Exploits

Nessus Web UI 2.3.3 – Persistent Cross-Site Scripting

Nessus Web UI 2.3.3: Stored XSS

WordPress Plugin Creative Contact Form 0.9.7 – Arbitrary File Upload

==========================================================

OpenSSH < 6.6 SFTP (x64) - Command Execution

#define _GNU_SOURCE

HttpCombiner ASP.NET – Remote File Disclosure

# Exploit Title: HttpCombiner ASP.NET Remote File Disclosure Vulnerability

Asx to Mp3 2.7.5 – Local Stack Overflow

###########################################################################################

Bash CGI – ‘Shellshock’ Remote Command Injection (Metasploit)

##

Postfix SMTP 4.2.x < 4.2.48 - 'Shellshock' Remote Command Injection

#!/bin/python

Apache mod_cgi – ‘Shellshock’ Remote Command Injection

#!/usr/bin/env python

Ultra Electronics 7.2.0.19/7.4.0.7 – Multiple Vulnerabilities

Ultra Electronics / AEP Networks - SSL VPN (Netilla / Series A / Ultra

OpenVPN 2.2.29 – ‘Shellshock’ Remote Command Injection

# Exploit Title: ShellShock OpenVPN Exploit

Bacula-Web 5.2.10 – ‘joblogs.php?jobid’ SQL Injection

bacula-web 5.2.10 vulnerability

Rejetto HTTP File Server (HFS) 2.3a/2.3b/2.3c – Remote Command Execution

==========================================================

WordPress Plugin All In One WP Security & Firewall 3.8.3 – Persistent Cross-Site Scripting

Document Title:

Kolibri WebServer 2.0 – Remote Buffer Overflow (EMET 5.0 / EMET 4.1 Partial Bypass)

#!/bin/python

TeamSpeak Client 3.0.14 – Buffer Overflow

#################################################################################################

RBS Change Complet Open Source 3.6.8 – Cross-Site Request Forgery

# Exploit Title: RBS Change Complet Open Source CSRF

GNU bash 4.3.11 – Environment Variable dhclient

#!/usr/bin/python

PHPCompta/NOALYSS 6.7.1 5638 – Remote Command Execution

Vulnerability title: Remote Command Execution in PHPCompta/NOALYSS

Pure-FTPd – External Authentication Bash Environment Variable Code Injection (Metasploit)

##

TestLink 1.9.11 – Multiple SQL Injections

Vulnerability title: Multiple SQL Injection Vulnerabilities in TestLink

Epicor Enterprise 7.4 – Multiple Vulnerabilities

"Epicor Enterprise vulnerabilities"

Moab < 7.2.9 - Authentication Bypass

##[Moab Authentication Bypass : CVE-2014-5300]##

HP Network Node Manager I – PMD Buffer Overflow (Metasploit)

##

ManageEngine OpManager / Social IT – Arbitrary File Upload (Metasploit)

##

IPFire – CGI Web Interface (Authenticated) Bash Environment Variable Code Injection

#!/usr/bin/env python

Microsoft Internet Explorer 8 – Fixed Col Span ID (Full ASLR + DEP + EMET 5.0 Bypass) (MS12-037)

GS Foto Uebertraeger 3.0 iOS – Local File Inclusion

Document Title:

Microsoft Exchange – IIS HTTP Internal IP Address Disclosure (Metasploit)

# Exploit Title: Microsoft Exchange IIS HTTP Internal IP Disclosure Vulnerability

OpenFiler 2.99.1 – Cross-Site Request Forgery

DoS

dhclient 4.1 – Bash Environment Variable Command Injection (Shellshock)

#!/usr/bin/python

Typo3 Extension JobControl 2.14.0 – Cross-Site Scripting / SQL Injection

Mogwai Security Advisory MSA-2014-02

dbPowerAmp < 2.0/10.0 - Local Buffer Overflow

dbPowerAmp Buffer Overflow

WordPress Plugin Login Widget With ShortCode 3.1.1 – Multiple Vulnerabilities

Details

OSClass 3.4.1 – ‘index.php’ Local File Inclusion

Information

Cart Engine 3.0 – Multiple Vulnerabilities

=== Details ===

GNU Bash – ‘Shellshock’ Environment Variable Command Injection

Exploit Database Note:

Bash – ‘Shellshock’ Environment Variables Command Injection

GNU Bash – Environment Variable Command Injection (Metasploit)

require 'msf/core'

Nucom ADSL ADSLR5000UN – ISP Credentials Disclosure

#!/usr/bin/perl

WordPress Plugin All In One WP Security 3.8.2 – SQL Injection

Advisory ID: HTB23231

ZYXEL Prestig P-660HNU-T1 – ISP Credentials Disclosure

#!/usr/bin/perl

WS10 Data Server – SCADA Overflow (PoC)

## Exploit Title: WS10 Data Server SCADA Exploit Overflow PoC

Onlineon E-Ticaret – Database Disclosure

#!/usr/bin/env python

Joomla! Component com_facegallery 1.0 – Multiple Vulnerabilities

######################

Joomla! Component com_macgallery 1.5 – Arbitrary File Download

######################

EMC AlphaStor Device Manager Opcode 0x75 – Command Injection (Metasploit)

require 'msf/core'

Advantech Webaccess – dvs.ocx GetColor Buffer Overflow (Metasploit)

##

Glype 1.4.9 – Cookie Injection Directory Traversal Local File Inclusion

------------------------------------------------------------------------

Glype 1.4.9 – Local Address Filter Bypass

------------------------------------------------------------------------

Restaurant Script (PizzaInn Project) – Persistent Cross-Site Scripting

Title: Pizza Inn Registration Stored XSS