Exploits

HP Data Protector 8.10 – Remote Command Execution (Metasploit)

##

PHP Betoffice (Betster) 1.0.4 – Authentication Bypass / SQL Injection

SolarWinds Orion Service – SQL Injection

I found a couple SQL injection vulnerabilities in the core Orion service

Symantec Web Gateway 5 – ‘restore.php’ (Authenticated) Command Injection (Metasploit)

##

Seagate Business NAS – Remote Command Execution (Metasploit)

##

BEdita CMS 3.5.0 – Multiple Vulnerabilities

BEdita CMS - XSS & CSRF Vulnerability in Version 3.5.0

Linux Kernel 3.17.5 – IRET Instruction #SS Fault Handling Crash (PoC)

// Only works on x86_64 platform

Linux Kernel 3.15.6 – PPP-over-L2TP Socket Level Handling Crash (PoC)

#include

Linux Kernel 3.16.3 – Associative Array Garbage Collection Crash (PoC)

#define _GNU_SOURCE 1

WordPress Theme DesignFolio Plus 1.2 – Arbitrary File Upload

#########################################################

Sagem F@st 3304-V2 – Local File Inclusion

# Title : Sagem F@st 3304-V2 Directory Traversal Vulnerability

WordPress Theme Photocrati 4.x – SQL Injection / Cross-Site Scripting

# Exploit Title: [ wordpress theme photocrati 4.X.X SQL INJECTION ]

WordPress Plugin cp-multi-view-calendar 1.1.4 – SQL Injection

# Exploit Title: WordPress: cp-multi-view-calendar.1.1.4 [SQL Injection

PHPMoAdmin – Unauthorized Remote Code Execution

######################################################################

WordPress Plugin Calculated Fields Form 1.0.10 – SQL Injection

[+] Calculated Fields Form Wordpress Plugin

vBulletin vBSEO 4.x – ‘visitormessage.php’ Remote Code Injection

#################################################################################################################

Seagate Business NAS 2014.00319 – Remote Code Execution

#!/usr/bin/env python

Microsoft Word 2007 – RTF Object Confusion (ASLR + DEP Bypass)

# Title : Microsoft Office Word 2007 - RTF Object Confusion ASLR and DEP bypass

GoAutoDial CE 2.0 – Arbitrary File Upload

# Title : GoAutoDial CE 2.0 Shell Upload

Persistent Systems Client Automation – Command Injection Remote Code Execution (Metasploit)

# Exploit Title: Persistent Systems Client Automation (PSCA, formerly HPCA or Radia) Command Injection Remote Code Ex...

Electronic Arts Origin Client 9.5.5 – Multiple Privilege Escalation Vulnerabilities

Electronic Arts Origin Client 9.5.5 Multiple Privilege Escalation Vulnerabilities

Ubisoft Uplay 5.0 – Insecure File Permissions Privilege Escalation

Ubisoft Uplay 5.0 Insecure File Permissions Local Privilege Escalation

SQLite3 3.8.6 – Controlled Memory Corruption (PoC)

# Exploit Title: SQLite3 controlled memory corruption PoC (0day)

D-Link/TRENDnet – NCC Service Command Injection (Metasploit)

##

VFU 4.10-1.1 – Move Entry Buffer Overflow

# Exploit Title: VFU Move Entry Buffer Overflow

HP Client – Automation Command Injection (Metasploit)

##

Beehive Forum 1.4.4 – Persistent Cross-Site Scripting

Document Title:

WeBid 1.1.1 – Unrestricted Arbitrary File Upload

Clipbucket 2.7 RC3 0.9 – Blind SQL Injection

# Exploit Title : Clipbucket 2.7 RC3 0.9 Blind SQL Injection

Zabbix 2.0.5 – Cleartext ldap_bind_Password Password Disclosure (Metasploit)

##

PHP DateTime – Use-After-Free

Use After Free Vulnerability in unserialize() with DateTime* [CVE-2015-0273]

Zeuscart 4.0 – Multiple Vulnerabilities

Advisory: Multiple reflecting XSS-, SQLi and

phpBugTracker 1.6.0 – Multiple Vulnerabilities

Advisory: Multiple SQLi, stored/reflecting XSS- and CSRF-vulnerabilities in

WordPress Plugin Easy Social Icons 1.2.2 – Cross-Site Request Forgery

====================================================

Samsung iPOLiS 1.12.2 – iPOLiS XnsSdkDeviceIpInstaller ActiveX WriteConfigValue (PoC)

Samsung iPOLiS XnsSdkDeviceIpInstaller ActiveX WriteConfigValue Remote Code Execution PoC

Pentaho < 4.5.0 - User Console XML Injection

========================================================================

jQuery – jui_filter_rules PHP Code Execution

-----BEGIN PGP SIGNED MESSAGE-----

Piwigo 2.7.3 – SQL Injection

[CVE-2015-1517] Piwigo - SQL Injection in Version 2.7.3

CrushFTP 7.2.0 – Multiple Vulnerabilities

========================================================

Piwigo 2.7.3 – Multiple Vulnerabilities

Advisory: Reflecting XSS- and SQL Injection vulnerability in CMS Piwigo

Publish-It 3.6d – Local Buffer Overflow (SEH)

#!/usr/bin/python

D-Link DSL-2640B ADSL Router – ‘ddnsmngr’ Remote DNS Change

#!/bin/bash

WordPress Plugin Duplicator 0.5.8 – Privilege Escalation

# Exploit Title: Duplicator 0.5.8 Privilege Escalation

Guppy CMS 5.0.9/5.00.10 – Authentication Bypass/Change Email

GuppY CMS 5.0.9 & 5.00.10 Authentication bypass/Change email. Other versions may be vulnerable but weren't tested.

GuppY CMS 5.0.9 < 5.00.10 - Multiple Cross-Site Request Forgery Vulnerabilities

X360 VideoPlayer – ActiveX Control Buffer Overflow (Metasploit)

##

Java JMX – Server Insecure Configuration Java Code Execution (Metasploit)

##

WordPress Plugin WonderPlugin Audio Player 2.0 – Blind SQL Injection / Cross-Site Scripting

# Exploit Title: WonderPlugin Audio Player 2.0 Blind SQL Injection and XSS

WordPress Plugin Fancybox 3.0.2 – Persistent Cross-Site Scripting

# Exploit Title: Wordpress plugin Fancybox-for-WordPress Stored XSS

eTouch SamePage 4.4.0.0.239 – Multiple Vulnerabilities

eTouch SamePage v4.4.0.0.239 multiple vulnerabilities