Exploits

AgataSoft Auto PingMaster 1.5 – Buffer Overflow (SEH)

# Exploit Title: AgataSoft Auto PingMaster 1.5 - Buffer Overflow (SEH)

Sitecore.Net 8.1 – Directory Traversal

# Exploit Title: Sitecore.Net 8.1 - Directory Traversal

LAMS < 3.1 - Cross-Site Scripting

# Exploit Title: LAMS < 3.1 - Cross-Site Scripting

onArcade 2.4.2 – Cross-Site Request Forgery (Add Admin)

# Exploit Title: Cross-Site Request Forgery (Add Admin)

CMS ISWEB 3.5.3 – Directory Traversal

# Exploit Title: CMS ISWEB 3.5.3 - Directory Traversal

Wavemaker Studio 6.6 – Server-Side Request Forgery

# Exploit Title: Wavemaker Studio 6.6 - Server-Side Request Forgery (SSRF).

CloudMe Sync 1.10.9 – Buffer Overflow (SEH)(DEP Bypass)

# Exploit Title: CloudMe Sync 1.10.9 - Buffer Overflow (SEH)(DEP Bypass)

Open-AudIT Community 2.2.6 – Cross-Site Scripting

# Exploit Title: Open-AudIT Community 2.2.6 - Cross-Site Scripting

Fortinet FortiClient 5.2.3 (Windows 10 x64 Creators) – Local Privilege Escalation

#include "stdafx.h"

Wedding Slideshow Studio 1.36 – Buffer Overflow

###########################################################################################

PHP Template Store Script 3.0.6 – Cross-Site Scripting

# Exploit Title: PHP Template Store Script- 3.0.6 - Stored XSS via Addres ,Bank Name,and A/c Holder Name

Vuze Bittorrent Client 5.7.6.0 – SSDP Processing XML External Entity Injection

Issue: Out-of-Band XXE in Vuze Bittorrent Client's SSDP Processing

Plex Media Server 1.13.2.5154 – SSDP Processing XML External Entity Injection

Issue: Out-of-Band XXE in Plex Media Server's SSDP Processing

Linux Kernel – UDP Fragmentation Offset ‘UFO’ Privilege Escalation (Metasploit)

##

cgit < 1.2.1 - 'cgit_clone_objects()' Directory Traversal

There is a directory traversal vulnerability in cgit_clone_objects(), reachable when the configuration flag enable-ht...

Sun Solaris 11.3 AVS Kernel – Local Privilege Escalation

# Exploit Title: Solaris/OpenSolaris AVS kernel code execution

WityCMS 0.6.2 – Cross-Site Request Forgery (Password Change)

TI Online Examination System v2 – Arbitrary File Download

# Exploit Title: TI Online Examination System v2 - Arbitrary File Download

PageResponse FB Inboxer Add-on 1.2 – ‘search_field’ SQL Injection

# Exploit Title: FB Inboxer 1.2 - 'search_field' SQL Injection

Imperva SecureSphere 11.5 / 12.0 / 13.0 – Privilege Escalation

# Title: Imperva SecureSphere >sys.stderr, 'Connecting to %s' % server_address

CoSoSys Endpoint Protector 4.5.0.1 – (Authenticated) Remote Root Command Injection

# Title : CoSoSys Endpoint Protector - Authenticated Remote Root Command Injection

SecureSphere 12.0.0.50 – SealMode Shell Escape (Metasploit)

##

Universal Media Server 7.1.0 – SSDP Processing XML External Entity Injection

Issue: Out-of-Band XXE in Universal Media Server's SSDP Processing

ASUS DSL-N12E_C1 1.1.2.3_345 – Remote Command Execution

# Exploit Title: ASUS DSL-N12E_C1 1.1.2.3_345 - Remote Command Execution

Seq 4.2.476 – Authentication Bypass

# Exploit Title: Seq 4.2.476 - Authentication Bypass

AgataSoft Auto PingMaster 1.5 – ‘Host name’ Denial of Service (PoC)

# Exploit Title: AgataSoft Auto PingMaster 1.5 - 'Host name' Denial of Service (PoC)

Allok Fast AVI MPEG Splitter 1.2 – Buffer Overflow (PoC)

# Exploit Title: Allok Fast AVI MPEG Splitter 1.2 SEH Overwrite POC

WebRTC – VP8 Block Decoding Use-After-Free

There is a use-after-free in VP8 block decoding in WebRTC. The contents of the freed block is then treated a pointer,...

