Exploits

Nikto 2.1.6 – CSV Injection

# Exploit Title: Nikto 2.1.6 - CSV Injection

Pale Moon Browser < 27.9.3 - Use After Free (PoC)

# Exploit Title: Pale Moon Browser < 27.9.3 - Use After Free (PoC)

Joomla! Component Jomres 9.11.2 – Cross-Site Request Forgery (Add User)

# Exploit Title: Joomla!Component jomres 9.11.2 - Cross site request forgery

RabbitMQ Web Management < 3.7.6 - Cross-Site Request Forgery (Add Admin)

# Exploit Title: RabbitMQ Web Management < 3.7.6 - Cross-Site Request Forgery

Audiograbber 1.83 – Local Buffer Overflow (SEH)

# Exploit Title: Audiograbber 1.83 - Local Buffer Overflow (SEH)

Redis-cli < 5.0 - Buffer Overflow (PoC)

# Exploit Title: Redis-cli < 5.0 - Buffer Overflow (PoC)

Redatam Web Server < 7 - Directory Traversal

# Exploit Title: Redatam Web Server < 7 - Directory Traversal

Microsoft COM for Windows – Privilege Escalation

Writeup: https://codewhitesec.blogspot.com/2018/06/cve-2018-0624.html

OEcms 3.1 – Cross-Site Scripting

# Title: OEcms 3.1 - Cross-Site Scripting

Soroush IM Desktop App 0.15 (beta) – Authentication Bypass

# Exploit Title: Soroush IM Desktop app 0.15 - Authentication Bypass

Dimofinf CMS 3.0.0 – Cross-Site Scripting

# Title: Dimofinf CMS 3.0.0 - Cross-Site Scripting

Joomla! Component Ek Rishta 2.10 – SQL Injection

# Title: SQL Injection Joomla Component Ek rishta 2.10 - SQL Injection

rtorrent 0.9.6 – Denial of Service

# Exploit Title: rtorrent 0.9.6 - Denial of Service

MACCMS 10 – Cross-Site Request Forgery (Add User)

# Exploit Title: MACCMS_V10 CSRF vulnerability add admin account

Microsoft Windows 10 – Child Process Restriction Mitigation Bypass

Windows: Child Process Restriction Mitigation Bypass

glibc – ‘realpath()’ Privilege Escalation (Metasploit)

##

DHCP Client – Command Injection ‘DynoRoot’ (Metasploit)

##

Redaxo CMS Mediapool Addon < 5.5.1 - Arbitrary File Upload

# Exploit Title: Redaxo CMS Mediapool Addon < 5.5.1 - Arbitrary File Upload

RSLinx Classic and FactoryTalk Linx Gateway – Privilege Escalation

# Title: RSLinx Classic and FactoryTalk Linx Gateway - Privilege Escalation

Joomla! Component EkRishta 2.10 – ‘username’ SQL Injection

# Exploit Title: Joomla! Component EkRishta 2.10 - 'username' SQL Injection

OX App Suite 7.8.4 – Multiple Vulnerabilities

Product: OX App Suite

Canon PrintMe EFI – Cross-Site Scripting

# Title: Canon PrintMe EFI - Cross-Site Scripting

WordPress Plugin Google Map < 4.0.4 - SQL Injection

# Title: WordPress Google Map Plugin < 4.0.4 - SQL Injection

WordPress Plugin Ultimate Form Builder Lite < 1.3.7 - SQL Injection

# Title: WordPress Ultimate Form Builder Lite Plugin < 1.3.7 - SQL Injection

Schools Alert Management Script – SQL Injection

# Exploit Title: Schools Alert Management Script - SQL Injection

WordPress Plugin Pie Register < 3.0.9 - Blind SQL Injection

# Title: WordPress Plugin Pie Register < 3.0.9 - Blind SQL Injection

Event Manager Admin panel – ‘events_new.php’ SQL injection

# Exploit Title: Event Manager PHP Script Admin panel - 'events_new.php' SQL injection

Joomla! Component EkRishta 2.10 – ‘cid’ SQL Injection

# # # #

Schools Alert Management Script – Arbitrary File Deletion

# Exploit Title: Schools Alert Management Script - Arbitrary File Deletion

userSpice 4.3.24 – ‘X-Forwarded-For’ Cross-Site Scripting

# Exploit Title: userSpice 4.3.24 - 'X-Forwarded-For' Cross-Site Scripting

userSpice 4.3.24 – Username Enumeration

# Exploit Title: userSpice 4.3.24 - Username Enumeration

Schools Alert Management Script – ‘get_sec.php’ SQL Injection

# Exploit Title: Schools Alert Management Script - 'get_sec.php' SQL Injection

Schools Alert Management Script – Arbitrary File Read

# Exploit Title: Schools Alert Management Script - Arbitrary File Read

WebKitGTK+ < 2.21.3 - 'WebKitFaviconDatabase' Denial of Service (Metasploit)

##

Siaberry 1.2.2 – Command Injection

## Siaberry's Command Injection Vulnerability

Gnome Web (Epiphany) < 3.28.2.1 - Denial of Service

# Title: Gnome Web/Epiphany Browser < 3.28.2.1 - DoS App Crash (PoC)

TrendMicro OfficeScan XG 11.0 – Change Prevention Bypass

[+] Credits: John Page (aka hyp3rlinx)

WebKit – WebAssembly Compilation Info Leak

Google Chrome – Integer Overflow when Processing WebAssembly Locals

When v8 decodes the locals of a function, it performs a check:

WebKit – Use-After-Free when Resuming Generator

WebRTC – VP9 Frame Processing Out-of-Bounds Memory Access

There is a missing check in VP9 frame processing that could lead to memory corruption.

WebRTC – VP9 Missing Frame Processing Out-of-Bounds Memory Access

There is a missing check in VP9 frame processing that could lead to memory corruption.

XiongMai uc-httpd 1.0.0 – Buffer Overflow

# Exploit Title: XiongMai uc-httpd 1.0.0 - Buffer Overflow

Splunk < 7.0.1 - Information Disclosure

# Exploit Title: Splunk < 7.0.1 - Information Disclosure

WampServer 3.0.6 – Cross-Site Request Forgery

# Exploit Title: WampServer 3.0.6 - Cross-Site Request Forgery

Ftp Server 1.32 – Credential Disclosure

# Exploit Title: Ftp Server 1.32 - Credential Disclosure

WordPress Plugin Form Maker 1.12.24 – SQL Injection

# Title: WordPress Form Maker Plugin 1.12.24 - SQL Injection

WordPress Plugin Contact Form Maker 1.12.20 – SQL Injection

# Title: WordPress Contact Form Maker Plugin 1.12.20 - SQL Injection

Monstra CMS < 3.0.4 - Cross-Site Scripting (1)

# Title: Monstra CMS < 3.0.4 - Cross-Site Scripting

PHP 7.2.2 – ‘php_stream_url_wrap_http_ex’ Buffer Overflow

Description: