Exploits

u-Auctions – Multiple Vulnerabilities

# Exploit Title: *u-Auctions Multiple Vulnerabilities*

WordPress Plugin Business Intelligence – SQL Injection (Metasploit)

##################################################################################################

Joomla! Component com_rand – SQL Injection

##################################################################################################

WebGate WESP SDK 1.2 – ChangePassword Stack Overflow

WebGate eDVR Manager 2.6.4 – AudioOnlySiteChannel Stack Buffer Overflow

WebGate WinRDS 2.0.8 – PlaySiteAllChannel Stack Buffer Overflow

WebGate eDVR Manager 2.6.4 – SiteChannel Property Stack Buffer Overflow

WebGate eDVR Manager 2.6.4 – Connect Method Stack Buffer Overflow

Kemp Load Master 7.1.16 – Multiple Vulnerabilities

# Exploit Title: Kemp Load Master - Multiple Vulnerabilities (RCE, CSRF, XSS, DoS)

WordPress Plugin Video Gallery 2.8 – Multiple Cross-Site Request Forgery Vulnerabilities

# Exploit Title: Wordpress Video Gallery Plugin Multiple CSRF File Upload

Multiple WordPress UpThemes Themes – Arbitrary File Upload

# Exploit Title: Wordpress SimpleCart Theme File Upload and Execution

WordPress Plugin WP Easy Slideshow 1.0.3 – Multiple Vulnerabilities

# Exploit Title: Wordpress WP Easy Slideshow Plugin Multiple Vulnerabilities

WordPress Plugin Simple Ads Manager – Multiple SQL Injections

#Vulnerability title: Wordpress plugin Simple Ads Manager - SQL Injection

WordPress Plugin Simple Ads Manager 2.5.94 – Arbitrary File Upload

#Vulnerability title: Wordpress plugin Simple Ads Manager - Arbitrary File Upload

WordPress Plugin Simple Ads Manager – Information Disclosure

#Vulnerability title: Wordpress plugin Simple Ads Manager - Information Disclosure

phpSFP Schedule Facebook Posts 1.5.6 – SQL Injection

######################################################################

WordPress Plugin VideoWhisper Video Presentation 3.31.17 – Arbitrary File Upload

Title: Remote file upload vulnerability in wordpress plugin videowhisper-video-presentation v3.31.17

WordPress Plugin VideoWhisper Video Conference Integration 4.91.8 – Arbitrary File Upload

Title: Remote file upload vulnerability in videowhisper-video-conference-integration wordpress plugin v4.91.8

Ericsson Drutt MSDP (Instance Monitor) – Directory Traversal

+------------------------------------------------------------------------------------------------------+

Ceragon FibeAir IP-10 – SSH Private Key Exposure (Metasploit)

##

JBoss AS 3/4/5/6 – Remote Command Execution

# coding: utf-8

WordPress Plugin SP Project & Document Manager 2.5.3 – Blind SQL Injection

# Exploit Title: WordPress SP Project & Document Manager 2.5.3 Blind SQL Injection

Airties Air5650TT – Remote Stack Overflow

#!/usr/bin/env python

Adobe Flash Player – ByteArray With Workers Use-After-Free (Metasploit)

##

Palo Alto Traps Server 3.1.2.1546 – Persistent Cross-Site Scripting

#!/usr/bin/ruby

Fiyo CMS 2.0.1.8 – Multiple Vulnerabilities

# Exploit Title: FiyoCMS Multiple Vulnerabilities

JBoss JMXInvokerServlet JMXInvoker 0.3 – Remote Command Execution

import java.io.BufferedReader;

WordPress Plugin Slider REvolution 4.1.4 – Arbitrary File Download

# Exploit Title : WordPress Slider Revolution Responsive

WordPress Plugin aspose-doc-exporter 1.0 – Arbitrary File Download

|*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*||*|

Joomla! Component com_gallery_wd – SQL Injection

######################################################################

Joomla! Component Contact Form Maker 1.0.1 – SQL Injection

[+]Title: Joomla Contact Form Maker v1.0.1 Component - SQL injection vulnerability

Apache Spark Cluster 1.3.x – Arbitrary Code Execution

# Exploit Title: Arbitary Code Execution in Apache Spark Cluster

Fedora 21 setroubleshootd 3.2.22 – Local Privilege Escalation

setroubleshoot tries to find out which rpm a particular

IDM 6.20 – Local Buffer Overflow

#!/usr/bin/env python

Acunetix 9.5 – OLE Automation Array Remote Code Execution

#!/usr/bin/python

WebGate WinRDS 2.0.8 – StopSiteAllChannel Stack Overflow

WebGate WinRDS WESPPlayback.WESPPlaybackCtrl.1 StopSiteAllChannel Stack Buffer Overflow Vulnerability (0Day)

WebGate Control Center 4.8.7 – GetThumbnail Stack Overflow

WebGate eDVR Manager 2.6.4 – SiteName Stack Overflow

Berta CMS – Arbitrary File Upload

Berta CMS is a web based content management system using PHP and local file storage.

Mini-stream Ripper 2.7.7.100 – Local Buffer Overflow

#!/usr/bin/env python

RM Downloader 2.7.5.400 – Local Buffer Overflow

#!/usr/bin/env python

QNAP – Admin Shell via Bash Environment Variable Code Injection (Metasploit)

# Exploit Title: QNAP admin shell via Bash Environment Variable Code Injection

QNAP – Web Server Remote Code Execution via Bash Environment Variable Code Injection (Metasploit)

# Exploit Title: QNAP Web server remote code execution via Bash Environment Variable Code Injection

WebGate eDVR Manager – Remote Stack Buffer Overflow

pfSense 2.2 – Multiple Vulnerabilities

Advisory ID: HTB23251

WordPress Plugin Marketplace 2.4.0 – Remote Code Execution (Add Admin)

#!/usr/bin/python

Adobe Flash Player – Arbitrary Code Execution

Source: https://github.com/SecurityObscurity/cve-2015-0313

Bsplayer 2.68 – HTTP Response Universal

#!/usr/bin/python

WordPress Plugin InBoundio Marketing 1.0 – Arbitrary File Upload

Mozilla Firefox – Proxy Prototype Privileged JavaScript Injection (Metasploit)

##