Exploits

Cleanto 5.0 – SQL Injection

# Exploit Title: Cleanto 5.0 - SQL Injection

Lenovo R2105 – Cross-Site Request Forgery (Command Execution)

# Exploit Title: Lenovo R2105 Remote Code Execution through CSRF

HealthNode Hospital Management System 1.0 – SQL Injection

# Exploit Title: HealthNode Hospital Management System 1.0 - SQL Injection

Hucart CMS 5.7.4 – Cross-Site Request Forgery (Add Administrator Account)

ThinkPHP 5.X – Remote Command Execution

# Exploit Title: thinkphp 5.X RCE

Real Estate Custom Script 2.0 – SQL Injection

# Exploit Title: Real Estate Custom Script 2.0 - SQL Injection

Job Portal Platform 1.0 – SQL Injection

# Exploit Title: Job Portal 1.0 - SQL Injection

Umbraco CMS 7.12.4 – (Authenticated) Remote Code Execution

# Exploit Title: Umbraco CMS - Remote Code Execution by authenticated administrators

Bigcart – Ecommerce Multivendor System 1.0 – SQL Injection

# Exploit Title: Bigcart - Ecommerce Multivendor System 1.0 - SQL Injection

Dokany 1.2.0.1000 – Stack-Based Buffer Overflow Privilege Escalation

Exploit Title - Dokany Stack-based Buffer Overflow Privilege Escalation

Microsoft Windows 10 – SSPI Network Authentication Session 0 Privilege Escalation

Windows: SSPI Network Authentication Session 0 EoP

Microsoft Windows 10 – DSSVC DSOpenSharedFile Arbitrary File Open Privilege Escalation

Windows: DSSVC DSOpenSharedFile Arbitrary File Open EoP

Microsoft Windows 10 – DSSVC DSOpenSharedFile Arbitrary File Delete Privilege Escalation

Windows: DSSVC DSOpenSharedFile Arbitrary File Delete EoP

Microsoft Windows 10 – DSSVC CanonicalAndValidateFilePath Security Feature Bypass

Windows: DSSVC CanonicalAndValidateFilePath Security Feature Bypass

Microsoft Windows 10 – DSSVC MoveFileInheritSecurity Privilege Escalation

Windows: DSSVC MoveFileInheritSecurity Multiple Issues EoP

Microsoft Windows 10 – Browser Broker Cross Session Privilege Escalation

Windows: Browser Broker Cross Session EoP

Microsoft Windows 10 – COM Desktop Broker Privilege Escalation

Windows: COM Desktop Broker Elevation of Privilege

Portier Vision 4.4.4.2 / 4.4.4.6 – SQL Injection

-----BEGIN PGP SIGNED MESSAGE-----

AudioCode 400HD – Command Injection

# [CVE-2018-10093] Remote command injection vulnerability in AudioCode IP phones

S-nail < 14.8.16 - Local Privilege Escalation

#!/bin/sh

Serv-U FTP Server < 15.1.7 - Local Privilege Escalation (2)

#!/bin/bash

ASAN/SUID – Local Privilege Escalation

#!/bin/bash

Adapt Inventory Management System 1.0 – SQL Injection

# Exploit Title: Adapt Inventory Management System 1.0 - SQL Injection

Code Blocks 17.12 – Local Buffer Overflow (SEH) (Unicode)

#!/usr/bin/python

Joomla! Component JoomProject 1.1.3.2 – Information Disclosure

# Exploit Title: Joomla! Component JoomProject 1.1.3.2 - Information Disclosure

Joomla! Component JoomCRM 1.1.1 – SQL Injection

# Exploit Title: Joomla! Component JoomCRM 1.1.1 - SQL Injection

Selfie Studio 2.17 – Denial of Service (PoC)

# Exploit Title: Selfie Studio 2.17 - Denial of Service (PoC)

Tree Studio 2.17 – Denial of Service (PoC)

# Exploit Title: Tree Studio 2.17 - Denial of Service (PoC)

Paint Studio 2.17 – Denial of Service (PoC)

# Exploit Title: Paint Studio 2.17 - Denial of Service (PoC)

Pixel Studio 2.17 – Denial of Service (PoC)

# Exploit Title: Pixel Studio 2.17 - Denial of Service (PoC)

Liquid Studio 2.17 – Denial of Service (PoC)

# Exploit Title: Liquid Studio 2.17 - Denial of Service (PoC)

Blob Studio 2.17 – Denial of Service (PoC)

# Exploit Title: Blob Studio 2.17 - Denial of Service (PoC)

Luminance Studio 2.17 – Denial of Service (PoC)

# Exploit Title: Luminance Studio 2.17 - Denial of Service (PoC)

OpenSSH SCP Client – Write Arbitrary Files

'''

RGui 3.5.0 – Local Buffer Overflow (SEH)(DEP Bypass)

#!/usr/bin/python

PEAR Archive_Tar < 1.4.4 - PHP Object Injection

PEAR Archive_Tar < 1.4.4 - PHP Object Injection

eBrigade ERP 4.5 – Arbitrary File Download

#!/usr/bin/python

Matrix MLM Script 1.0 – Information Disclosure

# Exploit Title: Matrix MLM Script 1.0 - Information Leakage

doitX 1.0 – ‘search’ SQL Injection

# Exploit Title: doitX 1.0 - SQL Injection

Shield CMS 2.2 – ’email’ SQL Injection

# Exploit Title: SHIELD - Freelancer Content Management System 2.2 - SQL Injection / CSRF

Architectural 1.0 – ’email’ SQL Injection

# Exploit Title: Architectural Cms 1.0 - SQL Injection

MLMPro 1.0 – SQL Injection

# Exploit Title: Matrix MLM Script 1.0 - SQL Injection

Event Calendar 3.7.4 – ‘id’ SQL Injection

# Exploit Title: Event Calendar 3.7.4 - SQL Injection

Event Locations 1.0.1 – ‘id’ SQL Injection

# Exploit Title: Event Locations 1.0.1 - SQL Injection

eBrigade ERP 4.5 – SQL Injection

# Exploit Title: eBrigade ERP 4.5 - SQL Injection

OpenSource ERP 6.3.1. – SQL Injection

#Exploit Title: OpenSource ERP SQL Injection

Google Chrome V8 JavaScript Engine 71.0.3578.98 – Out-of-Memory. Denial of Service (PoC)

Heatmiser Wifi Thermostat 1.7 – Cross-Site Request Forgery (Update Admin)

# Exploit Title: Heatmiser Wifi Thermostat 1.7 - Cross-Site Request Forgery

Microsoft Office SharePoint Server 2016 – Denial of Service (Metasploit)

##

ZTE MF65 BD_HDV6MF65V1.0.0B05 – Cross-Site Scripting

# Exploit Title: Reflected Cross-Site Scripting on ZTE MF65