Exploits

MediaSuite CMS – Artibary File Disclosure

.__ _____ _______

WordPress Plugin Community Events 1.3.5 – SQL Injection

=======================================================================

GoAutoDial CE 3.3-1406088000 – Authentication Bypass / Arbitrary File Upload / Command Injection

Affected software: GoAutoDial

Adobe Flash Player – copyPixelsToByteArray Integer Overflow (Metasploit)

##

WordPress Plugin Reflex Gallery – Arbitrary File Upload (Metasploit)

##

WordPress Plugin N-Media Website Contact Form – Arbitrary File Upload (Metasploit)

##

WordPress Plugin Creative Contact Form – Arbitrary File Upload (Metasploit)

##

WordPress Plugin Work The Flow – Arbitrary File Upload (Metasploit)

##

ADB – Backup Archive File Overwrite Directory Traversal

ADB backup archive path traversal file overwrite

Apple Mac OSX – Local Denial of Service

#include

BlueDragon CFChart Servlet 7.1.1.17759 – Arbitrary File Retrieval/Deletion

Vulnerability title: Arbitrary File Retrieval + Deletion In New Atlanta BlueDragon CFChart Servlet

AZBB < 1.0.07d - Multiple Vulnerabilities

AZBB Multiple Vulnerabilities

Apport 2.14.1 (Ubuntu 14.04.2) – Local Privilege Escalation

#!/bin/sh

Oracle Hyperion Smart View for Office 11.1.2.3.000 – Crash (PoC)

# Exploit Title: Buffer Overflow in Oracle� Hyperion Smart View for Office

Oracle – Outside-In ‘.DOCX’ File Parsing Memory Corruption

#####################################################################################

Microsoft Windows – ‘HTTP.sys’ HTTP Request Parsing Denial of Service (MS15-034)

#Tested on Win Srv 2012R2.

WordPress Plugin Ajax Store Locator 1.2 – SQL Injection

######################

Microsoft Windows – ‘HTTP.sys’ (PoC) (MS15-034)

UNTESTED - MS15-034 Checker

WordPress Plugin MiwoFTP 1.0.5 – Arbitrary File Download (1)

# Exploit Title :WordPress MiwoFTP Plugin 1.0.5 Arbitrary File Download Exploit

Apport/Abrt (Ubuntu / Fedora) – Local Privilege Escalation

#define _GNU_SOURCE

Abrt (Fedora 21) – Race Condition

#include

WordPress Plugin Video Gallery 2.8 – SQL Injection

######################

Samsung iPOLiS – ReadConfigValue Remote Code Execution

WordPress Plugin MiwoFTP 1.0.5 – Cross-Site Request Forgery / Arbitrary File Deletion

WordPress MiwoFTP Plugin 1.0.5 CSRF Arbitrary File Deletion Exploit

WordPress Plugin MiwoFTP 1.0.5 – Multiple Cross-Site Request Forgery / Cross-Site Scripting Vulnerabilities

WordPress MiwoFTP Plugin 1.0.5 Multiple CSRF XSS Vulnerabilities

WordPress Plugin MiwoFTP 1.0.5 – Cross-Site Request Forgery / Arbitrary File Creation / Remote Code Execution

WordPress MiwoFTP Plugin 1.0.5 CSRF Arbitrary File Creation Exploit (RCE)

WordPress Plugin WP Mobile Edition 2.7 – Remote File Disclosure

# Exploit Title: Wordpress Plugin 'WP Mobile Edition' Remote File Disclosure Vulnerability

WordPress Plugin Duplicator 0.5.14 – SQL Injection / Cross-Site Request Forgery

######################

Traidnt Up 3.0 – SQL Injection

# Exploit Title: Traidnt Up v3.0 SQL Injection

WordPress Plugin N-Media Website Contact Form with File Upload 1.3.4 – Arbitrary File Upload (1)

######################

Apple Mac OSX < 10.9/10 - Local Privilege Escalation

}

Samba < 3.6.2 (x86) - Denial of Service (PoC)

#!/usr/bin/python

ProFTPd 1.3.5 – File Copy

Description TJ Saunders 2015-04-07 16:35:03 UTC

Linux Kernel 3.13/3.14 (Ubuntu) – ‘splice()’ System Call Local Denial of Service

#define _GNU_SOURCE

Adobe Flash Player – casi32 Integer Overflow (Metasploit)

##

Apple Mac OSX – ‘Rootpipe’ Local Privilege Escalation (Metasploit)

##

Lenovo System Update – Local Privilege Escalation (Metasploit)

##

Barracuda Firmware 5.0.0.012 – (Authenticated) Remote Command Execution (Metasploit)

# Exploit Title: Barracuda Firmware

WordPress Plugin Windows Desktop and iPhone Photo Uploader – Arbitrary File Upload

##################################################################################################

Apple Mac OSX < 10.7.5/10.8.2/10.9.5/10.10.2 - 'Rootpipe' Local Privilege Escalation

########################################################

WordPress Plugin All In One WP Security & Firewall 3.9.0 – SQL Injection

######################

WordPress Plugin Shareaholic 7.6.0.3 – Cross-Site Scripting

# Exploit Title: Shareaholic 7.6.0.3 XSS

Balero CMS 0.7.2 – Multiple Blind SQL Injections

Balero CMS v0.7.2 Multiple Blind SQL Injection Vulnerabilities

Balero CMS 0.7.2 – Multiple JS/HTML Injection Vulnerabilities

; path=/balerocms/";

WordPress Plugin Traffic Analyzer 3.4.2 – Blind SQL Injection

# Exploit Title: Wordpress plugin 'Traffic Analyzer' Blind SQL Injection

Novell ZENworks Configuration Management 11.3.1 – Remote Code Execution

>> Remote code execution in Novell ZENworks Configuration Management 11.3.1

SolarWinds Firewall Security Manager 6.6.5 – Client Session Handling (Metasploit)

##

w3tw0rk / Pitbull Perl IRC Bot – Remote Code Execution

# thehunter.py

JBoss Seam 2 – Arbitrary File Upload / Execution (Metasploit)

#

WordPress Plugin Work The Flow File Upload 2.5.2 – Arbitrary File Upload

######################