Exploits

Angry IP Scanner 3.5.3 – Denial of Service (PoC)

#!/usr/bin/python

Facebook And Google Reviews System For Businesses 1.1 – SQL Injection

# Exploit Title: Facebook And Google Reviews System For Businesses 1.1 - SQL Injection

Facebook And Google Reviews System For Businesses 1.1 – Remote Code Execution

# Exploit Title: Facebook And Google Reviews System For Businesses 1.1 - Remote Code Execution

UltraISO 9.7.1.3519 – ‘Output FileName’ Denial of Service (PoC)

# Exploit Title: UltraISO 9.7.1.3519 - 'Output FileName' Denial of Service (PoC) and Pointer to next SEH and SE handl...

Double Your Bitcoin Script Automatic – Authentication Bypass

# Exploit Title: Double Your Bitcoin Script Automatic 2018 for $50 - Authentication Bypass

Safari – Proxy Object Type Confusion (Metasploit)

##

Linux – ‘userfaultfd’ Bypasses tmpfs File Permissions

Using the userfaultfd API, it is possible to first register a

WebKit JIT – Int32/Double Arrays can have Proxy Objects in the Prototype Chains

CyberLink LabelPrint 2.5 – Stack Buffer Overflow (Metasploit)

##

phpBB 3.2.3 – Remote Code Execution

// All greets goes to RIPS Tech

XNU – POSIX Shared Memory Mappings have Incorrect Maximum Protection

When the mmap() syscall is invoked on a POSIX shared memory segment

McAfee True Key – McAfee.TrueKey.Service Privilege Escalation

McAfee True Key: Multiple Issues with McAfee.TrueKey.Service Implementation

Tourism Website Blog – Remote Code Execution / SQL Injection

# Exploit Title: Tourism Website Blog - Remote Code Execution / SQL Injection

Alumni Tracer SMS Notification – SQL Injection / Cross-Site Request Forgery

# Exploit Title: Alumni Tracer SMS Notification - SQL Injection / Cross-Site Request Forgery (Add/Update Admin)

PrestaShop 1.6.x/1.7.x – Remote Code Execution

SmartFTP Client 9.0.2623.0 – Denial of Service (PoC)

# -*- coding: utf-8 -*-

DomainMOD 4.11.01 – Cross-Site Scripting

# Exploit Title: DomainMOD 4.11.01 - Cross-Site Scripting

LanSpy 2.0.1.159 – Local Buffer Overflow (PoC)

# Exploit Title: LanSpy 2.0.1.159 - Local BoF (PoC)

PrinterOn Enterprise 4.1.4 – Arbitrary File Deletion

# Exploit Author: bzyo

TP-Link wireless router Archer C1200 – Cross-Site Scripting

[+] Unauthenticated

Huawei B315s-22 – Information Leak

#Product Family: LTE

ZTE ZXHN H168N – Improper Access Restrictions

[*] POC: (CVE-2018-7357 and CVE-2018-7358)

Apache OFBiz 16.11.05 – Cross-Site Scripting

# Exploit Title: Apache OFBiz v16.11.05 - Stored Cross-Site Scripting Vulnerability

HotelDruid 2.3.0 – ‘id_utente_mod’ SQL Injection

# Exploit Title: SQL Injection in HotelDruid version 2.3

WordPress Plugin AutoSuggest 0.24 – ‘wpas_keys’ SQL Injection

# Exploit Title: WP AutoSuggest 0.24 - SQL Injection

ThinkPHP 5.0.23/5.1.31 – Remote Code Execution

# Exploit Title: ThinkPHP 5.x < v5.0.23,v5.1.31 Remote Code Execution

Adobe ColdFusion 2018 – Arbitrary File Upload

# Exploit Title: Unrestricted file upload in Adobe ColdFusion 2018

GNU inetutils < 1.9.4 - 'telnet.c' Multiple Overflows (PoC)

GNU inetutils

Kubernetes – (Unauthenticated) Arbitrary Requests

#!/usr/bin/env python3

Kubernetes – (Authenticated) Arbitrary Requests

#!/usr/bin/env python3

Textpad 8.1.2 – Denial Of Service (PoC)

# Exploit Title: Textpad 8.1.2 - Denial Of Service (PoC)

i-doit CMDB 1.11.2 – Remote Code Execution

# Exploit Title: i-doit CMDB 1.11.2 - Remote Code Execution

Adiscon LogAnalyzer < 4.1.7 - Cross-Site Scripting

# Exploit Title: Adiscon LogAnalyzer 4.1.7 - Cross-Site Scripting

DomainMOD 4.11.01 – ‘DisplayName’ Cross-Site Scripting

# Exploit Title: DomainMOD 4.11.01 - Cross-Site Scripting

HasanMWB 1.0 – SQL Injection

# Exploit Title: HasanMWB 1.0 - SQL Injection

Microsoft Lync for Mac 2011 – Injection Forced Browsing/Download

# Exploit Title: Microsoft Lync for Mac 2011 Injection Forced Browsing/Download

Rockwell Automation Allen-Bradley PowerMonitor 1000 – Incorrect Access Control Authentication Bypass

# Exploit Title: Rockwell Automation Allen-Bradley PowerMonitor 1000 - Incorrect Access Control

Xorg X11 Server (AIX) – Local Privilege Escalation

# Exploit Title: AIX Xorg X11 Server - Local Privilege Escalation

OpenSSH < 7.7 - User Enumeration (2)

#!/usr/bin/env python2

DomainMOD 4.11.01 – Owner name Field Cross-Site Scripting

# Exploit Title: DomainMOD 4.11.01 - Cross-Site Scripting

NEC Univerge Sv9100 WebPro – 6.00 – Predictable Session ID / Clear Text Password Storage

'''

KeyBase Botnet 1.5 – SQL Injection

################################

Dolibarr ERP/CRM 8.0.3 – Cross-Site Scripting

# Exploit Title: Dolibarr ERP/CRM

DomainMOD 4.11.01 – Custom Domain Fields Cross-Site Scripting

# Exploit Title: DomainMOD 4.11.01 - Cross-Site Scripting

DomainMOD 4.11.01 – Custom SSL Fields Cross-Site Scripting

# Exploit Title: DomainMOD 4.11.01 - Cross-Site Scripting

NUUO NVRMini2 3.9.1 – (Authenticated) Command Injection

# Exploit Title: NUUO NVRMini2 Authenticated Command Injection

DomainMOD 4.11.01 – Registrar Cross-Site Scripting

# Exploit Title: DomainMOD 4.11.01 - Cross-Site Scripting

Wireshark – ‘cdma2k_message_ACTIVE_SET_RECORD_FIELDS’ Stack Corruption

The following crash due to a stack-based out-of-bounds memory access can be observed in an ASAN build of Wireshark (c...

Wireshark – ‘find_signature’ Heap Out-of-Bounds Read

The following crash due to a heap-based out-of-bounds read can be observed in an ASAN build of Wireshark (current git...

HP Intelligent Management – Java Deserialization Remote Code Execution (Metasploit)

##