Exploits

Symantec Mobile Encryption for iPhone 2.1.0 – ‘Server’ Denial of Service (PoC)

# Exploit Title: Symantec Mobile Encryption for iPhone 2.1.0 - 'Server' Denial of Service (PoC)

FsPro Labs Event Log Explorer v4.6.1.2115 – XML External Entity Injection

# Title: FsPro Labs Event Log Explorer v4.6.1.2115 - XML External Entity Injection

Microsoft Windows Explorer Out-of-Bound Read – Denial of Service (PoC)

# Exploit Title: Microsoft Windows Explorer Out-of-Bound read - Denial of Service (PoC)

Trend Micro Virtual Mobile Infrastructure 5.5.1336 – ‘Server address’ Denial of Service (PoC)

# Exploit Title: Trend Micro Virtual Mobile Infrastructure 5.5.1336 - 'Server address' Denial of Service (PoC)

Admidio 3.3.5 – Cross-Site Request Forgery (Change Permissions)

# Exploit Title: Admidio 3.3.5 - Cross-Site Request Forgery (Change Permissions)

Online Quiz Maker 1.0 – ‘catid’ SQL Injection

# Exploit Title: Online Quiz Maker 1.0 - 'catid' SQL Injection

Wikipedia 12.0 – Denial of Service (PoC)

# Exploit Title: Wikipedia 12.0 - Denial of Service (PoC)

Vox TG790 ADSL Router – Cross-Site Scripting

# Title: Vox TG790 ADSL Router - Cross-Site Scripting

Acunetix WVS Reporter 10.0 – Denial of Service (PoC)

# Exploit Title: Acunetix WVS Reporter 10.0 - Denial of Service (PoC)

Argus Surveillance DVR 4.0.0.0 – Privilege Escalation

# Exploit Title: Argus Surveillance DVR 4.0.0.0 - Privilege Escalation

Network Manager VPNC 1.2.6 – ‘Username’ Local Privilege Escalation (Metasploit)

##

DamiCMS 6.0.0 – Cross-Site Request Forgery (Change Admin Password)

# Exploit Title: DamiCMS 6.0.0 - Cross-Site Request Forgery (Change Admin Password)

NetworkActiv Web Server 4.0 Pre-Alpha-3.7.2 – ‘Username’ Denial of Service (PoC)

#Exploit Title: NetworkActiv Web Server 4.0 Pre-Alpha-3.7.2 - 'Username' Denial of Service (PoC)

Cybrotech CyBroHttpServer 1.0.3 – Directory Traversal

# Exploit Title: Cybrotech CyBroHttpServer 1.0.3 - Directory Traversal

Nord VPN 6.14.31 – Denial of Service (PoC)

# Exploit Title: Nord VPN

WordPress Plugin Jibu Pro 1.7 – Cross-Site Scripting

# Exploit Title: WordPress Plugin Jibu Pro 1.7 - Cross-Site Scripting

DLink DIR-601 – Credential Disclosure

# Exploit Title: DLink DIR-601 - Credential Disclosure

WordPress Plugin Quizlord 2.0 – Cross-Site Scripting

# Exploit Title: WordPress Plugin Quizlord 2.0 - Cross-Site Scripting

Cybrotech CyBroHttpServer 1.0.3 – Cross-Site Scripting

# Exploit Title: Cybrotech CyBroHttpServer 1.0.3 - Cross-Site Scripting

NASA openVSP 3.16.1 – Denial of Service (PoC)

# Exploit Title: NASA openVSP 3.16.1 - Denial of Service (PoC)

Immunity Debugger 1.85 – Denial of Service (PoC)

# Exploit Title: Immunity Debugger 1.85 - Denial of Service (PoC)

Eaton Xpert Meter 13.4.0.10 – SSH Private Key Disclosure

# Exploit Title: Eaton Xpert Meter 13.4.0.10 - SSH Private Key Disclosure

phpMyAdmin 4.7.x – Cross-Site Request Forgery

# Exploit Title: phpMyAdmin 4.7.x - Cross-Site Request Forgery

ipPulse 1.92 – ‘TCP Port’ Denial of Service (PoC)

# Exploit Title: ipPulse 1.92 - 'TCP Port' Denial of Service (PoC)

Episerver 7 patch 4 – XML External Entity Injection

# Exploit Title: Episerver 7 patch 4 - XML External Entity Injection

SIPP 3.3 – Stack-Based Buffer Overflow

# Exploit Author: Juan Sacco - http://exploitpack.com

R 3.4.4 – Buffer Overflow (SEH)

#--------------------------------------------------------#

Fathom 2.4 – Denial Of Service (PoC)

# Exploit Title: Fathom 2.4 - Denial Of Service (PoC)

Skype Empresarial Office 365 16.0.10730.20053 – ‘Dirección de inicio de sesión’ Denial of service (PoC)

# Exploit Title: Skype Empresarial Office 365 16.0.10730.20053 - 'Dirección de inicio de sesión' Denial of service (PoC)

Argus Surveillance DVR 4.0.0.0 – Directory Traversal

# Exploit: Argus Surveillance DVR 4.0.0.0 - Directory Traversal

Cisco AnyConnect Secure Mobility Client 4.6.01099 – ‘Introducir URL’ Denial of Service (PoC)

# Exploit Title: Cisco AnyConnect Secure Mobility Client 4.6.01099 - 'Introducir URL' Denial of Service (PoC)

HD Tune Pro 5.70 – Denial of Service (PoC)

# Exploit Title: HD Tune Pro 5.70 - Denial Of Service (PoC)

Drive Power Manager 1.10 – Denial Of Service (PoC)

# Exploit Title: Drive Power Manager 1.10 - Denial Of Service (PoC)

Easy PhotoResQ 1.0 – Denial Of Service (PoC)

# Exploit Title: Easy PhotoResQ 1.0 - Denial Of Service (PoC)

Trillian 6.1 Build 16 – ‘Sign In’ Denial of service (PoC)

#Exploit Title: Trillian 6.1 Build 16 - "Sign In" Denial of service (PoC)

Cisco Network Assistant 6.3.3 – ‘Cisco Login’ Denial of Service (PoC)

# Exploit Title: Cisco Network Assistant 6.3.3 - 'Cisco Login' Denial of Service (PoC)

Instagram App 41.1788.50991.0 – Denial of Service (PoC)

# Exploit Title: Instagram App 41.1788.50991.0 - Denial of Service (PoC)

Microsoft Windows – JScript RegExp.lastIndex Use-After-Free

Microsoft Windows – Advanced Local Procedure Call (ALPC) Local Privilege Escalation

(Note: PoC will now hijack the print spooler service - spoolsv.exe - as it required less code then hijacking printfil...

VirtualBox 5.2.6.r120293 – VM Escape

Oracle fixed some of the issues I reported in VirtualBox during the Oracle Critical Patch Update - April 2018. CVE-20...

Firefox 55.0.3 – Denial of Service (PoC)

# Exploit Title: Firefox 55.0.3 - Denial of Service (PoC)

Gleez CMS 1.2.0 – Cross-Site Request Forgery (Add Admin)

# Exploit Title: Gleez CMS 1.2.0 - Cross-Site Request Forgery (Add Admin)

CuteFTP 5.0 – Buffer Overflow

# Exploit Title: CuteFTP 5.0 - Buffer Overflow

Trend Micro Enterprise Mobile Security 2.0.0.1700 – ‘Servidor’ Denial of Service (PoC)

# Exploit Title: Trend Micro Enterprise Mobile Security 2.0.0.1700 - 'Servidor' Denial of Service (PoC)

Libpango 1.40.8 – Denial of Service (PoC)

# Exploit Title: Libpango 1.40.8 - Denial of Service (PoC)

RICOH MP C4504ex Printer – Cross-Site Request Forgery (Add Admin)

# Exploit Title: RICOH MP C4504ex Printer - Cross-Site Request Forgery (Add Admin)

Sentrifugo HRMS 3.2 – ‘deptid’ SQL Injection

# Exploit Title: Sentrifugo HRMS 3.2 - 'deptid' SQL Injection

LiteCart 2.1.2 – Arbitrary File Upload

# Exploit Title: LiteCart 2.1.2 - Arbitrary File Upload

Adobe Flash – AVC Processing Out-of-Bounds Read

The attached fuzz file causes an out-of-bounds read in AVC processing. To reproduce the issue, put both attached file...

Foxit PDF Reader 9.0.1.1049 – Pointer Overwrite Use-After-Free (Metasploit)

##