Exploits

Total Commander 8.52 – Overwrite Buffer Overflow (SEH)

'''

TP-Link NC200/NC220 Cloud Camera 300Mbps Wi-Fi – Hard-Coded Credentials

TP-Link NC200/NC220 Cloud Camera 300Mbps Wi-Fi Hard-Coded Credentials

WordPress Plugin CP Reservation Calendar 1.1.6 – SQL Injection

# Exploit Title: WordPress: cp-reservation-calendar 1.1.6 SQLi injection]

Openfire 3.10.2 – Unrestricted Arbitrary File Upload

[+] Credits: hyp3rlinx

Openfire 3.10.2 – Remote File Inclusion

[+] Credits: hyp3rlinx

Openfire 3.10.2 – Privilege Escalation

[+] Credits: hyp3rlinx

Openfire 3.10.2 – Multiple Cross-Site Scripting Vulnerabilities

[+] Credits: hyp3rlinx

Openfire 3.10.2 – Cross-Site Request Forgery

[+] Credits: hyp3rlinx

Microsoft Windows Media Center – MCL (MS15-100) (Metasploit)

##

CMS Bolt – Arbitrary File Upload (Metasploit)

##

Silver Peak VXOA < 6.2.11 - Multiple Vulnerabilities

( , ) (,

Microsoft Windows 10 (Build 10130) – User Mode Font Driver Thread Permissions Privilege Escalation

Source: https://code.google.com/p/google-security-research/issues/detail?id=468

Microsoft Windows – NtUserGetClipboardAccessToken Token Leak (MS15-023)

Source: https://code.google.com/p/google-security-research/issues/detail?id=461

Microsoft Windows Task Scheduler – ‘DeleteExpiredTaskAfter’ File Deletion Privilege Escalation

Source: https://code.google.com/p/google-security-research/issues/detail?id=442

Microsoft Windows – CreateObjectTask TileUserBroker Privilege Escalation

Source: https://code.google.com/p/google-security-research/issues/detail?id=439

Microsoft Windows – CreateObjectTask SettingsSyncDiagnostics Privilege Escalation

Source: https://code.google.com/p/google-security-research/issues/detail?id=437

ManageEngine EventLog Analyzer < 10.6 build 10060 - SQL Execution

Exploit Title: ManageEngine EventLog Analyzer SQL query execution

ManageEngine OpManager 11.5 – Multiple Vulnerabilities

Exploit Title: ManageEngine OpManager multiple vulnerabilities

WordPress Plugin EZ SQL Reports < 4.11.37 - Multiple Vulnerabilities

# Exploit Title: EZ SQL Reports < 4.11.37: Arbitrary File Download (admin/colaborator required)

IKEView.exe R60 – Stack Buffer Overflow (PoC)

[+] Credits: hyp3rlinx

IKEView.exe Fox Beta 1 – Stack Buffer Overflow (PoC)

[+] Credits: hyp3rlinx

OpenLDAP 2.4.42 – ber_get_next Denial of Service

# Exploit Title: OpenLDAP 2.4.42 ber_get_next DOS

Microsoft Internet Explorer 11 – Stack Underflow Crash (PoC)

crash IE 11

Logitech Webcam Software 1.1 – ‘eReg.exe’ Local Buffer Overflow (SEH Unicode)

#*************************************************************************************************************

Monsta FTP 1.6.2 – Multiple Vulnerabilities

# Exploit Title: CSRF XSS Monsta FTP

Microsoft Windows Media Center – Command Execution (MS15-100)

# Title: MS15-100 Windows Media Center Command Execution

PHP 5.5.9 – ‘zend_executor_globals’ ‘CGIMode FPM WriteProcMemFile’ disable_functions Bypass / Load Dynamic Library

Synology Video Station 1.5-0757 – Multiple Vulnerabilities

------------------------------------------------------------------------

Octogate UTM 3.0.12 – Admin Interface Directory Traversal

# Exploit Title: Octogate UTM Admin Interface Directory Traversal

Apple Mac OSX Install.Framework – SUID Root Runner Binary Privilege Escalation

Source: https://code.google.com/p/google-security-research/issues/detail?id=478

Apple Mac OSX Install.Framework – Arbitrary mkdir / unlink and chown to Admin Group

Source: https://code.google.com/p/google-security-research/issues/detail?id=477

Apple Mac OSX – Install.framework suid Helper Privilege Escalation

Source: https://code.google.com/p/google-security-research/issues/detail?id=314

Qlikview 11.20 SR11 – Blind XML External Entity Injection

Exploit Title: Qlikview blind XXE security vulnerability

Auto-Exchanger 5.1.0 – Cross-Site Request Forgery

PHP 5.4/5.5/5.6 – SplDoublyLinkedList ‘Unserialize()’ Use-After-Free

Yet Another Use After Free Vulnerability in unserialize() with SplDoublyLinkedList

PHP GMP – ‘unserialize()’ Use-After-Free

Use After Free Vulnerability in unserialize() with GMP

PHP 5.4/5.5/5.6 – SplObjectStorage ‘Unserialize()’ Use-After-Free

Yet Another Use After Free Vulnerability in unserialize() with SplObjectStorage

PHP Session Deserializer – Use-After-Free

Use After Free Vulnerabilities in Session Deserializer

Google Android – ‘Stagefright’ Remote Code Execution

#!/usr/bin/env python

PHP 5.4/5.5/5.6 – ‘Unserialize()’ Use-After-Free

Use After Free Vulnerabilities in unserialize()

WordPress Theme White-Label Framework 2.0.6 – Cross-Site Scripting

# Exploit Title: Wordpress White-Label Framework XSS

IBM AIX High Availability Cluster Multiprocessing (HACMP) – Local Privilege Escalation

IBM AIX High Availability Cluster Multiprocessing (HACMP) LPE to root 0day

Cisco Sourcefire User Agent 2.2 – Insecure File Permissions

Cisco Sourcefire User Agent Insecure File Permissions Vulnerability

Advantech Webaccess 8.0 / 3.4.3 – ActiveX Multiple Vulnerabilities

Introduction

DirectAdmin Web Control Panel 1.483 – Multiple Vulnerabilities

=============================================================================

VeryPDF HTML Converter 2.0 – Local Buffer Overflow (SEH/ToLower() Bypass)

#*************************************************************************************************************

Endian Firewall – Password Change Command Injection (Metasploit)

##

Netgear Wireless Management System 2.1.4.15 (Build 1236) – Privilege Escalation

NETGEAR Wireless Management System - Authentication Bypass and

JSPMySQL Administrador – Multiple Vulnerabilities

[+] Credits: hyp3rlinx

ActiveState Perl.exe x64 Client 5.20.2 – Crash (PoC)

# Exploit Title: [ActiveState] Perl.exe x64 Client Denial of Service (v5.20.2)