Exploits

ZKTeco ZKAccess Professional 3.5.3 – Insecure File Permissions Privilege Escalation

ZKTeco ZKAccess Professional 3.5.3 Insecure File Permissions

ZKTeco ZKBioSecurity 3.0 – Hard-Coded Credentials SYSTEM Remote Code Execution

ZKTeco ZKBioSecurity 3.0 Hardcoded Credentials Remote SYSTEM Code Execution

ZKTeco ZKBioSecurity 3.0 – Cross-Site Request Forgery (Add Superadmin)

ZKTeco ZKBioSecurity 3.0 – Directory Traversal

ZKTeco ZKBioSecurity 3.0 File Path Manipulation Vulnerability

ZKTeco ZKBioSecurity 3.0 – ‘visLogin.jsp’ Local Authentication Bypass

ZKTeco ZKBioSecurity 3.0 (visLogin.jsp) Local Authorization Bypass

ZKTeco ZKAccess Security System 5.3.1 – Persistent Cross-Site Scripting

alert(1)" />

PHP 7.0 – JsonSerializable::jsonSerialize json_encode Local Denial of Service

PHP 5.0.0 – ‘imap_mail()’ Local Denial of Service

PHP 5.0.0 – ‘hw_docbyanchor()’ Local Denial of Service

PHP 5.0.0 – ‘html_doc_file()’ Local Denial of Service

RSS News AutoPilot Script 1.0.1/3.0.3 – Cross-Site Request Forgery

# Exploit Title: RSS News AutoPilot Script 1.0.1 / 3.0.3 - CSRF to

FreePBX 13.0.35 – Remote Command Execution

Vulnerable software : Freepbx

NScan 0.9.1 – ‘Target’ Local Buffer Overflow

'''

Goron WebServer 2.0 – Multiple Vulnerabilities

"""

HelpDeskZ 1.0.2 – Arbitrary File Upload

'''

PHP 5.0.0 – ‘domxml_open_file()’ Local Denial of Service

PHP 7.0 – Object Cloning Local Denial of Service

Intellinet IP Camera INT-L100M20N – Unauthorized Admin Credential Change

#!/bin/bash

PLC Wireless Router GPN2.4P21-C-CN – Arbitrary File Disclosure

# Exploit Title: PLC Wireless Router GPN2.4P21-C-CN Authorised Arbitrary File Disclosure

PHP 5.0.0 – ‘simplexml_load_file()’ Local Denial of Service

PHP 5.0.0 – ‘xmldocfile()’ Local Denial of Service

Adobe Flash – Selection.setFocus Use-After-Free

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=841

Adobe Flash – Stage.align Setter Use-After-Free

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=838

Adobe Flash – Use-After-Free When Returning Rectangle

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=842

Adobe Flash – BitmapData.copyPixels Use-After-Free

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=843

Adobe Flash – MovieClip Transform Getter Use-After-Free

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=844

FreePBX 13.0.35 – SQL Injection

Vulnerable software : Freepbx

CubeCart < 3.0.12 - Multiple Vulnerabilities

CubeCart Multiple Vulnerabilities

WordPress Plugin CYSTEME Finder 1.3 – Arbitrary File Disclosure/Arbitrary File Upload

Exploit Title: WordPress CYSTEME Finder Plugin 1.3 - Arbitrary File Dislcosure/Arbitrary File Upload

WordPress Plugin Mail Masta 1.0 – Local File Inclusion

[+] Date: [23-8-2016]

Eye of Gnome 3.10.2 – GMarkup Out of Bounds Write

# Exploit Title: Gnome Eye of Gnome Out-of-bounds-write

SimplePHPQuiz – Blind SQL Injection

# Exploit Title: SimplePHPQuiz - Blind SQL Injection

chatNow – Multiple Vulnerabilities

# Exploit Title: chatNow - Multiple Vulnerabilities

Phoenix Exploit Kit – Remote Code Execution (Metasploit)

##

Vanderbilt IP-Camera CCPW3025-IR / CVMW3025-IR – Local File Disclosure

1. Advisory Information

JVC IP-Camera VN-T216VPRU – Local File Disclosure

1. Advisory Information

Honeywell IP-Camera HICC-1100PT – Local File Disclosure

1. Advisory Information

VideoIQ Camera – Local File Disclosure

Ocomon 2.0 – SQL Injection

# Exploit Title: Ocomon 2.0: Acess administrative Bypass / Multiple Sql

Sakai 10.7 – Multiple Vulnerabilities

Sakai 10.7 Multiple Vulnerabilities

WordPress Core 4.5.3 – Directory Traversal / Denial of Service

Path traversal vulnerability in WordPress Core Ajax handlers

ObiHai ObiPhone 1032/1062 < 5-0-0-3497 - Multiple Vulnerabilities

ObiHai ObiPhone - Multiple Vulnerabilities

SIEMENS IP Cameras (Multiple Models) – Credential Disclosure / Configuration Download

#

Vanderbilt IP-Camera CCPW3025-IR / CVMW3025-IR – Credentials Disclosure

1. Advisory Information

JVC IP-Camera VN-T216VPRU – Credentials Disclosure

1. Advisory Information

C2S DVR Management IRDOME-II-C2S / IRBOX-II-C2S / DVR – Credentials Disclosure / Authentication Bypass

1. Advisory Information

TOSHIBA IP-Camera IK-WP41A – Authentication Bypass / Configuration Download

#

MESSOA IP-Camera NIC990 – Authentication Bypass / Configuration Download

#

Microsoft Windows – Fileless UAC Protection Bypass Privilege Escalation (Metasploit)

##

ZYCOO IP Phone System – Remote Command Execution

Vulnerable hardware : ZYCOO IP phone system