Exploits

Dell SonicWALL Secure Remote Access (SRA) Appliance – Cross-Site Request Forgery

# Exploit Title: Dell SonicWALL Secure Remote Access (SRA) Appliance Cross-Site Request Forgery

IBM Websphere Portal – Persistent Cross-Site Scripting

IBM WebSphere Portal Stored Cross-Site Scripting Vulnerability [CVE-2014-0910]

WordPress Plugin Freshmail 1.5.8 – ‘shortcode.php’ SQL Injection

# Exploit Title: Unauthenticated SQL Injection on Wordpress Freshmail (#1)

Album Streamer 2.0 iOS – Directory Traversal

Document Title:

Mediacoder 0.8.34.5716 – ‘.m3u’ Local Buffer Overflow (SEH)

#!/usr/bin/python

vPhoto-Album 4.2 iOS – Local File Inclusion

Document Title:

PDF Converter & Editor 2.1 iOS – Local File Inclusion

Document Title:

elFinder 2 – Remote Command Execution (via File Creation)

#[+] Author: TUNISIAN CYBER

Invision Power Board (IP.Board) < 2.0.3 - Multiple Vulnerabilities

IP.Board Multiple Vulnerabilities

Grindr 2.1.1 iOS – Denial of Service

Document Title:

PhotoWebsite 3.1 iOS – Local File Inclusion

Document Title:

Apache Xerces-C XML Parser < 3.1.2 - Denial of Service (PoC)

# Exploit Title: Apache Xerces-C XML Parser (< 3.1.2) DoS POC

WordPress Plugin Ultimate Product Catalogue 3.1.2 – Multiple Persistent Cross-Site Scripting / Cross-Site Request Forgery / Arbitrary File Upload Vulnerabilities

# Exploit Title: Multiple Persistent XSS & CSRF & File Upload on Ultimate

RM Downloader 2.7.5.400 – Local Buffer Overflow (Metasploit)

###

Adobe Flash Player – UncompressViaZlibVariant Uninitialized Memory (Metasploit)

##

TestDisk 6.14 – ‘Check_OS2MB’ Stack Buffer Overflow (PoC)

( , ) (,

Ninja Privilege Escalation Detection and Prevention System 0.1.3 – Race Condition Privilege Escalation

#[Title] Ninja privilege escalation detection and prevention system race condition

Foxit Reader PDF 7.1.3.320 – Parsing Memory Corruption

#####################################################################################

WordPress Plugin TheCartPress 1.3.9 – Multiple Vulnerabilities

Advisory ID: HTB23254

Wing FTP Server Admin 4.4.5 – Multiple Vulnerabilities

Document Title:

OS Solution OSProperty 2.8.0 – SQL Injection

OS Solution OSProperty 2.8.0 was vulnerable to an unauthenticated SQL

i.FTP 2.21 – Overflow Crash (SEH) (PoC)

# iFTP 2.21 SEH overwritten Crash PoC

Legend Perl IRC Bot – Remote Code Execution

#

Apple iTunes 10.6.1.7 – ‘.pls’ Title Buffer Overflow

# Exploit Title: Apple Itunes PLS title buffer overflow

MiniUPnPd 1.0 (MIPS) – Remote Stack Overflow Remote Code Execution for AirTies RT Series

#!/usr/bin/env python

Wireshark 1.12.4 – Memory Corruption and Access Violation (PoC)

#!/usr/bin/python

UniPDF 1.2 – ‘xml’ Buffer Overflow Crash (PoC)

# Exploit Title: UniPDF v1.2 BufferOverflow, SEH overwrite DoS PoC

OTRS < 3.1.x / < 3.2.x / < 3.3.x - Persistent Cross-Site Scripting

# Exploit Title: Stored Cross-Site Scripting (XSS) in OTRS

WordPress Core 4.2 – Persistent Cross-Site Scripting

Source: http://klikki.fi/adv/wordpress2.html

Free MP3 CD Ripper 2.6 2.8 (Windows 7) – ‘.wav’ File Buffer Overflow (SEH) (DEP Bypass)

#!/usr/bin/python

usb-creator 0.2.x (Ubuntu 12.04/14.04/14.10) – Local Privilege Escalation

Source: http://www.openwall.com/lists/oss-security/2015/04/22/12

WebUI 1.5b6 – Remote Code Execution

#[+] Author: TUNISIAN CYBER

Quick Search 1.1.0.189 – search textbox Buffer Overflow (SEH Unicode) (Egghunter)

#!/usr/bin/perl

WordPress Plugin Ultimate Product Catalogue – SQL Injection (1)

# Exploit Title: Unauthenticated SQLi in Item_ID POST parameter on Ultimate

WordPress Plugin Ultimate Product Catalogue – SQL Injection (2)

# Exploit Title: Unauthenticated SQLi on Ultimate Product Catalogue

ZYXEL P-660HN-T1H_IPv6 – Remote Configuration Editor / Web Server Denial of Service

Free MP3 CD Ripper 2.6 2.8 – ‘.wav’ File Buffer Overflow (SEH)

#!/usr/bin/env perl

Open-Letters – Remote PHP Code Injection

Wolf CMS 0.8.2 – Arbitrary File Upload

MooPlayer 1.3.0 – ‘m3u’ Local Buffer Overflow (SEH) (2)

#!/usr/bin/perl

SevenIT SevDesk 3.10 – Multiple Web Vulnerabilities

Document Title:

Wifi Drive Pro 1.2 iOS – Local File Inclusion

Document Title:

Photo Manager Pro 4.4.0 iOS – Local File Inclusion

Document Title:

Mobile Drive HD 1.8 – Local File Inclusion

Document Title:

Photo Manager Pro 4.4.0 iOS – Code Execution

Document Title:

OpenBSD 5.6 – Multiple Local Kernel Panics (Denial of Service)

# Exploit Title: OpenBSD

WordPress Plugin NEX-Forms < 3.0 - SQL Injection

######################

WordPress Plugin MiwoFTP 1.0.5 – Arbitrary File Download (2)

######################

WordPress Plugin Tune Library 1.5.4 – SQL Injection

=======================================================================

ProFTPd 1.3.5 – ‘mod_copy’ Remote Command Execution

# Title: ProFTPd 1.3.5 Remote Command Execution