Exploits

bludit Pages Editor 3.0.0 – Arbitrary File Upload

# Exploit Title: bludit Pages Editor 3.0.0 - Arbitrary File Upload

WordPress Plugin Baggage Freight Shipping Australia 0.1.0 – Arbitrary File Upload

# Exploit Title: WordPress Plugin Baggage Freight Shipping Australia 0.1.0 - Arbitrary File Upload

NetShareWatcher 1.5.8 – Denial of Service (PoC)

# Exploit Title: NetShareWatcher 1.5.8 - Denial of Service (PoC)

ShareAlarmPro 2.1.4 – Denial of Service (PoC)

# Exploit Title:ShareAlarmPro 2.1.4 - Denial of Service (PoC)

WSTMart 2.0.8 – Cross-Site Scripting

# Exploit Title: WSTMart 2.0.8 - Cross-Site Scripting

WSTMart 2.0.8 – Cross-Site Request Forgery (Add Admin)

# Exploit Title: WSTMart 2.0.8 - Cross-Site Request Forgery (Add Admin)

FrontAccounting 2.4.5 – ‘SubmitUser’ SQL Injection

# Exploit Title: FrontAccounting 2.4.5 - 'SubmitUser' SQL Injection

Angry IP Scanner for Linux 3.5.3 – Denial of Service (PoC)

# Exploit Title: Angry IP Scanner for Linux 3.5.3 - Denial of Service (PoC)

Adobe Flash ActiveX Plugin 28.0.0.137 – Remote Code Execution (PoC)

Download: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/46051.zip

AnyBurn 4.3 – Local Buffer Overflow (SEH)

#!/usr/bin/env python

Microsoft Edge 42.17134.1.0 – ‘Tree::ANode::DocumentLayout’ Denial of Service

# Exploit Title: Microsoft Edge edgehtml.dll!Tree::ANode::DocumentLayout. Denial of Service (PoC)

ZeusCart 4.0 – Cross-Site Request Forgery (Deactivate Customer Accounts)

# Exploit Title: ZeusCart 4.0 Deactivate Customer Accounts CSRF

Microsoft Windows – ‘MsiAdvertiseProduct’ Arbitrary File Read

The bug is in “MsiAdvertiseProduct”

SQLScan 1.0 – Denial of Service (PoC)

# Exploit Title: McAfee Foundstone SQLScan - Denial of Service (PoC) and EIP record overwrite

Netatalk 3.1.12 – Authentication Bypass

##

Netatalk 3.1.12 – Authentication Bypass (PoC)

import socket

LanSpy 2.0.1.159 – Buffer Overflow (SEH) (Egghunter)

# Exploit Title: LanSpy 2.0.1.159 - Local Buffer Overflow (SEH) (Egghunter)

XMPlay 3.8.3 – ‘.m3u’ Local Stack Overflow Code Execution

#!/usr/bin/env python

Base64 Decoder 1.1.2 – Local Buffer Overflow (SEH)

#!/usr/bin/env python

VBScript – VbsErase Reference Leak Use-After-Free

There is an reference leak in Microsoft VBScript that can be turned into an use-after-free given sufficient time. The...

VBScript – MSXML Execution Policy Bypass

According to https://blogs.windows.com/msedgedev/2017/07/07/update-disabling-vbscript-internet-explorer-11/, Starting...

Erlang – Port Mapper Daemon Cookie Remote Code Execution (Metasploit)

##

Microsoft Windows – ‘MsiAdvertiseProduct’ Arbitrary File Copy/Read

The bug is in “MsiAdvertiseProduct”

Linux Kernel 4.4 – ‘rtnetlink’ Stack Memory Disclosure

#include

PassFab RAR 9.3.2 – Buffer Overflow (SEH)

# Exploit Title: PassFab RAR Password Recovery SEH Local Exploit

LanSpy 2.0.1.159 – Local Buffer Overflow

#!/usr/bin/python

Hotel Booking Script 3.4 – Cross-Site Request Forgery (Change Admin Password)

# Exploit Title: Admin Account take over Via CSRF

Rukovoditel Project Management CRM 2.3.1 – Remote Code Execution (Metasploit)

##

Integria IMS 5.0.83 – ‘search_string’ Cross-Site Scripting

# Exploit Title: Integria IMS 5.0.83 - Cross-Site Scripting

Integria IMS 5.0.83 – Cross-Site Request Forgery

# Exploit Title: Integria IMS 5.0.83 - Cross-Site Request Forgery

Bolt CMS < 3.6.2 - Cross-Site Scripting

# Exploit Title: Bolt CMS [ https://github.com/rdincel1/Bolt-CMS-3.6.2---Cross-Site-Scripting/raw/master/bolt-v3.6.2...

Yeswiki Cercopitheque – ‘id’ SQL Injection

# Exploit Title: SQL Injection in Yeswiki (Cercopitheque)

PDF Explorer 1.5.66.2 – Buffer Overflow (SEH)

# Exploit Title: PDF Explorer SEH Local Exploit

IBM Operational Decision Manager 8.x – XML External Entity Injection

# Exploit Title: [XML External Entity Injection (XXE)]

MiniShare 1.4.1 – ‘HEAD/POST’ Remote Buffer Overflow

Not only the GET method is vulnerable to BOF (CVE-2004-2271). HEAD and POST

SDL Web Content Manager 8.5.0 – XML External Entity Injection

######################

Microsoft Windows – ‘jscript!JsArrayFunctionHeapSort’ Out-of-Bounds Write

AnyBurn 4.3 – Local Buffer Overflow (PoC)

# Exploit Title: AnyBurn

Exel Password Recovery 8.2.0.0 – Local Buffer Overflow Denial of Service

# Exploit Title: Excel Password Recovery Professional

MegaPing – Local Buffer Overflow Denial of Service

# Exploit Title: MegaPing

Nsauditor 3.0.28.0 – Local SEH Buffer Overflow

# Exploit Title: Nsauditor Local SEH Buffer Overflow

phpMyAdmin 4.8.4 – ‘AllowArbitraryServer’ Arbitrary File Read

#!/usr/bin/env python

Google Chrome 70 – SQLite Magellan Crash (PoC)

Cisco RV110W – Password Disclosure / Command Execution

#!/usr/bin/env python2

Responsive FileManager 9.13.4 – Multiple Vulnerabilities

Responsive FileManager 9.13.4 - Multiple Vulnerabilities

Zortam MP3 Media Studio 24.15 – Local Buffer Overflow (SEH)

#Exploit Title: Zortam MP3 Media Studio Version 24.15 Exploit (SEH)

Fortify Software Security Center (SSC) 17.10/17.20/18.10 – Information Disclosure

Details

Fortify Software Security Center (SSC) 17.10/17.20/18.10 – Information Disclosure (2)

Details

Huawei Router HG532e – Command Execution

#!/bin/python

Facebook And Google Reviews System For Businesses – Cross-Site Request Forgery (Change Admin Password)

# Exploit Title: Facebook And Google Reviews System For Businesses - Cross-Site Request Forgery