Exploits

PCMan FTP Server 2.0.7 – ‘MKD’ Remote Buffer Overflow

# Title: PCMan FTP Server v2.0.7 Buffer Overflow - MKD Command

WordPress Plugin Webdorado Spider Event Calendar 1.4.9 – SQL Injection

Realtek 11n Wireless LAN utility – Local Privilege Escalation

Realtek 11n Wireless LAN utility privilege escalation.

WordPress Plugin Video Gallery 2.7.0 – SQL Injection

######################

Exponent CMS 2.3.1 – Multiple Cross-Site Scripting Vulnerabilities

######################

SoftSphere DefenseWall FW/IPS 3.24 – Local Privilege Escalation

Exploit Title - SoftSphere DefenseWall FW/IPS Arbitrary Write Privilege Escalation

MooPlayer 1.3.0 – ‘m3u’ Local Buffer Overflow (SEH) (1)

#!/usr/bin/env python

WordPress Plugin Survey and Poll 1.1 – Blind SQL Injection

#################################################################

Pandora FMS 5.1 SP1 – SQL Injection

Document Title:

Achat 0.150 beta7 – Remote Buffer Overflow (Metasploit)

##

IBM Endpoint Manager – Persistent Cross-Site Scripting

Advisory: Cross-Site Scripting in IBM Endpoint Manager Relay Diagnostics

SixApart MovableType < 5.2.12 - Storable Perl Code Execution (Metasploit)

##

WordPress Theme Holding Pattern – Arbitrary File Upload (Metasploit)

##

LG DVR LE6016D – Remote File Disclosure

----------------------------------------------------------------------

WordPress Plugin WP EasyCart – Unrestricted Arbitrary File Upload (Metasploit)

##

MooPlayer 1.3.0 – ‘m3u’ Buffer Overflow (SEH) (PoC)

#!/usr/bin/env python

RedaxScript CMS 2.2.0 – SQL Injection

# Exploit Title: Radexscript CMS 2.2.0 - SQL Injection vulnerability

u5CMS 3.9.3 – ‘deletefile.php’ Arbitrary File Deletion

u5CMS 3.9.3 (deletefile.php) Arbitrary File Deletion Vulnerability

u5CMS 3.9.3 – Multiple SQL Injections

u5CMS 3.9.3 Multiple SQL Injection Vulnerabilities

u5CMS 3.9.3 – ‘thumb.php’ Local File Inclusion

u5CMS 3.9.3 (thumb.php) Local File Inclusion Vulnerability

u5CMS 3.9.3 – Multiple Persistent Cross-Site Scripting / Reflected Cross-Site Scripting Vulnerabilities

u5CMS 3.9.3 Multiple Stored And Reflected XSS Vulnerabilities

StaMPi – Local File Inclusion

# Exploit Title: StaMPi - Local File Inclusion

Chamilo LMS 1.9.8 – Blind SQL Injection

# Exploit Title: Chamilo LMS 1.9.8 Blind SQL Injection

Fork CMS 3.8.5 – SQL Injection

[CVE-2015-1467] Fork CMS - SQL Injection in Version 3.8.5

ManageEngine OpManager / Applications Manager / IT360 – ‘FailOverServlet’ Multiple Vulnerabilities

>> Multiple vulnerabilities in FailOverServlet in ManageEngine OpManager, Applications Manager and IT360

Chemtool 1.6.14 – Memory Corruption

Document Title:

Achat 0.150 beta7 – Remote Buffer Overflow

#!/usr/bin/python

LG DVR LE6016D – Remote Users/Passwords Disclosure

#!/usr/bin/perl

Shuttle Tech ADSL Modem/Router 915 WM – Remote DNS Change

#!/bin/bash

Magento Server MAGMI Plugin – Multiple Vulnerabilities

Exploit Title: Magento Server MAGMI Plugin Local File Inclusion And Cross Site Scripting

Pragyan CMS 3.0 – SQL Injection

Advisory: SQL injection vulnerability in Pragyan CMS v.3.0

K7 Computing (Multiple Products) – Arbitrary Write Privilege Escalation

Exploit Title - K7 Computing Multiple Products Arbitrary Write Privilege Escalation

AVG Internet Security 2015.0.5315 – Arbitrary Write Privilege Escalation

Exploit Title - AVG Internet Security 2015 Arbitrary Write Privilege Escalation

BullGuard (Multiple Products) – Arbitrary Write Privilege Escalation

Exploit Title - BullGuard Multiple Products Arbitrary Write Privilege Escalation

ManageEngine Desktop Central 9 Build 90087 – Cross-Site Request Forgery

Hewlett-Packard (HP) UCMDB – JMX-Console Authentication Bypass

Mogwai Security Advisory MSA-2015-02

Microsoft Remote Desktop Services – Web Proxy IE Sandbox Escape (MS15-004) (Metasploit)

##

Sefrengo CMS 1.6.1 – Multiple SQL Injections

# Exploit Title: Sefrengo CMS v1.6.1 - Multiple SQL Injection Vulnerabilities

Symantec Altiris Agent 6.9 (Build 648) – Local Privilege Escalation

Exploit Title - Symantec Altiris Agent Arbitrary Write Privilege Escalation

Trend Micro 8.0.1133 (Multiple Products) – Local Privilege Escalation

Exploit Title - Trend Micro Multiple Products Arbitrary Write Privilege Escalation

X360 VideoPlayer ActiveX Control 2.6 – ASLR + DEP Bypass

runme

Symantec Encryption Management Server < 3.2.0 MP6 - Remote Command Injection

Vantage Point Security Advisory 2014-007

McAfee Data Loss Prevention Endpoint – Arbitrary Write Privilege Escalation

Exploit Title - McAfee Data Loss Prevention Endpoint Arbitrary Write Privilege Escalation

HP Data Protector 8.x – Remote Command Execution

#!/usr/bin/python

ManageEngine Firewall Analyzer 8.0 – Directory Traversal / Cross-Site Scripting

################################################################################################

Apple Mac OSX < 10.10.x - GateKeeper Bypass

# Exploit Title: OS X Gatekeeper bypass Vulnerability

UniPDF 1.1 – Crash (PoC) (SEH)

# Exploit Title: UniPDF v1.1 BufferOverflow, SEH overwrite DoS PoC

Microsoft Windows Server 2003 SP2 – Local Privilege Escalation (MS14-070)

"""

FreeBSD – Multiple Vulnerabilities

Core Security - Corelabs Advisory

Exim ESMTP 4.80 – glibc gethostbyname Denial of Service

# Exploit Title: [Exim ESMTP GHOST DoS PoC Exploit]