Exploits

iWay Data Quality Suite Web Console 10.6.1.ga – XML External Entity Injection

# Exploit Title: iWay Data Quality Suite Web Console 10.6.1.ga-2016-11-20 – XML External Entity Injection

ManageEngine Desktop Central 10.0.271 – Cross-Site Scripting

# Exploit Title: ManageEngine Desktop Central 10.0.271 - Cross-Site Scripting

Rausoft ID.prove 2.95 – ‘Username’ SQL injection

# Exploit Title: Rausoft ID.prove 2.95 - 'Username' SQL injection

EE 4GEE Mini EE40_00_02.00_44 – Privilege Escalation

# Title: EE 4GEE Mini EE40_00_02.00_44 - Privilege Escalation

Microsoft Edge – Sandbox Escape

1. Content process -> Privileged content process (first_stage.js)

TransMac 12.2 – Denial of Service (PoC)

# Exploit Title: TransMac 12.2 - Denial of Service (PoC)

CrossFont 7.5 – Denial of Service (PoC)

# Exploit Title: CrossFont 7.5 - Denial of Service (PoC)

Linux Kernel – VMA Use-After-Free via Buggy vmacache_flush_all() Fastpath Local Privilege Escalation

Since commit 615d6e8756c8 ("mm: per-thread vma caching", first in 3.15),

Linux Kernel 2.6.x / 3.10.x / 4.14.x (RedHat / Debian / CentOS) (x64) – ‘Mutagen Astronomy’ Local Privilege Escalation

EDB-Note: Systems with less than 32GB of RAM are unlikely to be affected by this issue, due to memory demands during ...

RICOH MP C2003 Printer – Cross-Site Scripting

# Exploit Title: RICOH MP C2003 Printer - Cross-Site Scripting

Joomla! Component Dutch Auction Factory 2.0.2 – ‘filter_order_Dir’ SQL Injection

# Exploit Title: Joomla! Component Dutch Auction Factory 2.0.2 - 'filter_order_Dir' SQL Injection

Super Cms Blog Pro 1.0 – SQL Injection

# # # # #

Joomla! Component Raffle Factory 3.5.2 – SQL Injection

# # # # #

Joomla! Component Music Collection 3.0.3 – SQL Injection

# # # # #

Joomla! Component Penny Auction Factory 2.0.4 – SQL Injection

# # # # #

Easy PhoroResQ 1.0 – Buffer Overflow

# Exploit Title: Easy PhoroResQ 1.0 - Buffer Overflow (PoC)

Joomla! Component Questions 1.4.3 – SQL Injection

# # # # #

Joomla! Component Jobs Factory 2.0.4 – SQL Injection

# # # # #

Joomla! Component Social Factory 3.8.3 – SQL Injection

# # # # #

RICOH MP C6503 Plus Printer – Cross-Site Scripting

# Exploit Title: RICOH MP C6503 Plus Printer - Cross-Site Scripting

Joomla! Component eXtroForms 2.1.5 – ‘filter_type_id’ SQL Injection

# Exploit Title: Joomla Component eXtroForms 2.1.5 - 'filter_type_id' SQL Injection

Joomla! Component Swap Factory 2.2.1 – SQL Injection

# # # # #

Joomla! Component Collection Factory 4.1.9 – SQL Injection

# # # # #

Joomla! Component Reverse Auction Factory 4.3.8 – SQL Injection

# # # # #

Joomla! Component AlphaIndex Dictionaries 1.0 – SQL Injection

# # # # #

Joomla! Component Article Factory Manager 4.3.9 – SQL Injection

# # # # #

Joomla! Component Timetable Schedule 3.6.8 – SQL Injection

# # # # #

Solaris – ‘EXTREMEPARR’ dtappgather Privilege Escalation (Metasploit)

##

WebKit – ‘WebCore::SVGAnimateElementBase::resetAnimatedType’ Use-After-Free

WebKit – ‘WebCore::AXObjectCache::handleMenuItemSelected’ Use-After-Free

WebKit – ‘WebCore::Node::ensureRareData’ Use-After-Free

a

WebKit – ‘WebCore::InlineTextBox::paint’ Out-of-Bounds Read

oH{I

WebKit – ‘WebCore::RenderMultiColumnSet::updateMinimumColumnHeight’ Use-After-Free

WebKit – ‘WebCore::SVGTRefElement::updateReferencedText’ Use-After-Free

WebKit – ‘WebCore::RenderLayer::updateDescendantDependentFlags’ Use-After-Free

IYnxA?LQYP}

RICOH MP 305+ Printer – Cross-Site Scripting

# Exploit Title: RICOH MP 305+ Printer - Cross-Site Scripting

WebKit – ‘WebCore::SVGTextLayoutAttributes::context’ Use-After-Free

Text

WebKit – ‘WebCore::RenderTreeBuilder::removeAnonymousWrappersForInlineChildrenIfNeeded’ Use-After-Free

TYu

RICOH MP C406Z Printer – Cross-Site Scripting

# Exploit Title: RICOH MP C406Z Printer - Cross-Site Scripting

Joomla! Component Responsive Portfolio 1.6.1 – ‘filter_order_Dir’ SQL Injection

# Exploit Title: Joomla! Component Responsive Portfolio 1.6.1 - 'filter_order_Dir' SQL Injection

Faleemi Desktop Software 1.8.2 – ‘Device alias’ Local Buffer Overflow (SEH)

# Exploit Title: Faleemi Desktop Software 1.8.2 - 'Device alias' Local Buffer Overflow (SEH)

Navigate CMS 2.8 – Cross-Site Scripting

# Title: Navigate CMS 2.8 - Cross-Site Scripting

Joomla! Component CW Article Attachments 1.0.6 – ‘id’ SQL Injection

# Exploit Title: Joomla! CW Article Attachments 1.0.6 - 'id' SQL Injection

LG SuperSign EZ CMS 2.5 – Remote Code Execution

# Exploit Title: LG SuperSign EZ CMS 2.5 - Remote Code Execution

MyBB Visual Editor 1.8.18 – Cross-Site Scripting

# Title: MyBB Visual Editor 1.8.18 - Cross-Site Scripting

udisks2 2.8.0 – Denial of Service (PoC)

# Exploit: udisks2 2.8.0 - Denial of Service (PoC)

Joomla! Component AMGallery 1.2.3 – ‘filter_category_id’ SQL Injection

# Exploit Title: Joomla! Component AMGallery 1.2.3 - 'filter_category_id' SQL Injection

Joomla! Component Micro Deal Factory 2.4.0 – ‘id’ SQL Injection

# Exploit Title: Joomla! Component Micro Deal Factory 2.4.0 - 'id' SQL Injection

Termite 3.4 – Denial of Service (PoC)

# Exploit Title: Termite 3.4 - Denial of Service (PoC)

RICOH Aficio MP 301 Printer – Cross-Site Scripting

# Exploit Title: RICOH Aficio MP 301 Printer - Cross-Site Scripting