================

Master IP CAM 01 3.3.4.2103 – Remote Command Execution

# Exploit Title: Master IP CAM 01 Remote Command Execution

MISP 2.4.97 – SQL Command Execution via Command Injection in STIX Module

#-*-coding:utf-8-*-

CMSsite 1.0 – ‘post’ SQL Injection

# Exploit Title: CMSsite 1.0 - 'post' SQL Injection

NBMonitor 1.6.5.0 – ‘Key’ Denial of Service (PoC)

# -*- coding: utf-8 -*-

M/Monit 3.7.2 – Privilege Escalation

#!/usr/env/python3

Webiness Inventory 2.3 – ‘ProductModel’ Arbitrary File Upload

===========================================================================================

Apache CouchDB 2.3.0 – Cross-Site Scripting

#####################################################################################################################...

ArangoDB Community Edition 3.4.2-1 – Cross-Site Scripting

#####################################################################################################################...

Comodo Dome Firewall 2.7.0 – Cross-Site Scripting

#####################################################################################################################...

Oracle Java Runtime Environment – Heap Out-of-Bounds Read During OTF Font Rendering in glyph_CloseContour

A heap-based out-of-bounds read was observed in Oracle Java Runtime Environment version 8u202 (latest at the time of ...

Oracle Java Runtime Environment – Heap Out-of-Bounds Read During TTF Font Rendering in OpenTypeLayoutEngine::adjustGlyphPositions

A heap-based out-of-bounds read was observed in Oracle Java Runtime Environment version 8u202 (latest at the time of ...

Oracle Java Runtime Environment – Heap Out-of-Bounds Read During TTF Font Rendering in ExtractBitMap_blocClass

A heap-based out-of-bounds read was observed in Oracle Java Runtime Environment version 8u202 (latest at the time of ...

Oracle Java Runtime Environment – Heap Out-of-Bounds Read During TTF Font Rendering in AlternateSubstitutionSubtable::process

A heap-based out-of-bounds read was observed in Oracle Java Runtime Environment version 8u202 (latest at the time of ...

Zoho ManageEngine ServiceDesk Plus (SDP) < 10.0 build 10012 - Arbitrary File Upload

# Exploit Title: Zoho ManageEngine ServiceDesk Plus (SDP) before 10.0 build 10012 - arbitrary file upload

WordPress Plugin WooCommerce – GloBee (cryptocurrency) Payment Gateway 1.1.1 – Payment Bypass / Unauthorized Order Status Spoofing

AirMore 1.6.1 – Denial of Service (PoC)

#!/usr/bin/python

Free IP Switcher 3.1 – ‘Computer Name’ Denial of Service (PoC)

#Exploit Title: Free IP Switcher 3.1 - Denial of Service (PoC)

Navicat for Oracle 12.1.15 – “Password” Denial of Service (PoC)

#Exploit Title: Navicat for Oracle 12.1.15 - "Password" Denial of Service (PoC)

MyBB Trash Bin Plugin 1.1.3 – Cross-Site Scripting / Cross-Site Request Forgery

# Exploit Title: MyBB Trash Bin Plugin 1.1.3 - Cross-Site Scripting / CSRF

VSCO 1.1.1.0 – Denial of Service (PoC)

# Exploit Title: VSCO 1.1.1.0 - Denial of Service (PoC)

Jinja2 2.10 – ‘from_string’ Server Side Template Injection

'''

qdPM 9.1 – ‘search_by_extrafields[]’ SQL Injection

===========================================================================================

Linux – ‘kvm_ioctl_create_device()’ NULL Pointer Dereference

kvm_ioctl_create_device() contains the following code:

UniSharp Laravel File Manager 2.0.0-alpha7 – Arbitrary File Upload

### Exploit Title: UniSharp Laravel File Manager - Arbitrary File Upload

exacqVision ESM 5.12.2 – Privilege Escalation

# Exploit Title: exacqVision ESM 5.12.2 - Privilege Escalation

Core FTP/SFTP Server 1.2 Build 589.42 – ‘User domain’ Denial of Service (PoC)

#Exploit Title: Core FTP/SFTP Server 1.2 - Build 589.42 - Denial of Service (PoC)

DomainMOD 4.11.01 – ‘ssl-provider-name’ Cross-Site Scripting

# Exploit Title: DomainMOD 4.11.01 - Cross-Site Scripting

DomainMOD 4.11.01 – ‘ssl-accounts.php username’ Cross-Site Scripting

# Exploit Title: DomainMOD 4.11.01 - Cross-Site Scripting

DomainMOD 4.11.01 – ‘category.php CatagoryName, StakeHolder’ Cross-Site Scripting

# Exploit Title: DomainMOD 4.11.01 - Cross-Site Scripting

DomainMOD 4.11.01 – ‘assets/add/dns.php’ Cross-Site Scripting

# Exploit Title: DomainMOD 4.11.01 - Cross-Site Scripting

DomainMOD 4.11.01 – ‘assets/edit/host.php?whid=5’ Cross-Site Scripting

# Exploit Title: DomainMOD 4.11.01 - Cross-Site Scripting

WordPress Plugin Booking Calendar 8.4.3 – (Authenticated) SQL Injection

# Exploit Title: Wordpress Booking Calendar v8.4.3 - Authenticated SQL Injection Vulnerability

MediaMonkey 4.1.23 – ‘.mp3’ URL Denial of Service (PoC)

# -*- coding: utf-8 -*-

LayerBB 1.1.2 – Cross-Site Request Forgery (Add Admin)

# Exploit Title: LayerBB 1.1.2 - Cross-Site Request Forgery