Exploits

GNU Wget < 1.18 - Access List Bypass / Race Condition

'''

Remote Utilities Host 6.3 – Denial of Service

# Exploit Title: Remote Utilities - Host 6.3 - Denial of Service

osTicket 1.9.14 – ‘X-Forwarded-For’ Cross-Site Scripting

# Exploit Title: Osticket 1.9.14 and below (X-Forwarded-For) Stored XSS.

Linux Kernel 2.6.32-642/3.16.0-4 – ‘inode’ Integer Overflow

The inode is a data structure in a Unix-style file system which describes a filesystem

UCanCode – Multiple Vulnerabilities

UCanCode multiple vulnerabilities

Huawei UTPS – Unquoted Service Path Privilege Escalation

# Exploit Title: Unquoted Service Path Vulnerability in Huawei UTPS Software

EasyPHP Devserver 16.1.1 – Cross-Site Request Forgery / Remote Command Execution

[+] Credits: John Page aka hyp3rlinx

Crestron AM-100 – Multiple Vulnerabilities

=================================================================

TP-LINK TDDP – Multiple Vulnerabilities

1. Advisory Information

Microsoft Internet Explorer 8 – MSHTML ‘Ptls5::Ls­Find­Span­Visual­Boundaries’ Memory Corruption

[crayon-6aba767879d33035807355/]

SAP NetWeaver AS JAVA – ‘BC-BMT-BPM-DSK’ XML External Entity Injection

Application: SAP NetWeaver AS JAVA

AppFusions Doxygen for Atlassian Confluence 1.3.2 – Cross-Site Scripting

[RCESEC-2016-009] AppFusions Doxygen for Atlassian Confluence v1.3.2 renderContent() Persistent Cross-Site Scripting

Ubuntu 14.04/15.10 – User Namespace Overlayfs Xattr SetGID Privilege Escalation

Source: http://www.halfdog.net/Security/2016/UserNamespaceOverlayfsXattrSetgidPrivilegeEscalation/

Ubuntu 15.10 – ‘USERNS ‘ Overlayfs Over Fuse Privilege Escalation

Source: http://www.halfdog.net/Security/2016/OverlayfsOverFusePrivilegeEscalation/

Microsoft Edge Scripting Engine – Memory Corruption (MS16-129)

Atlassian Confluence AppFusions Doxygen 1.3.0 – Directory Traversal

RCE Security Advisory

WordPress Plugin Instagram Feed 1.4.6.2 – Cross-Site Request Forgery

Microsoft Edge – ‘CText­Extractor::Get­Block­Text’ Out-of-Bounds Read (MS16-104)

A&#x­D;&#x­D;B

Microsoft Internet Explorer 8 – jscript ‘Reg­Exp­Base::FBad­Header’ Use-After-Free (MS15-018)

Mezzanine 4.2.0 – Cross-Site Scripting

Security Advisory - Curesec Research Team

LEPTON 2.2.2 – SQL Injection

Security Advisory - Curesec Research Team

LEPTON 2.2.2 – Remote Code Execution

Security Advisory - Curesec Research Team

FUDforum 3.0.6 – Cross-Site Scripting / Cross-Site Request Forgery

Security Advisory - Curesec Research Team

FUDforum 3.0.6 – Local File Inclusion

Security Advisory - Curesec Research Team

WordPress Plugin Olimometer 2.56 – SQL Injection

# Exploit Title: Olimometer Plugin for WordPress – Sql Injection

D-Link DIR-Series Routers – HNAP Login Stack Buffer Overflow (Metasploit)

##

NTP 4.2.8p8 – Denial of Service

#!/usr/bin/env python

ScriptCase 8.1.053 – Multiple Vulnerabilities

[+] Credits: hyp3rlinx

Nagios 4.2.2 – Local Privilege Escalation

Affected Product: Nagios 4

EditMe CMS – Cross-Site Request Forgery (Add Admin)

Document Title:

FTPShell Client 5.24 – ‘PWD’ Remote Buffer Overflow

# -*- coding: utf-8 -*-

Moxa SoftCMS 1.5 – Denial of Service (PoC)

'''

Microsoft Edge – ‘FillFromPrototypes’ Type Confusion

Microsoft Edge – ‘Array.filter’ Information Leak

Microsoft Edge – ‘Array.reverse’ Overflow

Microsoft Edge – ‘Array.splice’ Heap Overflow

Palo Alto Networks PanOS – ‘root_trace’ Local Privilege Escalation

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=912

Palo Alto Networks PanOS – ‘root_reboot’ Local Privilege Escalation

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=913

Palo Alto Networks PanOS – appweb3 Stack Buffer Overflow

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=908

WordPress Plugin Answer My Question 1.3 – SQL Injection

# Exploit Title: Answer My Question 1.3 Plugin for WordPress – Sql Injection

WordPress Plugin Sirv 1.3.1 – SQL Injection

# Exploit Title: Sirv 1.3.1 Plugin For WordPress Sql Injection

Microsoft Edge – ‘eval’ Type Confusion

Nginx (Debian Based Distros + Gentoo) – ‘logrotate’ Local Privilege Escalation

#!/bin/bash

CS-Cart 4.3.10 – XML External Entity Injection

# Software : CS-Cart

Easy Internet Sharing Proxy Server 2.2 – Remote Overflow (SEH) (Metasploit)

##

Microsoft Edge 11.0.10240.16384 – ‘edgehtml’ CAttr­Array::Destroy Use-After-Free

Linux Kernel 4.8.0-22/3.10.0-327 (Ubuntu 16.10 / RedHat) – ‘keyctl’ Null Pointer Dereference

OS-S Security Advisory 2016-21

Microsoft Windows – VHDMP Arbitrary File Creation Privilege Escalation (MS16-138)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=914

Microsoft Windows – VHDMP ZwDeleteFile Arbitrary File Deletion Privilege Escalation (MS16-138)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=915

Microsoft Windows – VHDMP Arbitrary Physical Disk Cloning Privilege Escalation (MS16-138)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=916