Exploits

Linux Kernel 3.13.0 < 3.19 (Ubuntu 12.04/14.04/14.10/15.04) - 'overlayfs' Local Privilege Escalation (Access /etc/shadow)

The overlayfs filesystem does not correctly check file permissions when

Ektron CMS 9.10 SP1 (Build 9.1.0.184.1.114) – Cross-Site Request Forgery

# Vulnerability type: Cross-site Request Forgery

Apexis IP CAM – Information Disclosure

Remoteexecution.net**

XtMediaPlayer 0.93 – ‘.wav’ Crash (PoC)

#!/usr/bin/python

FinePlayer 2.20 – ‘.mp4’ Crash (PoC)

#!/usr/bin/python

TYPO3 Extension Akronymmanager 0.5.0 – SQL Injection

Advisory: SQL Injection in TYPO3 Extension Akronymmanager

E-Detective Lawful Interception System – Multiple Vulnerabilities

Advisory: E-Detective Lawful Interception System

Ruby on Rails 4.0.x/4.1.x/4.2.x (Web Console v2) – Whitelist Bypass Code Execution (Metasploit)

##

FileZilla 3.11.0.2 SFTP Module – Denial of Service

'''

Cisco AnyConnect Secure Mobility 2.x/3.x/4.x – Client Denial of Service (PoC)

Cisco AnyConnect Secure Mobility Client VPN API Stack Overflow

Milw0rm Clone Script 1.0 – ‘/admin/login.php’ Authentication Bypass

| Exploit Title: Milw0rm Clone Script v1.0 (Auth Bypass) SQL Injection Vulnerability |

Putty 0.64 – Denial of Service

'''

ClickHeat 1.14 – Cross-Site Request Forgery (Change Admin Password)

# Exploit Title: ClickHeat

foobar2000 1.3.8 – ‘.m3u’ Local Crash (PoC)

# Exploit Title: foobar2000 1.3.8 (.m3u) Local Crash PoC

GoldWave 6.1.2 – Local Crash (PoC)

#!/usr/bin/python

Nakid CMS – Multiple Vulnerabilities

# Exploit Title: CSRF, Persistent XSS & LFI

Opsview 4.6.2 – Multiple Cross-Site Scripting Vulnerabilities

# Exploit title: Opsview 4.6.2 - Multiple XSS

ZCMS 1.1 – Multiple Vulnerabilities

# Exploit Title: SQL Injection & Persistent XSS

WordPress Plugin SE HTML5 Album Audio Player 1.1.0 – Directory Traversal

Title: Path Traversal vulnerability in Wordpress plugin se-html5-album-audio-player v1.1.0

WordPress Plugin Aviary Image Editor Addon For Gravity Forms 3.0 Beta – Arbitrary File Upload

Title: Remote file upload vulnerability in aviary-image-editor-add-on-for-gravity-forms v3.0beta Wordpress plugin

OSSEC 2.7 < 2.8.1 - 'diff' Local Privilege Escalation

Fix for CVE-2015-3222 which allows for root escalation via syscheck - https://github.com/ossec/ossec-hids/releases/ta...

Libmimedir – ‘.VCF’ Memory Corruption (PoC)

#!/usr/bin/python

HP WebInspect 10.4 – XML External Entity Injection

# Exploit Title: HP WebInspect - XML External Entity

WordPress Plugin RobotCPA V5 – Local File Inclusion

# Exploit Title: Wordpress Plugin RobotCPA V5 - Local File Include

WordPress Plugin Paypal Currency Converter Basic For WooCommerce – File Read

# Exploit Title: Paypal Currency Converter Basic For Woocommerce File Read

WordPress Plugin History Collection 1.1.1 – Arbitrary File Download

# Exploit Title: Wordpress History Collection

Pandora FMS 5.0/5.1 – Authentication Bypass

# Exploit Title: Authentication Bypass in Pandora FMS

FiverrScript – Cross-Site Request Forgery (Add Admin)

# Exploit Title: FiverrScript CSRF Vulnerability (add New admin)

GeoVision (GeoHttpServer) Webcams – Remote File Disclosure

#!/usr/bin/python

ISPConfig 3.0.5.4p6 – Multiple Vulnerabilities

Advisory ID: HTB23260

Bonita BPM 6.5.1 – Multiple Vulnerabilities

Advisory ID: HTB23259

Alcatel-Lucent OmniSwitch – Cross-Site Request Forgery

Advisory: Alcatel-Lucent OmniSwitch Web Interface Cross-Site Request Forgery

ProFTPd 1.3.5 – ‘mod_copy’ Command Execution (Metasploit)

##

AnimaGallery 2.6 – Local File Inclusion

# Exploit Title: AnimaGallery 2.6 (theme and lang cookie parametre) Local File Include Vulnerability

WordPress Plugin Encrypted Contact Form 1.0.4 – Cross-Site Request Forgery

# Title: CVE-2015-4010 - Cross-site Request Forgery & Cross-site Scripting in Encrypted

SysAid Help Desk 14.4 – Multiple Vulnerabilities

>> Multiple vulnerabilities in SysAid Help Desk 14.4

ICU library 52 < 54 - Multiple Vulnerabilities

>> Heap overflow and integer overflow in ICU library (v52 to v54)

Milw0rm Clone Script 1.0 – ‘related.php?program’ Blind SQL Injection

| Exploit Title: Milw0rm Clone Script v1.0 - (time based) SQLi |

D-Link DSL-2780B DLink_1.01.14 – Remote DNS Change

D-Link DSL-2780B DLink_1.01.14

TP-Link TD-W8950ND ADSL2+ – Remote DNS Change

TP-Link ADSL2+ TD-W8950ND

Microsoft Internet Explorer 11 – Crash (PoC) (2)

D-Link DSL-2730B AU_2.01 – Authentication Bypass DNS Change

D-Link DSL-2730B AU_2.01

D-Link DSL-526B ADSL2+ AU_2.01 – Remote DNS Change

D-Link DSL-526B ADSL2+ AU_2.01

WordPress Plugin Wp-ImageZoom 1.1.0 – Multiple Vulnerabilities

# Exploit Title: wp-imagezoom Remote Image Upload

WordPress Plugin WP Mobile Edition – Local File Inclusion

######################################################################################

Pasworld – ‘detail.php’ Blind SQL Injection

=========================================================

WiFi HD 8.1 – Directory Traversal / Denial of Service

# Exploit Title: WiFi HD 8.1 - Directory Traversal and Denial of Service

Broadlight Residential Gateway DI3124 – Remote DNS Change

Broadlight Residential Gateway DI3124

WordPress Plugin Really Simple Guest Post 1.0.6 – Local File Inclusion

# Exploit Title: Wordpress Really Simple Guest Post File Include

1 Click Audio Converter 2.3.6 – Activex Local Buffer Overflow

1 Click Audio Converter Activex Buffer Overflow