Exploits

Apple Mac OSX 10.10 – BlueTooth DispatchHCIWriteStoredLinkKey Crash (PoC)

#include

Foxit MobilePDF 4.4.0 iOS – Multiple Vulnerabilities

Document Title:

Lexmark MarkVision Enterprise – Arbitrary File Upload (Metasploit)

##

Oracle MySQL (Windows) – FILE Privilege Abuse (Metasploit)

##

WordPress Plugin WP Symposium 14.11 – Arbitrary File Upload (Metasploit)

##

RedStar 3.0 Desktop – Enable sudo Privilege Escalation

#!/bin/bash -e

D-Link DSL-2730B Modem – Cross-Site Scripting Injection Stored Wlsecrefresh.wl & Wlsecurity.wl

# Exploit Title: D-Link DSL-2730B Modem wlsecrefresh.wl & wlsecurity.wl Exploit XSS Injection Stored

RedStar 2.0 Desktop – ‘World-writeable rc.sysinit’ Local Privilege Escalation

Red Star 2.0 desktop ships with a world-writeable "/etc/rc.d/rc.sysinit"

RedStar 3.0 Desktop – ‘Software Manager swmng.app’ Local Privilege Escalation

The root user is disabled on Red Star, and it doesn't look like there is a way to enable it.

D-Link DSL-2730B Modem – Cross-Site Scripting Injection Stored DnsProxy.cmd

# Exploit Title: D-Link DSL-2730B Modem dnsProxy.cmd Exploit XSS Injection Stored

D-Link DSL-2730B Modem – ‘Lancfg2get.cgi Persistent Cross-Site Scripting

# Exploit Title: D-Link DSL-2730B Modem lancfg2get.cgi Exploit XSS Injection Stored

Palringo 2.8.1 – Local Stack Buffer Overflow

#!/use/bin/perl

Apple Mac OSX 10.9.x – sysmond XPC Privilege Escalation

Source: https://code.google.com/p/google-security-research/issues/detail?id=121

vBulletin MicroCART 1.1.4 – Arbitrary Files Deletion / SQL Injection / Cross-Site Scripting

# Exploit Title: vBulletin MicroCART 1.1.4 - Arbitrary File(s) Deletion,

WordPress Plugin Shopping Cart 3.0.4 – Unrestricted Arbitrary File Upload

Pandora FMS 3.1 – Authentication Bypass / Arbitrary File Upload (Metasploit)

##

Ntpdc 4.2.6p3 – Local Buffer Overflow

# Source: https://hatriot.github.io/blog/2015/01/06/ntpdc-exploit/

Microweber CMS 0.95 – SQL Injection

# Exploit Title: SQL Injection in Microweber CMS 0.95

Pirelli ADSL2/2+ Wireless Router P.DGA4001N – Information Disclosure

- Title:

Sefrengo CMS 1.6.0 – SQL Injection

Advisory: SQL-Injection in administrative Backend of Sefrengo CMS v.1.6.0

AdaptCMS 3.0.3 – Multiple Vulnerabilities

#!/usr/bin/env python

Nexus 5 Android 5.0 – Local Privilege Escalation

create an Android.mk as follow:

BulletProof FTP Client – BPS Buffer Overflow (Metasploit)

##

SkinCrafter3 vs2005 3.8.1.0 – Multiple ActiveX Buffer Overflows

ActiveX Buffer Overflow in SkinCrafter3_vs2005

OP5 5.3.5/5.4.0/5.4.2/5.5.0/5.5.1 – ‘welcome’ Remote Command Execution (Metasploit)

##

ASUSWRT 3.0.0.4.376_1071 – LAN Backdoor Command Execution

#!/usr/bin/env python3

Crea8Social 2.0 – Cross-Site Scripting Change Interface

# Exploit Title: Crea8Social v.2.0 XSS Change Interface

e107 2 Bootstrap CMS – Cross-Site Scripting

_____ _____ ______

PhotoPost < 4.85 - Multiple Vulnerabilities

PhotoPost Multiple Vulnerabilities

ReviewPost < 2.84 - Multiple Vulnerabilities

ReviewPost Multiple Vulnerabilities

Microsoft Windows 8.1 (x86/x64) – ‘ahcache.sys’ NtApphelpCacheControl Privilege Escalation

# Source: https://code.google.com/p/google-security-research/issues/detail?id=118#c1

Absolut Engine 1.73 – Multiple Vulnerabilities

Advisory: Multiple SQL Injections and Reflecting XSS in Absolut Engine v.1.73 CMS

i-FTP Schedule – Local Buffer Overflow (Metasploit)

##

PhotoPost Classifieds < 2.01 - Multiple Vulnerabilities

PhotoPost Classifieds Multiple Vulnerabilities

Social Microblogging PRO 1.5 – Persistent Cross-Site Scripting

# Exploit Title: Social Microblogging PRO 1.5 Stored XSS Vulnerability

ProjectSend – Arbitrary File Upload (Metasploit)

##

Liferay Portal 7.0.0 M1/7.0.0 M2/7.0.0 M3 – Remote Code Execution

#!/bin/sh

PHP-Calendar < 0.10.1 - Arbitrary File Inclusion

PHP-Calendar Arbitrary File Inclusion

WhatsApp 2.11.476 (Android) – Remote Reboot/Crash App (Denial of Service)

# Mirror: http://pastebin.com/raw.php?i=CZChGAnG

Wickr Desktop 2.2.1 Windows – Denial of Service

Document Title:

Pimcore CMS 2.3.0/3.0 – SQL Injection

Document Title:

phpList 3.0.6/3.0.10 – SQL Injection

Document Title:

PMB 4.1.3 – (Authenticated) SQL Injection

# Exploit Title: PMB

Easy File Sharing Web Server 6.8 – Persistent Cross-Site Scripting

Exploit Title: Easy File Sharing Webserver =>6.8 Persistent XSS

WHM.AutoPilot < 2.4.6.5 - Multiple Vulnerabilities

WHM.AutoPilot Multiple Vulnerabilities

Lazarus Guestbook 1.22 – Multiple Vulnerabilities

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

BitRaider Streaming Client 1.3.3.4098 – Local Privilege Escalation

BitRaider Streaming Client 1.3.3.4098 Local Privilege Escalation Vulnerability

PHPMyRecipes 1.2.2 – ‘browse.php?category’ SQL Injection

##################################################################################################

jetAudio 8.1.3 Basic (mp3) – Crash (PoC)

# Exploit Title : jetAudio 8.1.3 Basic (Corrupted mp3) Crash POC

SysAid Server – Arbitrary File Disclosure

Vantage Point Security Advisory 2014-004