Exploits

ZTE ZXDSL 831CII – Insecure Direct Object Reference

# Exploit Title: ZTE ZXDSL 831 Insecure Direct Object Reference

WordPress Plugin Another WordPress Classifieds Plugin – SQL Injection

Exploit Title: Another Wordpress Classifieds Plugin sql injection and Cross Site Scripting

PHP-Fusion 7.02.07 – SQL Injection

# Exploit Title: PHP-Fusion 7.02.07 SQL Injection

Barracuda – Multiple Unauthentication Logfile Downloads

# Exploit Title: multiple Barracuda products logfile disclosure

ManageEngine OpManager / Social IT Plus / IT360 – Multiple Vulnerabilities

>> Multiple vulnerabilities in ManageEngine OpManager, Social IT Plus and IT360

Password Manager Pro / Pro MSP – Blind SQL Injection

>> Authenticated blind SQL injection in Password Manager Pro / Pro MSP

Visual Mining NetCharts Server – Remote Code Execution (Metasploit)

##

WordPress Plugin / Joomla! Component XCloner – Multiple Vulnerabilities

Title: XCloner Wordpress/Joomla! backup Plugin v3.1.1 (Wordpress) v3.5.1 (Joomla!) Vulnerabilities

ManageEngine OpManager / Social IT Plus / IT360 – Multiple Vulnerabilities

>> Multiple vulnerabilities in ManageEngine OpManager, Social IT Plus and IT360

Minix 3.3.0 – Local Denial of Service (PoC)

# Exploit Title: MINIX 3.3.0 Local Denial of Service

i-FTP 2.20 – Local Buffer Overflow (SEH)

#!/usr/bin/python

i.Hex 0.98 – Local Crash (PoC)

#!/usr/bin/python

i.Mage 1.11 – Local Crash (PoC)

#!/usr/bin/python

Citrix Netscaler SOAP Handler – Remote Code Execution (Metasploit)

##

Symantec Endpoint Protection 12.1.4023.4080 – Multiple Vulnerabilities

SEC Consult Vulnerability Lab Security Advisory < 20141106-0 >

VMware Workstation 10.0.0.40273 – ‘vmx86.sys’ Arbitrary Kernel Read

Title: VMWare vmx86.sys Arbitrary Kernel Read

X7 Chat 2.0.5 – ‘message.php’ PHP Code Execution (Metasploit)

##

Belkin N750 – ‘jump?login’ Remote Buffer Overflow

"""

MODx CMS 2.2.14 – Cross-Site Request Forgery Bypass / Reflected Cross-Site Scripting / Persistent Cross-Site Scripting

Advisory ID: 92152

Mouse Media Script 1.6 – Persistent Cross-Site Scripting

# Exploit Title: Mouse Media Script Stored XSS Vulnerability

ManageEngine EventLog Analyzer – Multiple Vulnerabilities (2)

>> Multiple vulnerabilities in ManageEngine EventLog Analyzer

PHP < 5.6.2 - 'Shellshock' Safe Mode / disable_functions Bypass / Command Injection

# Exploit Title: PHP 5.x Shellshock Exploit (bypass disable_functions)

Drupal 7.0 < 7.31 - 'Drupalgeddon' SQL Injection (Remote Code Execution)

Xerox Multifunction Printers (MFP) – ‘Patch’ DLM (Metasploit)

##

Apple Mac OSX (Mavericks) – ‘IOBluetoothHCIUserClient’ Privilege Escalation

#include

Drupal 7.0 < 7.31 - 'Drupalgeddon' SQL Injection (Admin Session)

Esotalk CMS 1.0.0g4 – Cross-Site Scripting

# Exploit Title: esotalk cms topics xss vulnerability

Progress OpenEdge 11.2 – Directory Traversal

# Exploit Title: Progress OpenEdge Directory Traversal

ZTE Modem ZXDSL 531BIIV7.3.0f_D09_IN – Persistent Cross-Site Scripting

# Exploit Title: ZTE Modem Stored XSS Vulnerability

Who’s Who Script – Cross-Site Request Forgery (Add Admin)

# Title : Who's Who Script CSRF Exploit (Add Admin Account)

Konke Smart Plug K – Authentication Bypass

-----------------------------------------------------------------------

Mini-stream RM-MP3 Converter 3.1.2.1.2010.03.30 – ‘.wax’ File Buffer Overflow (Denial of Service) (PoC) EIP Overwrite

#EDB Note: DoS - b0f isn't working.

IBM Tivoli Monitoring 6.2.2 kbbacf1 – Local Privilege Escalation

#!/bin/sh

MAARCH 1.4 – Arbitrary File Upload

# Exploit Title: Maarch 1.4 Arbitrary file upload

MAARCH 1.4 – SQL Injection

# Exploit Title: Maarch 1.4 SQL Injection

CUPS Filter – Bash Environment Variable Code Injection (Metasploit)

##

Enalean Tuleap 7.4.99.5 – Blind SQL Injection

Vulnerability title: Tuleap

Enalean Tuleap 7.2 – XML External Entity File Disclosure

Vulnerability title: Tuleap

Enalean Tuleap 7.4.99.5 – Remote Command Execution

Vulnerability title: Tuleap

Microsoft Windows – TrackPopupMenu Win32k Null Pointer Dereference (MS14-058) (Metasploit)

##

Tapatalk for vBulletin 4.x – Blind SQL Injection

#!/usr/bin/env python

WordPress Plugin CP Multi View Event Calendar 1.01 – SQL Injection

######################

Free WMA MP3 Converter 1.8 – ‘.wav’ Local Buffer Overflow

#!/usr/bin/env python

CBN CH6640E/CG6640E Wireless Gateway Series – Multiple Vulnerabilities

CBN CH6640E/CG6640E Wireless Gateway Series Multiple Vulnerabilities

HP Operations Agent – Cross-Site Scripting iFrame Injection

#!/usr/bin/python

Filemaker Pro 13.03 / Advanced 12.04 – Authentication Bypass / Privilege Escalation

Filemaker Login Bypass and Privilege Escalation

Centreon – SQL Injection / Command Injection (Metasploit)

##

Mulesoft ESB Runtime 3.5.1 – Privilege Escalation

Mulesoft ESB Runtime 3.5.1 Authenticated Privilege Escalation → Remote Code

Incredible PBX 2.0.6.5.0 – Remote Command Execution

#!/usr/bin/perl

Binary File Descriptor Library (libbfd) – Out-of-Bounds Crash

Many shell users, and certainly a lot of the people working in