Exploits

Barracuda Spam & Virus Firewall 5.1.3.007 – Remote Command Execution (Metasploit)

# Exploit Title: Barracuda Spam & Virus Firewall Post Auth Remote Root Exploit

Mediacoder 0.8.43.5852 – ‘.m3u’ (SEH)

# Exploit Title: [MediaCoder 0.8.43.5852 - .m3u SEH Exploit]

Drupal Module CODER 2.5 – Remote Command Execution (Metasploit)

##

CodoForum 3.2.1 – SQL Injection

1. Advisory Information

CoolPlayer+ Portable 2.19.6 – ‘.m3u’ File Stack Overflow (Egghunter + ASLR Bypass)

# Exploit Title: [CoolPlayer+ Portable build 2.19.6 - .m3u Stack Overflow [Egghunter+ASLR bypass]]

GRR Système de Gestion et de Réservations de Ressources 3.0.0-RC1 – Arbitrary File Upload

# Exploit Title: GRR

PHP gettext 1.0.12 – ‘gettext.php’ Code Execution

[CVE-2016-6175] gettext.php

PHP 5.5.37/5.6.23/7.0.8 – ‘bzread()’ Out-of-Bounds Write

'''

Ubee EVW3226 Modem/Router 1.0.20 – Multiple Vulnerabilities

'''

Technicolor TC7200 Modem/Router STD6.02.11 – Multiple Vulnerabilities

'''

Hitron CGNV4 Modem/Router 4.3.9.9-SIP-UPC – Multiple Vulnerabilities

Hitron CGNV4 modem/router multiple vulnerabilities

Compal CH7465LG-LC Modem/Router CH7465LG-NCIP-4.50.18.13-NOSH – Multiple Vulnerabilities

Compal CH7465LG-LC modem/router multiple vulnerabilities

Bellini/Supercook Wi-Fi Yumi SC200 – Multiple Vulnerabilities

'''

Micro Focus Filr 2 2.0.0.421/1.2 1.2.0.846 – Multiple Vulnerabilities

SEC Consult Vulnerability Lab Security Advisory < 20160725-0 >

Drupal Module Coder < 7.x-1.3/7.x-2.6 - Remote Code Execution

TFTP Server 1.4 – ‘WRQ’ Remote Buffer Overflow (Egghunter)

# Exploit Title: [TFTP Server 1.4 - WRQ Buffer Overflow Exploit [Egghunter]]

TeamPass Passwords Management System 2.1.26 – Arbitrary File Download

1. ADVISORY INFORMATION

NetBSD – ‘mail.local(8)’ Local Privilege Escalation

// Source: http://akat1.pl/?id=2

Django CMS 3.3.0 – Editor Snippet Persistent Cross-Site Scripting

Document Title:

Drupal Module RESTWS 7.x – PHP Remote Code Execution (Metasploit)

##

Wowza Streaming Engine 4.5.0 – Local Privilege Escalation

Wowza Streaming Engine 4.5.0 Local Privilege Escalation

Wowza Streaming Engine 4.5.0 – Remote Privilege Escalation

Wowza Streaming Engine 4.5.0 – Cross-Site Request Forgery (Add Advanced Admin)

Wowza Streaming Engine 4.5.0 – Multiple Cross-Site Scripting Vulnerabilities

Wowza Streaming Engine 4.5.0 Multiple Cross-Site Scripting Vulnerabilities

OpenSSH 7.2p2 – Username Enumeration

#!/usr/bin/python

WordPress Plugin Video Player 1.5.16 – SQL Injection

Websphere/JBoss/OpenNMS/Symantec Endpoint Protection Manager – Java Deserialization Remote Code Execution

#!/bin/bash/env python3

Axis Communications MPQT/PACS 5.20.x – Server-Side Include Daemon Remote Format String

#!/usr/bin/env python2.7

NewsP Free News Script 1.4.7 – User Credentials Disclosure

# Exploit Title: Free News Script User Password Download File

newsp.eu PHP Calendar Script 1.0 – User Credentials Disclosure

# Exploit Title: PHP calendar script Password Download File

OpenSSHd 7.2p2 – Username Enumeration

Source: http://seclists.org/fulldisclosure/2016/Jul/51

Meinberg NTP Time Server ELX800/GPS M4x V5.30p – Remote Command Execution / Escalate Privileges

#!/usr/bin/python

Clear Voyager Hotspot IMW-C910W – Arbitrary File Disclosure

- # Exploit Title: clear voyager hotspot IMW-C910W - file disclosure

Joomla! Component Guru Pro – ‘Itemid’ SQL Injection

# Exploit Title: Joomla Guru Pro (com_guru) Component - SQL Injection

Adobe Acrobat Reader DC 15.016.20045 – Invalid Font ‘.ttf’ Memory Corruption (1)

#####################################################################################

Adobe Acrobat Reader DC 15.016.20045 – Invalid Font ‘.ttf’ Memory Corruption (2)

#####################################################################################

Adobe Acrobat Reader DC 15.016.20045 – Invalid Font ‘.ttf’ Memory Corruption (3)

#####################################################################################

Adobe Acrobat Reader DC 15.016.20045 – Invalid Font ‘.ttf’ Memory Corruption (4)

#####################################################################################

Adobe Acrobat Reader DC 15.016.20045 – Invalid Font ‘.ttf’ Memory Corruption (5)

#####################################################################################

Adobe Acrobat Reader DC 15.016.20045 – Invalid Font ‘.ttf’ Memory Corruption (6)

#####################################################################################

Adobe Acrobat Reader DC 15.016.20045 – Invalid Font ‘.ttf’ Memory Corruption (7)

#####################################################################################

Adobe Flash Player 22.0.0.192 – DefineBitsJPEG2 Memory Corruption

#####################################################################################

Adobe Flash Player 22.0.0.192 – DefineSprite Memory Corruption

#####################################################################################

Adobe Flash Player 22.0.0.192 – SceneAndFrameData Memory Corruption

#####################################################################################

Adobe Flash Player 22.0.0.192 – TAG Memory Corruption

#####################################################################################

GSX Analyzer 10.12/11 – ‘main.swf’ Hard-Coded Superadmin Credentials

# Exploit Title: GSX Analyzer hardcoded superadmin credentials in Main.swf

Microsoft Windows 7 < 10 / 2008 < 2012 (x86/x64) - Secondary Logon Handle Privilege Escalation (MS16-032) (Metasploit)

##

Riverbed SteelCentral NetProfiler/NetExpress – Remote Code Execution (Metasploit)

##

Apache Archiva 1.3.9 – Multiple Cross-Site Request Forgery Vulnerabilities

RCE Security Advisory

Tiki Wiki CMS 15.0 – Arbitrary File Download

# Exploit Title: Tiki Wiki CMS 15.0 Arbitrary File Download