Exploits

NXFilter 3.0.3 – Cross-Site Request Forgery

[+] Credits: hyp3rlinx

NXFilter 3.0.3 – Multiple Cross-Site Scripting Vulnerabilities

[+] Credits: hyp3rlinx

WordPress Plugin My Calendar 2.4.10 – Multiple Vulnerabilities

Exploit TItle: My Calendar 2.4.10 CSRF and XSS

vBulletin 5.1.x – Remote Code Execution

# Exploit Title: Vbulletin 5.1.X unserialize 0day preauth RCE exploit

OpenSSL – Alternative Chains Certificate Forgery

#!/usr/bin/env ruby

JSSE – SKIP-TLS

#!/usr/bin/env ruby

FreeType 2.6.1 – TrueType tt_cmap14_validate Parsing Heap Out-of-Bounds Reads

Source: https://code.google.com/p/google-security-research/issues/detail?id=602

Gold MP4 Player – ‘.swf’ Local Overflow

#!/usr/bin/python

Samsung Galaxy S6 Samsung Gallery – GIF Parsing Crash

Source: https://code.google.com/p/google-security-research/issues/detail?id=500

Samsung Galaxy S6 – android.media.process Face Recognition Memory Corruption

Source: https://code.google.com/p/google-security-research/issues/detail?id=499

Samsung Galaxy S6 – libQjpeg DoIntegralUpsample Crash

Source: https://code.google.com/p/google-security-research/issues/detail?id=498

Samsung Galaxy S6 Samsung Gallery – Bitmap Decoding Crash

Source: https://code.google.com/p/google-security-research/issues/detail?id=497

Samsung – libQjpeg Image Decoding Memory Corruption

Source: https://code.google.com/p/google-security-research/issues/detail?id=495

Python 2.7 hotshot Module – ‘pack_string’ Heap Buffer Overflow (PoC)

Title: Python 2.7 hotshot pack_string Heap Buffer Overflow

Python 2.7 – ‘array.fromstring’ Method Use-After-Free

Title: Python 2.7 array.fromstring Use After Free

Python 2.7 – ‘strop.replace()’ Method Integer Overflow

Title: Python 2.7 strop.replace() Integer Overflow

Python 3.3 < 3.5 - 'product_setstate()' Out-of-Bounds Read

Title: Python 3.3 - 3.5 product_setstate() Out-of-bounds Read

Symantec pcAnywhere 12.5.0 (Windows x86) – Remote Code Execution

#!/usr/bin/python

Sam Spade 1.14 – Crawl Website Buffer Overflow

# Exploit Title : Sam Spade 1.14 - Buffer OverFlow

Sam Spade 1.14 – Scan Addresses Buffer Overflow

#!/usr/bin/python

actiTIME 2015.2 – Multiple Vulnerabilities

actiTIME 2015.2 Multiple Vulnerabilities

TCPing 2.1.0 – Local Buffer Overflow

'''

PHP Server Monitor 3.1.1 – Multiple Cross-Site Request Forgery Vulnerabilities

[+] Credits: hyp3rlinx

eBay Magento 1.9.2.1 – PHP FPM XML eXternal Entity Injection

=============================================

PHP Server Monitor 3.1.1 – Cross-Site Request Forgery / Privilege Escalation

Hitron Router CGN3ACSMR 4.5.8.16 – Arbitrary Code Execution

# Exploit title: Hitron Router (CGN3ACSMR) - Remote Code Execution

AIX 7.1 – ‘lquerylv’ Local Privilege Escalation

#!/bin/sh

Pligg CMS 2.0.2 – Multiple SQL Injections

Security Advisory - Curesec Research Team

Pligg CMS 2.0.2 – Directory Traversal

Security Advisory - Curesec Research Team

Pligg CMS 2.0.2 – Cross-Site Request Forgery / Code Execution

Security Advisory - Curesec Research Team

Microsoft Windows – NtCreateLowBoxToken Handle Capture Local Denial of Service / Privilege Escalation (MS15-111)

Source: https://code.google.com/p/google-security-research/issues/detail?id=483

Oxwall 1.7.4 – Cross-Site Request Forgery

Advisory ID: HTB23266

Sam Spade 1.14 – Scan From IP Address Field Overflow Crash (SEH) (PoC)

#!/usr/bin/env python

Joomla! Component com_jnews 8.5.1 – SQL Injection

# Description of the component:

NetUSB – Kernel Stack Buffer Overflow

#!/usr/bin/env python

JIRA and HipChat for JIRA Plugin – Velocity Template Injection

############################################################################

Sagem FAST3304-V2 – Authentication Bypass (2)

================================================================================

Samsung SecEmailUI – Script Injection

# Source: https://code.google.com/p/google-security-research/issues/detail?id=494

Samsung – ‘m2m1shot’ Kernel Driver Buffer Overflow

Source: https://code.google.com/p/google-security-research/issues/detail?id=493

Samsung – ‘seiren’ Kernel Driver Buffer Overflow

Source: https://code.google.com/p/google-security-research/issues/detail?id=491

Samsung fimg2d – FIMG2D_BITBLT_BLIT ioctl Concurrency Flaw

Source: https://code.google.com/p/google-security-research/issues/detail?id=492

Samsung – SecEmailComposer QUICK_REPLY_BACKGROUND Permissions

Source: https://code.google.com/p/google-security-research/issues/detail?id=490

Apple Mac OSX 10.9.5/10.10.5 – ‘rsh/libmalloc’ Local Privilege Escalation (Metasploit)

##

Th3 MMA – ‘mma.php’ Backdoor Arbitrary File Upload (Metasploit)

##

Microsoft Windows 10 – ‘pcap’ Driver Privilege Escalation

// Source: https://github.com/Rootkitsmm/Win10Pcap-Exploit

Joomla! 3.2.x < 3.4.4 - SQL Injection

Apple Safari – User-Assisted Applescript Exec Attack (Metasploit)

##

Alreader 2.5 .fb2 – Based Stack Overflow (SEH) (ASLR + DEP Bypass)

#!/usr/bin/env python

Subrion 3.x – Multiple Vulnerabilities

{-} Title => Subrion 3.X.X - Multiple Exploits

Easy File Sharing Web Server 7.2 – Remote Overflow (SEH)

#!/usr/bin/env python