Exploits

Microsoft Windows 8.1/ Server 2012 – ‘Win32k.sys’ Local Privilege Escalation (MS14-058)

#include "hd.h"

Privacyware Privatefirewall 7.0 – Unquoted Service Path Privilege Escalation

Privacyware Privatefirewall 7.0 Unquoted Service Path Privilege Escalation

MyBB 1.8.2 – ‘unset_globals()’ Function Bypass / Remote Code Execution

# Exploit Title: MyBB unset_globals($_POST);

WordPress Plugin CM Download Manager 2.0.0 – Code Injection

# Vulnerability title: Code Injection in Wordpress CM Download Manager plugin 2.0.0

Netgear WNR500 Wireless Router – ‘webproc?getpage’ Traversal Arbitrary File Access

Netgear Wireless Router WNR500 Parameter Traversal Arbitrary File Access Exploit

Microsoft Windows – ‘win32k.sys’ Denial of Service

# Exploit Title: Microsoft Windows Win32k.sys Denial of Service

WordPress Plugin SP Client Document Manager 2.4.1 – SQL Injection

Vulnerability title: Multi SQL Injection in SP Client Document Manager plugin

FluxBB < 1.5.6 - SQL Injection

#!/usr/bin/env python

Microsoft Internet Explorer OLE Pre-IE11 – Automation Array Remote Code Execution / PowerShell VirtualAlloc (MS14-064)

|--------------------------------------------------------------------------|

Snowfox CMS 1.0 – Cross-Site Request Forgery (Add Admin)

Minix 3.3.0 – Remote TCP/IP Stack Denial of Service

_-------------------------------------------------------_

WordPress Plugin Paid Memberships Pro 1.7.14.2 – Directory Traversal

# Exploit Title: Paid Memberships Pro 1.7.14.2 Path Traversal

Samsung Galaxy KNOX Android Browser – Remote Code Execution (Metasploit)

##

Mantis Bug Tracker 1.2.0a3 < 1.2.17 XmlImportExport Plugin - PHP Code Injection (Metasploit) (2)

##

Mantis Bug Tracker 1.2.0a3 < 1.2.17 XmlImportExport Plugin - PHP Code Injection (Metasploit) (1)

##

MyBB Forums 1.8.2 – Persistent Cross-Site Scripting

####################################################################################

Maarch LetterBox 2.8 – (Authentication Bypass) Insecure Cookies

# Title : Maarch LetterBox 2.8 Insecure Cookie Handling Vulnerability (Login Bypass)

ZTE ZXHN H108L – Authentication Bypass (1)

# Exploit Title: ZTE ZXHN H108L Authentication Bypass

Microsoft Internet Explorer 8 – Fixed Col Span ID (Full ASLR + DEP + EMET 5.1 Bypass) (MS12-037)

PHPFox – Persistent Cross-Site Scripting

# Exploit Title: PHPFox XSS AdminCP

Proticaret E-Commerce Script 3.0 – SQL Injection (2)

Document Title:

ZTE ZXHN H108L – Authentication Bypass (2)

About the software

WebsiteBaker 2.8.3 – Multiple Vulnerabilities

=============================================

Zoph 0.9.1 – Multiple Vulnerabilities

=============================================

Apple Mac OSX Safari 8.0 – Crash (PoC)

@w3bd3vil

.NET Remoting Services – Remote Command Execution

Source: https://github.com/tyranid/ExploitRemotingService

Joomla! Component com_hdflvplayer < 2.1.0.1 - Arbitrary File Download

#!/usr/bin/env python

clientResponse Client Management 4.1 – Cross-Site Scripting

# Exploit Title: clientResponse Client Management XSS Vulnerability

OSSEC 2.8 – ‘hosts.deny’ Local Privilege Escalation

#!/usr/bin/python

Microsoft Windows – OLE Package Manager Code Execution (via Python) (MS14-064) (Metasploit)

##

Microsoft Windows – OLE Package Manager Code Execution (MS14-064) (Metasploit)

##

Gogs – ‘label’ SQL Injection

Blind SQL Injection in Gogs label search

Gogs – ‘users’/’repos’ ‘?q’ SQL Injection

Unauthenticated SQL Injection in Gogs repository search

Proticaret E-Commerce Script 3.0 – SQL Injection (1)

Document Title:

Joomla! Component com_hdflvplayer < 2.1.0.1 - SQL Injection

#!/usr/bin/python

Piwigo 2.6.0 – ‘picture.php?rate’ SQL Injection

=============================================

F5 BIG-IP 10.1.0 – Directory Traversal

+------------------------------------------------------+

Digi Online Examination System 2.0 – Unrestricted Arbitrary File Upload

# Exploit Title: Digi Online Examination System Unrestricted File Upload Vulnerability

MyBB 1.8.x – Multiple Vulnerabilities

#Title: MyBB 1.8.X - Multiple Vulnerabilities

Microsoft Internet Explorer 11 – OLE Automation Array Remote Code Execution (1)

//*

Microsoft Internet Explorer < 11 - OLE Automation Array Remote Code Execution (Metasploit)

##

Microsoft Office 2007/2010 – OLE Arbitrary Command Execution

#

CorelDRAW X7 CDR File – ‘CdrTxt.dll’ Off-by-One Stack Corruption

CorelDRAW X7 CDR File (CdrTxt.dll) Off-By-One Stack Corruption Vulnerability

WordPress Plugin SupportEzzy Ticket System 1.2.5 – Persistent Cross-Site Scripting

# Exploit Title: SupportEzzy Ticket System - WordPress Plugin Stored XSS

Subex Fms 7.4 – SQL Injection

=======================================================================================

WordPress Plugin Photo Gallery 1.2.5 – Unrestricted Arbitrary File Upload

# Exploit Title: Photo Gallery 1.2.5 Unrestricted File Upload

vldPersonals 2.7 – Multiple Vulnerabilities

# Exploit Title: VLD Personal – Multiple Vulnerabilities

Serenity Client Management Portal 1.0.1 – Multiple Vulnerabilities

# Exploit Title: Serenity Client Management Portal Multiple Vulnerabilities

phpSound Music Sharing Platform 1.0.5 – Multiple Cross-Site Scripting Vulnerabilities

# Exploit Title: phpSound Music Sharing Platform Multiple XSS Vulnerabilities

Microsoft Internet Explorer 11 – Denial of Service

# Exploit Title: [ IE D.O.S ]