Exploits

Kirby CMS 2.5.12 – Cross-Site Request Forgery (Delete Page)

# Exploit Title:​​ Kirby CMS 2.5.12 - Cross-Site Request Forgery (Delete Page)

Core FTP 2.0 – ‘XRMD’ Denial of Service (PoC)

# Exploit Title: Core FTP 2.0 - 'XRMD' Denial of Service (PoC)

10-Strike Bandwidth Monitor 3.7 – Local Buffer Overflow (SEH)

# Title: 10-Strike Bandwidth Monitor 3.7 - Local Buffer Overflow SEH

10-Strike LANState 8.8 – Local Buffer Overflow (SEH)

# Exploit Title: 10-Strike LANState 8.8 - Local Buffer Overflow (SEH)

GetGo Download Manager 6.2.1.3200 – Denial of Service (PoC)

# Exploit Title: GetGo Download Manager 6.2.1.3200 - Buffer Overflow (Denial of Service)

Nagios Core 4.4.1 – Denial of Service

# Exploit Title: Nagios Core Multiple Local Denial of Service

Micro Focus Secure Messaging Gateway (SMG) < 471 - Remote Code Execution (Metasploit)

##

D-link DAP-1360 – Path Traversal / Cross-Site Scripting

# Exploit Title: D-Link DAP-1360 File path traversal and Cross site

Kirby CMS 2.5.12 – Cross-Site Scripting

# Exploit Title:​​ Kirby CMS 2.5.12 - Cross-Site Scripting

NUUO NVRmini – ‘upgrade_handle.php’ Remote Command Execution

# Exploit Title: NUUO NVR Unauthenticated Remote Code Execution

Splinterware System Scheduler Pro 5.12 – Buffer Overflow (SEH)

#!/usr/bin/python

Splinterware System Scheduler Pro 5.12 – Privilege Escalation

# Exploit Title: Splinterware System Scheduler Pro 5.12 - Privilege Escalation

Synology DiskStation Manager 4.1 – Directory Traversal

# Exploit Title: Synology DiskStation Manager 4.1 - Directory Traversal

Davolink DVW 3200 Router – Password Disclosure

# Exploit Title: Davolink DVW 3200 Router - Password Disclosure

Microsoft Windows Speech Recognition – Buffer Overflow (PoC)

# Title: Windows Speech Recognition- Buffer Overflow

Tenda Wireless N150 Router 5.07.50 – Cross-Site Request Forgery (Reboot Router)

# Exploit Title: Tenda Wireless N150 Router 5.07.50 - Cross-Site Request Forgery (Reboot Router)

Microsoft Windows – ‘dnslint.exe’ Drive-By Download

[+] Credits: John Page (aka hyp3rlinx)

GeoVision GV-SNVR0811 – Directory Traversal

# Exploit Title: GeoVision GV-SNVR0811 Directory Traversal

Inteno’s IOPSYS – (Authenticated) Local Privilege Escalation

#!/usr/bin/python

MSVOD 10 – ‘cid’ SQL Injection

# Exploit Title: MSVOD V10 ¡V SQL Injection

Touchpad / Trivum WebTouch Setup 2.53 build 13163 – Authentication Bypass

# Exploit Title: Touchpad / Trivum WebTouch Setup V9 V2.53 build 13163 - Unauthorized Authentication Reset

TP-Link TL-WR840N – Denial of Service

# Exploit Title:- TP-Link Wireless N Router WR840N - Buffer Overflow

WordPress Plugin All In One Favicon 4.6 – (Authenticated) Cross-Site Scripting

# Exploit Title: WordPress Plugin All In One Favicon

MyBB New Threads Plugin 1.1 – Cross-Site Scripting

# Exploit Title: MyBB New Threads Plugin - Cross-Site Scripting

Linux – BPF Sign Extension Local Privilege Escalation (Metasploit)

##

Google Chrome – Swiftshader Texture Allocation Integer Overflow

There's a remotely triggerable memory corruption issue in SwiftShader that's reachable from WebGL, resulting from an ...

Google Chrome – Swiftshader Blitting Floating-Point Precision Errors

Google Chrome – SwiftShader OpenGL Texture Bindings Reference Count Leak

Smart SMS & Email Manager 3.3 – ‘contact_type_id’ SQL Injection

# Exploit Title: Smart SMS & Email Manager v3.3 - SQL Injection

HomeMatic Zentrale CCU2 – Remote Code Execution

# Exploit Title: HomeMatic Zentrale CCU2 Unauthenticated RCE

Open-AudIT Community 2.1.1 – Cross-Site Scripting

#######################################

FTP2FTP 1.0 – Arbitrary File Download

# Exploit Title: FTP2FTP 1.0 - Arbitrary File Download

Modx Revolution < 2.6.4 - Remote Code Execution

# Exploit Title: Modx Revolution < 2.6.4 - Remote Code Execution

Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway – Cross-Site Request Forgery

Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway CSRF Vulnerabilities

Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway – Denial of Service

Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway Service Control DoS

Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway – Configuration Download

Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway Configuration Download

Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway – File Manipulation

Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway Arbitrary File Attacks

Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway – Remote Root

Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway Remote Root Exploit

Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway – Default Credentials

Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway Default Credentials

Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway – Restricted Shell Escape

Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway Backdoor Jailbreak

QNAP Q’Center – ‘change_passwd’ Command Execution (Metasploit)

##

Nanopool Claymore Dual Miner – APIs Remote Code Execution (Metasploit)

##

Microsoft Enterprise Mode Site List Manager – XML External Entity Injection

[+] Credits: John Page (aka hyp3rlinx)

Fortify Software Security Center (SSC) 17.x/18.1 – XML External Entity Injection

Details

VelotiSmart WiFi B-380 Camera – Directory Traversal

Title: Vulnerability in VelotiSmart Wifi - Directory Traversal

WordPress Plugin Job Manager 4.1.0 – Cross-Site Scripting

# Exploit Title: Wordpress Plugin Job Manager v4.1.0 Stored Cross Site

macOS/iOS – JavaScript Injection Bug in OfficeImporter

QuickLook is a widely used feature in macOS/iOS which allows you to preview various formats such as pdf, docx, pptx, ...

Linux (Ubuntu) – Other Users coredumps Can Be Read via setgid Directory and killpriv Bypass

Note: I am both sending this bug report to security@kernel.org and filing it in

PrestaShop < 1.6.1.19 - 'AES CBC' Privilege Escalation

#!/usr/bin/env python3

PrestaShop < 1.6.1.19 - 'BlowFish ECD' Privilege Escalation

#!/usr/bin/env python3