Exploits

GoldWave 5.70 – Local Buffer Overflow (SEH Unicode)

#!/usr/bin/python

Yahei PHP Prober 0.4.7 – Cross-Site Scripting

# Exploit title: Yahei-PHP Proberv0.4.7 - Cross-Site Scripting

WordPress Plugin Simple Fields 0.2 – 0.3.5 – Local/Remote File Inclusion / Remote Code Execution

# Exploit Title: Simple Fields 0.2 - 0.3.5 LFI/RFI/RCE

PMS 0.42 – Local Stack-Based Overflow (ROP)

# Exploit Author: Juan Sacco - http://exploitpack.com

WebKit – WebAssembly Parsing Does not Correctly Check Section Order

When a WebAssembly binary is parsed in ModuleParser::parse, it is expected to contain certain sections in a certain o...

CyberArk Password Vault < 9.7 / < 10 - Memory Disclosure

Advisory: CyberArk Password Vault Memory Disclosure

CyberArk Password Vault Web Access < 9.9.5 / < 9.10 / 10.1 - Remote Code Execution

Advisory: CyberArk Password Vault Web Access Remote Code Execution

KYOCERA Multi-Set Template Editor 3.4 – Out-Of-Band XML External Entity Injection

#Vendor: KYOCERA Corporation

KYOCERA Net Admin 3.4 – Cross-Site Request Forgery (Add Admin)

#Vendor: KYOCERA Corporation

Buddypress Xprofile Custom Fields Type 2.6.3 – Remote Code Execution

# Exploit Title: Plugin Buddypress Xprofile Custom Fields Type 2.6.3 RCE – Unlink

WooCommerce CSV-Importer-Plugin 3.3.6 – Remote Code Execution

# Exploit Title: Plugin Woocommerce CSV importer 3.3.6 – RCE – Unlink

iScripts SonicBB 1.0 – Reflected Cross-Site Scripting (PoC)

# Exploit Title: iScripts SonicBB 1.0 - Reflected Cross-Site Scripting

WordPress Plugin Google Drive 2.2 – Remote Code Execution

# Exploit Title: Plugin Google Drive for WordPress 2.2 – RCE – Unlik

Sophos Endpoint Protection 10.7 – Tamper-Protection Bypass

[+] Credits: John Page (aka hyp3rlinx)

Sophos Endpoint Protection Control Panel 10.7 – Weak Password Encryption

[+] Credits: John Page (aka hyp3rlinx)

Adobe Flash < 28.0.0.161 - Use-After-Free

#!/usr/bin/env python

FiberHome VDSL2 Modem HG 150-UB – Authentication Bypass

# Exploit Title: FiberHome VDSL2 Modem HG 150-UB Authentication Bypass

DotNetNuke DNNarticle Module 11 – Directory Traversal

##############################

LineageOS 14.1 Blueborne – Remote Code Execution

# Exploit Title: LineageOS 14.1 (Android 7.1.2) Blueborne RCE CVE-2017-0781

Cobub Razor 0.7.2 – Cross-Site Request Forgery

# Exploit Title: Cobub Razor 0.7.2 Cross Site Request Forgery

GNU Beep 1.3 – ‘HoleyBeep’ Local Privilege Escalation

#!/usr/bin/env python3

MyBB Plugin Downloads 2.0.3 – Cross-Site Scripting

# Exploit Title: MyBB Downloads Plugin v2.0.3 - Persistent XSS

Joomla! Component JS Jobs 1.2.0 – Cross-Site Scripting

#######################################

Microsoft Windows Defender – ‘mpengine.dll’ Memory Corruption

Windows Defender inspects a variety of different archive formats, among others RAR.

WebRTC – Private IP Leakage (Metasploit)

##

Microsoft Windows – Multiple Use-After-Free Issues in jscript Array Methods

YzmCMS 3.6 – Cross-Site Scripting

# Exploit Title: YzmCMS 3.6 XSS Vulnerability

Z-Blog 1.5.1.1740 – Cross-Site Scripting

# Exploit Title: Z-Blog 1.5.1.1740 XSS Vulnerability

Z-Blog 1.5.1.1740 – Full Path Disclosure

# Exploit Title: Z-Blog 1.5.1.1740 Web Site physical path leakage Vulnerability

GetSimple CMS 3.3.13 – Cross-Site Scripting

#######################################

WordPress Plugin Activity Log 2.4.0 – Cross-Site Scripting

# Exploit Title : Activity Log Wordpress Plugin Stored Cross Site Scripting (XSS)

ProcessMaker – Plugin Upload (Metasploit)

##

Google Chrome V8 – ‘ElementsAccessorBase::CollectValuesOrEntriesImpl’ Type Confusion

Here's a snippet of the method.

Google Chrome V8 – ‘Genesis::InitializeGlobal’ Out-of-Bounds Read/Write

Bug:

Microsoft Edge Chakra JIT – Stack-to-Heap Copy (Incomplete Fix) (1)

Here's a snippet of JavascriptArray::BoxStackInstance. To fix issue 1420 , "deepCopy" was introduced. But it only de...

Microsoft Edge Chakra JIT – Stack-to-Heap Copy (Incomplete Fix) (2)

Here's a snippet of JavascriptArray::BoxStackInstance.

Frog CMS 0.9.5 – Cross-Site Request Forgery (Add User)

# Exploit Title:​​ Cross Site Request Forgery- Frog CMS

WampServer 3.1.1 – Cross-Site Scripting / Cross-Site Request Forgery

# Exploit Title: WampServer 3.1.1 XSS via CSRF

WampServer 3.1.2 – Cross-Site Request Forgery

# Exploit Title: WampServer 3.1.2 CSRF to add or delete any virtual hostsremotely

VideoFlow Digital Video Protection (DVP) 2.10 – Directory Traversal

VideoFlow Digital Video Protection DVP 10 Authenticated Directory Traversal

VideoFlow Digital Video Protection (DVP) 2.10 – Hard-Coded Credentials

VideoFlow Digital Video Protection DVP 10 Authenticated Root Remote Code Execution

DLink DIR-601 – Admin Password Disclosure

# Exploit Title: DLink DIR-601 Unauthenticated Admin password disclosure

WebLog Expert Enterprise 9.4 – Privilege Escalation

Exploit Author: bzyo

LifeSize ClearSea 3.1.4 – Directory Traversal

'''

OpenCMS 10.5.3 – Cross-Site Request Forgery

# Exploit Title: OpenCMS 10.5.3 Multiple Cross Site Request Forgery Vulnerabilities

OpenCMS 10.5.3 – Cross-Site Scripting

# Exploit Title: OpenCMS 10.5.3 Stored Cross Site Scripting Vulnerability

Secutech RiS-11/RiS-22/RiS-33 – Remote DNS Change

#

Sync Breeze Enterprise 10.4.18 – Denial of-Service (PoC)

#!/usr/bin/python

Open-AuditIT Professional 2.1 – Cross-Site Request Forgery

# Exploit Title: Open-AuditIT Professional 2.1 - Cross-Site Request Forgery (CSRF)

Homematic CCU2 2.29.23 – Arbitrary File Write

#!/usr/bin/ruby