Exploits

Vishesh Auto Index 3.1 – ‘fid’ SQL Injection

# Exploit Title: Vishesh Auto Index 3.1 - 'fid' SQL Injection

WordPress Plugin Support Board 1.2.3 – Cross-Site Scripting

# Exploit Title: Wordpress Plugin Support Board 1.2.3 - Cross-Site Scripting

Rukovoditel Project Management CRM 2.3 – ‘path’ SQL Injection

# Exploit Title: Rukovoditel Project Management CRM 2.3 - 'path' SQL Injection

MV Video Sharing Software 1.2 – ‘searchname’ SQL Injection

# Exploit Title: MV Video Sharing Software 1.2 - 'searchname' SQL Injection

GIU Gallery Image Upload 0.3.1 – ‘category’ SQL Injection

# Exploit Title: GIU Gallery Image Upload 0.3.1 - 'category' SQL Injection

Heatmiser Wifi Thermostat 1.7 – Credential Disclosure

# Exploit Title: Heatmiser Wifi Thermostat 1.7 - Credential Disclosure

Microsoft Windows – ‘FSCTL_FIND_FILES_BY_SID’ Information Disclosure

Windows: FSCTL_FIND_FILES_BY_SID Information Disclosure

Solaris – RSH Stack Clash Privilege Escalation (Metasploit)

##

VLC Media Player – MKV Use-After-Free (Metasploit)

##

Git Submodule – Arbitrary Code Execution

# CVE-2018-17456

Academic Timetable Final Build 7.0a-7.0b – ‘id’ SQL Injection

# Exploit Title: Academic Timetable Final Build 7.0a-7.0b - 'id' SQL Injection

FLIR AX8 Thermal Camera 1.32.16 – Arbitrary File Disclosure

# Exploit Title: FLIR AX8 Thermal Camera 1.32.16 - Arbitrary File Disclosure

Snes9K 0.0.9z – Buffer Overflow (SEH)

# Exploit Title: Snes9K 0.0.9z - Buffer Overflow (SEH)

FLIR Brickstream 3D+ 2.1.742.1842 – Config File Disclosure

# Exploit Title: FLIR Brickstream 3D+ 2.1.742.1842 - Config File Disclosure

Academic Timetable Final Build 7.0b – Cross-Site Request Forgery (Add Admin)

# Exploit Title: Academic Timetable Final Build 7.0b - Cross-Site Request Forgery (Add Admin)

AlchemyCMS 4.1 – Cross-Site Scripting

# Exploit Title: AlchemyCMS 4.1 - Cross-Site Scripting

FLIR AX8 Thermal Camera 1.32.16 – Remote Code Execution

# Exploit Title: FLIR AX8 Thermal Camera 1.32.16 - Remote Code Execution

College Notes Management System 1.0 – ‘user’ SQL Injection

# Exploit Title: College Notes Management System 1.0 - 'user' SQL Injection

Advanced HRM 1.6 – Remote Code Execution

# Exploit Title: Advanced HRM 1.6 - Remote Code Execution

MaxOn ERP Software 8.x-9.x – ‘nomor’ SQL Injection

# Exploit Title: MaxOn ERP Software 8.x-9.x - 'nomor' SQL Injection

FLIR AX8 Thermal Camera 1.32.16 – RTSP Stream Disclosure

# Exploit Title: FLIR AX8 Thermal Camera 1.32.16 - RTSP Stream Disclosure

FLIR Brickstream 3D+ – RTSP Stream Disclosure

FLIR Systems FLIR Brickstream 3D+ Unauthenticated RTSP Stream Disclosure

Centos Web Panel 0.9.8.480 – Multiple Vulnerabilities

# Exploit Title: Centos Web Panel 0.9.8.480 Multiple Vulnerabilities

NoMachine < 5.3.27 - Remote Code Execution

[+] Credits: John Page (aka hyp3rlinx)

Academic Timetable Final Build 7.0 – Information Disclosure

KORA 2.7.0 – ‘cid’ SQL Injection

# Exploit Title: KORA 2.7.0 - SQL Injection

HaPe PKH 1.1 – ‘id’ SQL Injection

# Exploit Title: HaPe PKH 1.1 - 'id' SQL Injection

LUYA CMS 1.0.12 – Cross-Site Scripting

# Exploit Title: LUYA CMS 1.0.12 - Cross-Site Scripting

Phoenix Contact WebVisit 2985725 – Authentication Bypass

# Exploit Title: Phoenix Contact WebVisit 2985725 - Authentication Bypass

HaPe PKH 1.1 – Cross-Site Request Forgery (Update Admin)

# Exploit Title: HaPe PKH 1.1 - Cross-Site Request Forgery (Update Admin)

CAMALEON CMS 2.4 – Cross-Site Scripting

# Exploit Title: CAMALEON CMS 2.4 - Cross-Site Scripting

HaPe PKH 1.1 – Arbitrary File Upload

# Exploit Title: HaPe PKH 1.1 - Arbitrary File Upload

SugarCRM 6.5.26 – Cross-Site Scripting

# Exploit Title: SugarCRM 6.5.26 - Cross-Site Scripting

D-Link Routers – Command Injection

## Shell command injection

D-Link Routers – Plaintext Password

## Password stored in plaintext

D-Link Routers – Directory Traversal

Directory Traversal

Wikidforum 2.20 – Cross-Site Scripting

# Exploit Title: Wikidforum 2.20 - Cross-Site Scripting

WAGO 750-881 01.09.18 – Cross-Site Scripting

# Exploit Title: WAGO 750-881 01.09.18 - Cross-Site Scripting

E-Registrasi Pencak Silat 18.10 – ‘id_partai’ SQL Injection

# Exploit Title: E-Registrasi Pencak Silat 18.10 - 'id_partai' SQL Injection

Microsoft SQL Server Management Studio 17.9 – XML External Entity Injection

# Exploit Title: Microsoft SQL Server Management Studio 17.9 - XML External Entity Injection

jQuery-File-Upload 9.22.0 – Arbitrary File Upload

# Title: jQuery-File-Upload 9.22.0 - Arbitrary File Upload

Microsoft SQL Server Management Studio 17.9 – ‘.xel’ XML External Entity Injection

# Exploit Title: Microsoft SQL Server Management Studio 17.9 - '.xel' XML External Entity Injection

Phoenix Contact WebVisit 6.40.00 – Password Disclosure

# Exploit Title: Phoenix Contact WebVisit 6.40.00 - Password Disclosure

Microsoft SQL Server Management Studio 17.9 – ‘.xmla’ XML External Entity Injection

# Exploit Title: Microsoft SQL Server Management Studio 17.9 - '.xmla' XML External Entity Injection

FileZilla 3.33 – Buffer Overflow (PoC)

# Exploit Title: FileZilla 3.33 Buffer-Overflow (PoC)

Ektron CMS 9.20 SP2 – Improper Access Restrictions

Details

MicroTik RouterOS < 6.43rc3 - Remote Root

# Exploit Title: RouterOS Remote Rooting

WhatsApp – RTP Processing Heap Corruption

Heap corruption can occur when the WhatsApp mobile application receives a malformed RTP packet.

Wikidforum 2.20 – ‘select_sort’ SQL Injection

# Exploit Title: Wikidforum 2.20 - 'select_sort' SQL Injection

Free MP3 CD Ripper 2.8 – ‘.wma’ Buffer Overflow (SEH) (DEP Bypass)

# Exploit Title: Free MP3 CD Ripper 2.8 - '.wma' Buffer Overflow (SEH) (DEP Bypass)