Exploits

IVPN Client 2.6.1 – Local Privilege Escalation

# Exploit IVPN Client for Windows 2.6.6120.33863 Privilege Escalation

Alstrasoft EPay Enterprise 5.17 – SQL Injection

# # # # #

Alstrasoft ProTaxi Enterprise 3.5 – Arbitrary File Upload

# # # # #

Alstrasoft e-Friends 5.12 – SQL Injection

# # # # #

Alstrasoft Video Share Enterprise 4.72 – SQL Injection

# # # # #

Alstrasoft Flippa Clone MarketPlace Script 4.10 – Cross-Site Request Forgery (Add Admin)

# # # # #

Alstrasoft FMyLife Pro 1.02 – Cross-Site Request Forgery (Add Admin)

# # # # #

Alstrasoft Forum Pay Per Post Exchange Script 2.01 – SQL Injection

# # # # #

Alstrasoft Template Seller Pro 3.25e – ‘tempid’ SQL Injection

#!/usr/bin/perl -w

Itech Job Portal Script 9.13 – Multiple Vulnerabilities

# Exploit Title : Itech Job Portal Script - Multiple Vulnerabilities

iScripts AutoHoster 3.0 – ‘siteid’ SQL Injection

# # # # #

iScripts EasyCreate 3.2 – ‘siteid’ SQL Injection

# # # # #

CUPS < 2.0.3 - Remote Command Execution

#!/usr/bin/python

SlimarUSER Management 1.0 – ‘id’ SQL Injection

Exploit Title: SlimarUSER Management v1.0 – 'id' Parameter SQL Injection

Netwave IP Camera – Password Disclosure

#!/usr/bin/python2.7

Itech Multi Vendor Script 6.49 – SQL Injection

# Exploit Title : Itech Multi Vendor Script - Multiple SQL Injections

Zoneminder 1.29/1.30 – Cross-Site Scripting / SQL Injection / Session Fixation / Cross-Site Request Forgery

Source: https://www.foxmole.com/advisories/foxmole-2016-07-05.txt

ntfs-3g (Debian 9) – Local Privilege Escalation

#!/bin/bash

Posnic Stock Management System – SQL Injection

Ghostscript 9.20 – ‘Filename’ Command Execution

[+]#################################################################################################

WordPress Core 4.7.0/4.7.1 – Content Injection

# 2017 - @leonjza

WordPress Core 4.7.0/4.7.1 – Content Injection (Ruby)

# Exploit Title: WP Content Injection

Property Listing Script – ‘propid’ Blind SQL Injection

Exploit Title: Property Listing Script – Time-Based Blind Injection

Itech Inventory Management Software 3.77 – SQL Injection

# # # # #

Itech News Portal Script 6.28 – ‘sc’ SQL Injection

# # # # #

Itech Auction Script 6.49 – ‘pid’ SQL Injection

# # # # #

Itech Movie Portal Script 7.37 – SQL Injection

# # # # #

Itech Travel Portal Script 9.35 – SQL Injection

# # # # #

Google Android – ‘rkp_set_init_page_ro’ RKP Memory Corruption

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=984

LogoStore – ‘query’ SQL Injection

Exploit Title: LogoStore - SQL Injection

Google Android – ‘cfp_ropp_new_key_reenc’ / ‘cfp_ropp_new_key’ RKP Memory Corruption

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=979

Google Android – Unprotected MSRs in EL1 RKP Privilege Escalation

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=980

Apple WebKit – ‘HTMLFormElement::reset()’ Use-After Free

foo

Google Chrome – ‘HTMLKeygenElement::shadowSelect()’ Type Confusion

Apple WebKit – ‘HTMLKeygenElement’ Type Confusion

Apple WebKit – Type Confusion in RenderBox with Accessibility Enabled

foo

Google Android – RKP EL1 Code Loading Bypass

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=981

Google Android – RKP Information Disclosure via s2-remapping Physical Ranges

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=982

QNAP NVR/NAS Devices – Buffer Overflow (PoC)

Device Model: QNAP VioStor NVR, QNAP NAS, Fujitsu Celvin NAS (May be additional re-branded)

Microsoft Windows 10 – SMBv3 Tree Connect (PoC)

# Full Proof of Concept:

Viscosity 1.6.7 – Local Privilege Escalation

# Exploit Title: Viscosity for Windows 1.6.7 Privilege Escalation

Netman 204 – Backdoor Account / Password Reset

# Exploit Title: Netman 204 Backdoor and weak password recovery function

AlienVault OSSIM/USM < 5.3.1 - Remote Code Execution (Metasploit)

##

Billion / TrueOnline / ZyXEL Routers – Multiple Vulnerabilities

>> Multiple vulnerabilities in TrueOnline / ZyXEL / Billion routers

PHP PEAR 1.10.1 – Arbitrary File Download

[+]#############################################################################################

Caregiver Script 2.57 – SQL Injection

Exploit Title: Caregiver Script v2.57 – SQL Injection

Itech Auction Script 6.49 – ‘mcid’ SQL Injection

Exploit Title: Itech Auction Script v6.49 – SQL Injection

Itech B2B Script 4.28 – SQL Injection

Exploit Title: Itech B2B Script v4.28 – SQL Injection

Itech Classifieds Script 7.27 – ‘scat’ SQL Injection

Exploit Title: Itech Classifieds Script v7.27 – SQL Injection

Itech Dating Script 3.26 – SQL Injection

Exploit Title: Itech Dating Script v3.26 – SQL Injection