Exploits

Auto Dealership & Vehicle Showroom WebSys 1.0 – Multiple Vulnerabilities

# Exploit Title: Auto Dealership & Vehicle Showroom WebSys 1.0 - Persistent Cross-Site Scripting / Cross-Site Reques...

R 3.4.4 – Local Buffer Overflow (DEP Bypass)

# Exploit Title: R v3.4.4 - Local Buffer Overflow (DEP Bypass)

Merge PACS 7.0 – Cross-Site Request Forgery

# Exploit Title: Merge PACS 7.0 - Cross-Site Request Forgery

Model Agency Media House & Model Gallery 1.0 – Multiple Vulnerabilities

# Exploit Title: Model Agency Media House & Model Gallery 1.0 - Persistent Cross-Site Scripting / Cross-Site Request ...

Wchat PHP AJAX Chat Script 1.5 – Cross-Site Scripting

# Exploit Title: Wchat - Fully Responsive PHP AJAX Chat Script 1.5 - Persistent cross site scripting

Microsoft Internet Explorer 11 (Windows 7 x86/x64) – vbscript Code Execution

D-Link DSL-3782 – Authentication Bypass

# Exploit Title: D-Link DSL 3782 - Authentication Bypass

Easy MPEG to DVD Burner 1.7.11 – Local Buffer Overflow (SEH) (DEP Bypass)

#!/usr/bin/python

Joomla! Component EkRishta 2.10 – Cross-Site Scripting / SQL Injection

# Exploit Title: Joomla! extension EkRishta 2.10 - Persistent Cross-Site Scripting / SQL Injection

Healwire Online Pharmacy 3.0 – Cross-Site Scripting / Cross-Site Request Forgery

# Exploit Title: Healwire Online Pharmacy 3.0 - Persistent Cross-Site Scripting / Cross-Site Request Forgery

Monstra CMS < 3.0.4 - Cross-Site Scripting (2)

# Exploit Title: Monstra CMS 3.0.4 - Cross-Site Scripting

SAP NetWeaver Web Dynpro 6.4 < 7.5 - Information Disclosure

# Application: SAP NetWeaver Web Dynpro 6.4 to 7.5 - Information disclosure

HPE iMC 7.3 – Remote Code Execution (Metasploit)

# Exploit Title: HPE iMC EL Injection Unauthenticated RCE

Prime95 29.4b8 – Stack Buffer Overflow (SEH)

# Exploit Title: Prime95 Local Buffer Overflow (SEH)

Cisco SA520W Security Appliance – Path Traversal

# Title: Cisco SA520W Security Appliance - Path Traversal

Infinity Market Classified Ads Script 1.6.2 – Cross-Site Request Forgery

# Exploit Title: Infinity Market Classified Ads Script 1.6.2 - Cross-Site Request Forgery

DynoRoot DHCP Client – Command Injection

# Exploit Title: DynoRoot DHCP - Client Command Injection

Microsoft Edge Chakra JIT – Bound Check Elimination Bug

Chakra uses the InvariantBlockBackwardIterator class to backpropagate the information about the hoisted bound checks....

Linux 4.8.0 < 4.8.0-46 - AF_PACKET packet_set_ring Privilege Escalation (Metasploit)

##

SAP B2B / B2C CRM 2.x < 4.x - Local File Inclusion

# Title: SAP B2B / B2C CRM 2.x < 4.x - Local File Inclusion

NodAPS 4.0 – SQL injection / Cross-Site Request Forgery

# Exploit Title: Online Booking system - NodAPS 4.0 - 'search' SQL injection / Cross-Site Request Forgery

Intelbras NCLOUD 300 1.0 – Authentication bypass

# coding: utf-8

Nanopool Claymore Dual Miner 7.3 – Remote Code Execution

# Exploit Title: Nanopool Claymore Dual Miner >= 7.3 Remote Code Execution

SuperCom Online Shopping Ecommerce Cart 1 – Persistent Cross-Site scripting / Cross site request forgery / Authentication bypass

# Exploit Title: SuperCom Online Shopping Ecommerce Cart 1 - Persistent Cross-Site scripting / Cross site request for...

Powerlogic/Schneider Electric IONXXXX Series – Cross-Site Request Forgery

# Exploit Title: Powerlogic Schneider Electric IONXXXX Series - Cross-Site Request Forgery

Linux < 4.16.9 / < 4.14.41 - 4-byte Infoleak via Uninitialized Struct Field in compat adjtimex Syscall

Commit 3a4d44b61625 ("ntp: Move adjtimex related compat syscalls to native

Jenkins CLI – HTTP Java Deserialization (Metasploit)

##

Apache Struts 2 – Struts 1 Plugin Showcase OGNL Code Execution (Metasploit)

##

MyBB Admin Notes Plugin 1.1 – Cross-Site Request Forgery

# Exploit Title: MyBB Admin Notes Plugin - CSRF

VirtueMart 3.1.14 – Persistent Cross-Site Scripting

# Exploit Title: VirtueMart 3.1.14 - Persistent Cross-Site Scripting

Rockwell Scada System 27.011 – Cross-Site Scripting

# Exploit Title: Rockwell Scada System - Cross-Site Scripting

Multiplayer BlackJack Online Casino Game 2.5 – Cross-Site Scripting

# Exploit Title: Multiplayer BlackJack - Online Casino Game 2.5 - Persistent Cross-Site scripting

Horse Market Sell & Rent Portal Script 1.5.7 – Cross-Site Request Forgery

# Exploit Title: Horse Market Sell & Rent Portal Script 1.5.7 - Cross-Site Request Forgery

WhatsApp 2.18.31 – Memory Corruption

#!/usr/bin/env python

Microsoft Windows – Token Process Trust SID Access Check Bypass Privilege Escalation

Windows: Token Trust SID Access Check Bypass EOP

totemomail Encryption Gateway 6.0.0 Build 371 – Cross-Site Request Forgery

WordPress Plugin Metronet Tag Manager 1.2.7 – Cross-Site Request Forgery

Press submit on a page containing the following HTML snippet:

Libuser – ‘roothelper’ Local Privilege Escalation (Metasploit)

##

RSA Authentication Manager 8.2.1.4.0-build1394922 / < 8.3 P1 - XML External Entity Injection / Cross-Site Flashing / DOM Cross-Site Scripting

SEC Consult Vulnerability Lab Security Advisory < 20180516-0 >

Inteno IOPSYS 2.0 < 4.2.0 - 'p910nd' Remote Command Execution

'''

2345 Security Guard 3.7 – ‘2345NsProtect.sys’ Denial of Service

# Exploit Title: [BSOD by IOCTL 0x8000200D in 2345NsProtect.sys of 2345 Security Guard 3.7]

XATABoost 1.0.0 – SQL Injection

# Exploit Title: XATABoost CMS Sql Injection

Microsoft Windows 2003 SP2 – ‘RRAS’ SMB Remote Code Execution

#!/usr/bin/env python

WUZHI CMS 4.1.0 – ‘form[qq_10]’ Cross-Site Scripting

# Exploit Title: WUZHI CMS 4.1.0 XSS Vulnerability

WUZHI CMS 4.1.0 – ‘tag[pinyin]’ Cross-Site Scripting

# Exploit Title: WUZHI CMS 4.1.0 XSS Vulnerability

Open-AudIT Professional – 2.1.1 – Cross-Site Scripting

# Exploit Title: Open-AudIT Professional 2.1.1 – Multiple Cross-Site Scripting

Open-AudIT Community 2.2.0 – Cross-Site Scripting

# Exploit Title: Open-AudIT Community - 2.2.0 – Cross-Site Scripting

EMC RecoverPoint 4.3 – ‘Admin CLI’ Command Injection

# Exploit Title: EMC RecoverPoint 4.3 - Admin CLI Command Injection

2345 Security Guard 3.7 – ‘2345BdPcSafe.sys’ Denial of Service

# Exploit Title: [BSOD by IOCTL 0x002220e0 in 2345BdPcSafe.sys of 2345 Security Guard 3.7]

Fastweb FASTGate 0.00.47 – Cross-Site Request Forgery

# Exploit Title: Fastweb FASTgate 0.00.47 CSRF