WebRTC – FEC Processing Overflow

There are several calls to memcpy that can overflow the destination buffer in webrtc::UlpfecReceiverImpl::AddReceived...

WebRTC – H264 NAL Packet Processing Type Confusion

Type confusion can occur when processing a H264 packet. In the method PacketBuffer::FindFrames in modules/video_codin...

SonicWall Global Management System – XMLRPC set_time_zone Command Injection (Metasploit)

##

Craft CMS SEOmatic plugin 3.1.4 – Server-Side Template Injection

# Exploit Title: Craft CMS SEOmatic plugin 3.1.4 - Server-Side Template Injection

LG NAS 3718.510.a0 – Remote Command Execution

# LG NAS 3718.510.a0 - Remote Command Execution

ipPulse 1.92 – ‘Licence Key’ Denial of Service (PoC)

# Exploit Title: ipPulse 1.92 - 'License Key' Denial of Service (PoC)

Switch Port Mapping Tool 2.81 – ‘SNMP Community Name’ Denial of Service (PoC)

# Exploit Title: Switch Port Mapping Tool 2.81 - 'SNMP Community Name' Denial of Service (PoC)

Allok MOV Converter 4.6.1217 – Buffer Overflow (SEH)

# Exploit Title: Allok MOV Converter 4.6.1217 - Buffer Overflow (SEH)

ipPulse 1.92 – ‘IP Address/HostName-Comment’ Denial of Service (PoC)

# Exploit Title: ipPulse 1.92 - 'IP Address/HostName-Comment' Denial of Service (PoC)

Responsive Filemanager 9.13.1 – Server-Side Request Forgery

# Exploit Title: Responsive filemanager 9.13.1 - Server-Side Request Forgery

Microsoft Windows Kernel – ‘win32k!NtUserConsoleControl’ Denial of Service (PoC)

# Exploit Title: Microsoft Windows Kernel - 'win32k!NtUserConsoleControl' Denial of Service (PoC)

H2 Database 1.4.197 – Information Disclosure

# Exploit Title: H2 Database 1.4.197 - Information Disclosure

fusermount – user_allow_other Restriction Bypass and SELinux Label Control

It is possible to bypass fusermount's restrictions on the use of the

Charles Proxy 4.2 – Local Privilege Escalation

Charles Proxy is a great mac application for debugging web services and

QNap QVR Client 5.1.1.30070 – ‘Password’ Denial of Service (PoC)

# Exploit Title: QNap QVR Client 5.1.1.30070 - 'Password' Denial of Service (PoC)

Online Trade 1 – Information Disclosure

# Exploit Title: Online Trade 1 - Information Disclosure

NetScanTools Basic Edition 2.5 – ‘Hostname’ Denial of Service (PoC)

# Exploit Title: NetScanTools Basic Edition 2.5 - 'Hostname' Denial of Service (PoC)

SoftNAS Cloud < 4.0.3 - OS Command Injection

Core Security - Corelabs Advisory

Skia – Heap Overflow in SkScan::FillPath due to Precision Error

There is a heap overflow in Skia when drawing paths with antialiasing turned off. This issue can be triggered in both...

WordPress Plugin Responsive Thumbnail Slider – Arbitrary File Upload (Metasploit)

##

Axis Network Camera – .srv to parhand Remote Code Execution (Metasploit)

##

Trivum Multiroom Setup Tool 8.76 – Corss-Site Request Forgery (Admin Bypass)

# Exploit Title: Trivum Multiroom Setup Tool 8.76 - Corss-Site Request Forgery (Admin Bypass)