Exploits

Microsoft Edge Chakra – OP_Memset Type Confusion

Since the patch for CVE-2018-8372, it checks all inputs to native arrays, and if any input equals to the MissingItem ...

ImageMagick – Memory Leak

#!/bin/bash

Warranty Tracking System 11.06.3 – ‘txtCustomerCode’ SQL Injection

# Exploit Title: Warranty Tracking System 11.06.3 - 'txtCustomerCode' SQL Injection

Helpdezk 1.1.1 – Arbitrary File Upload

# Exploit Title: Helpdezk 1.1.1 - Arbitrary File Upload

DomainMOD 4.11.01 – ‘raid’ Cross-Site Scripting

# Exploit Title: DomainMOD 4.11.01 - Cross-Site Scripting

Mumsoft Easy Software 2.0 – Denial of Service (PoC)

# Exploit Title: Mumsoft Easy Software 2.0 - Denial of Service (PoC)

Easy Outlook Express Recovery 2.0 – Denial of Service (PoC)

# Exploit Title: Easy Outlook Express Recovery 2.0 - Denial of Service (PoC)

Linux – Broken uid/gid Mapping for Nested User Namespaces

commit 6397fac4915a ("userns: bump idmap limits to 340") increases the number of

Precurio Intranet Portal 2.0 – Cross-Site Request Forgery (Add Admin)

# Exploit Title: Precurio Intranet Portal 2.0 - Cross-Site Request Forgery (Add Admin)

PHP-Proxy 5.1.0 – Local File Inclusion

# Exploit Title: PHP-Proxy 5.1.0 - Local File Inclusion

BitZoom 1.0 – ‘rollno’ SQL Injection

# Exploit Title: BitZoom 1.0 - 'rollno' SQL Injection

Net-Billetterie 2.9 – ‘login’ SQL Injection

# Exploit Title: Net-Billetterie 2.9 - 'login' SQL Injection

Galaxy Forces MMORPG 0.5.8 – ‘type’ SQL Injection

# Exploit Title: Galaxy Forces MMORPG 0.5.8 - 'type' SQL Injection

EverSync 0.5 – Arbitrary File Download

# Exploit Title: EverSync 0.5 - Arbitrary File Download

Notepad3 1.0.2.350 – Denial of Service (PoC)

# Exploit Title: Notepad3 1.0.2.350 - Denial of Service (PoC)

Meneame English Pligg 5.8 – ‘search’ SQL Injection

# Exploit Title: Meneame English Pligg 5.8 - 'search' SQL Injection

Kordil EDMS 2.2.60rc3 – Arbitrary File Upload

# Exploit Title: Kordil EDMS 2.2.60rc3 - Arbitrary File Upload

Simple E-Document 1.31 – ‘username’ SQL Injection

# Exploit Title: Simple E-Document 1.31 - 'username' SQL Injection

2-Plan Team 1.0.4 – Arbitrary File Upload

# Exploit Title: 2-Plan Team 1.0.4 - Arbitrary File Upload

PHP Mass Mail 1.0 – Arbitrary File Upload

# Exploit Title: PHP Mass Mail 1.0 - Arbitrary File Upload

WordPress Plugin Ninja Forms 3.3.17 – Cross-Site Scripting

# Exploit Title: Wordpress Plugin Ninja Forms 3.3.17 - Cross-Site Scripting

iServiceOnline 1.0 – ‘r’ SQL Injection

# Exploit Title: iServiceOnline 1.0 - 'r' SQL Injection

ntpd 4.2.8p10 – Out-of-Bounds Read (PoC)

# Exploit Title: ntpd 4.2.8p10 - Out-of-Bounds Read (PoC)

Helpdezk 1.1.1 – ‘query’ SQL Injection

# Exploit Title: Helpdezk 1.1.1 - 'query' SQL Injection

Electricks eCommerce 1.0 – Cross-Site Request Forgery (Change Admin Password)

# Exploit Title: Electricks eCommerce 1.0 - Cross-Site Request Forgery (Change Admin Password)

EdTv 2 – ‘id’ SQL Injection

# Exploit Title: EdTv 2 - 'id' SQL Injection

AMPPS 2.7 – Denial of Service (PoC)

# Exploit Title: AMPPS 2.7 - Denial of Service (PoC)

Atlassian Jira – (Authenticated) Upload Code Execution (Metasploit)

##

Dell OpenManage Network Manager 6.2.0.51 SP3 – Multiple Vulnerabilities

'''

Advanced Comment System 1.0 – SQL Injection

# Exploit Title: SQL injection in Advanced comment system v1.0

SwitchVPN for macOS 2.1012.03 – Privilege Escalation

=======================================================================

Rmedia SMS 1.0 – SQL Injection

# Exploit Title: Rmedia SMS 1.0 - SQL Injection

Pedidos 1.0 – SQL Injection

# Exploit Title: Pedidos 1.0 - SQL Injection

Electricks eCommerce 1.0 – Persistent Cross-Site Scripting

# Exploit Title: Electricks eCommerce 1.0 - Cross-Site Scripting

DoceboLMS 1.2 – SQL Injection / Arbitrary File Upload

# Exploit Title: DoceboLMS 1.2 - SQL Injection

Bosch Video Management System 8.0 – Configuration Client Denial of Service (PoC)

# Exploit Title: Bosch Video Management System 8.0-Configuration Client-Denial of Service (Poc)

PHP 5.2.3 imap (Debian Based) – ‘imap_open’ disable_functions Bypass

CentOS Web Panel 0.9.8.740 – Cross-Site Request Forgery / Cross-Site Scripting

# Title: CentOS Web Panel Root Account Takeover + Remote Command Execution

CuteFTP Mac 3.1 – Denial of Service (PoC)

# Exploit Title: CuteFTP Mac 3.1 Denial of Service (PoC)

Evince 3.24.0 – Command Injection

# Exploit Title: evince command line injection

Surreal ToDo 0.6.1.2 – SQL Injection

# Exploit Title: Surreal ToDo 0.6.1.2 - SQL Injection

Surreal ToDo 0.6.1.2 – Local File Inclusion

# Exploit Title: Surreal ToDo 0.6.1.2 - Local File Inclusion

Alienor Web Libre 2.0 – SQL Injection

# Exploit Title: Alienor Web Libre 2.0 - SQL Injection

XAMPP Control Panel 3.2.2 – Buffer Overflow (SEH) (Unicode)

# Exploit Title: XAMPP Control Panel 3.2.2 - Buffer Overflow (SEH) (Unicode)

Cisco Immunet < 6.2.0 / Cisco AMP For Endpoints 6.2.0 - Denial of Service

[+] Credits: John Page (aka hyp3rlinx)

Musicco 2.0.0 – Arbitrary Directory Download

# Exploit Title: Musicco 2.0.0 - Arbitrary Directory Download

Data Center Audit 2.6.2 – Cross-Site Request Forgery (Update Admin)

# Exploit Title: Data Center Audit 2.6.2 - Cross-Site Request Forgery (Update Admin)

xorg-x11-server < 1.20.1 - Local Privilege Escalation

# Exploit Title: xorg-x11-server < 1.20.1 - Local Privilege Escalation (RHEL 7)

Tina4 Stack 1.0.3 – SQL Injection / Database File Download

# Exploit Title: Tina4 Stack 1.0.3 - SQL Injection / Database File Download

Tina4 Stack 1.0.3 – Cross-Site Request Forgery (Update Admin)

# Exploit Title: Tina4 Stack 1.0.3 - Cross-Site Request Forgery (Update Admin)