Exploits

Alfresco – ‘/cmisbrowser?url’ Server-Side Request Forgery

source: https://www.securityfocus.com/bid/68/info

Kolibri Web Server 2.0 – GET (SEH)

#!/usr/bin/python

Shopizer 1.1.5 – Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE-----

D-Link Devices – ‘info.cgi’ POST Buffer Overflow (Metasploit)

##

D-Link HNAP – Request Remote Buffer Overflow (Metasploit)

##

D-Link Devices – UPnP M-SEARCH Multicast Command Injection (Metasploit)

##

HP Data Protector Manager 8.10 – Remote Command Execution

#!/usr/bin/python

WordPress Plugin CopySafe PDF Protection – Arbitrary File Upload

source: https://www.securityfocus.com/bid/68656/info

WEBMIS CMS – Arbitrary File Upload

source: https://www.securityfocus.com/bid/68658/info

WordPress Plugin DZS-VideoGallery – Cross-Site Scripting / Command Injection

source: https://www.securityfocus.com/bid/68525/info

OpenVPN Private Tunnel Core Service – Unquoted Service Path Privilege Escalation

OpenVPN Private Tunnel Core Service Unquoted Service Path Elevation Of Privilege

Aerohive HiveOS 5.1r5 < 6.1r5 - Multiple Vulnerabilities

# Exploit Title: Aerohive HiveOS XSS and (limited) LFI

C99Shell (Web Shell) – ‘c99.php’ Authentication Bypass

# Exploit Title: C99 Shell Authentication Bypass via Backdoor

OpenVAS Manager 4.0 – Authentication Bypass

#!/usr/bin/python

Infoblox 6.8.2.11 – OS Command Injection

Product: Network Automation, licensed as:

WeBid – Multiple Cross-Site Scripting / LDAP Injection Vulnerabilities

source: https://www.securityfocus.com/bid/68519/info

WordPress Plugin BSK PDF Manager – ‘/wp-admin/admin.php’ Multiple SQL Injections

source: https://www.securityfocus.com/bid/68488/info

Dolibarr ERP/CRM 3.5.3 – Multiple Vulnerabilities

Vulnerability Name: SQL injection

Yokogawa CS3000 – ‘BKFSim_vhfd.exe’ Remote Buffer Overflow (Metasploit)

##

Microsoft Internet Explorer 9/10 – CFormElement Use-After-Free / Memory Corruption (PoC) (MS14-035)

Netgear WNR1000v3 – Password Recovery Credential Disclosure (Metasploit)

#

Oracle Event Processing FileUploadServlet – Arbitrary File Upload (Metasploit)

##

Gitlist – Remote Command Execution (Metasploit)

##

WordPress Plugin MailPoet Newsletters 2.6.8 – ‘wysija-newsletters’ Arbitrary File Upload (Metasploit)

##

Photo Org WonderApplications 8.3 iOS – Local File Inclusion

Document Title:

AtomCMS – SQL Injection / Arbitrary File Upload

source: https://www.securityfocus.com/bid/68437/info

xClassified – ‘ads.php’ SQL Injection

source: https://www.securityfocus.com/bid/68438/info

Frog CMS 0.9.5 – Arbitrary File Upload

Exploit Title: Arbitrary File Upload in Frog CMS 0.9.5

Ubisoft Uplay 4.6 – Insecure File Permissions Privilege Escalation

Ubisoft Uplay 4.6 Insecure File Permissions Local Privilege Escalation

Baidu Spark Browser 26.5.9999.3511 – Remote Stack Overflow (Denial of Service)

Baidu Spark Browser v26.5.9999.3511 Remote Stack Overflow DoS PoC

Zurmo CRM – Persistent Cross-Site Scripting

# Affected software: Zurmo CRM

Kerio Control 8.3.1 – Blind SQL Injection

Document Title:

IBM Algorithmics RICOS 4.5.0 < 4.7.0 - Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE-----

Flussonic Media Server 4.1.25 < 4.3.3 - Arbitrary File Disclosure

Document Title:

Microsoft Internet Explorer 8 – Fixed Col Span ID (Full ASLR + DEP + EMET 4.1.x Bypass) (MS12-037)

Gitlist 0.4.0 – Remote Code Execution

from commands import getoutput

Chkrootkit 0.49 – Local Privilege Escalation

We just found a serious vulnerability in the chkrootkit package, which

Nagios Plugins check_dhcp 2.0.2 – Arbitrary Option File Read Race Condition

=============================================

Mailspect Control Panel 4.0.5 – Multiple Vulnerabilities

Document Title:

HP AutoPass License Server – Arbitrary File Upload (Metasploit)

##

Microsoft .NET Deployment Service – IE Sandbox Escape (MS14-009) (Metasploit)

##

Microsoft Registry Symlink – IE Sandbox Escape (MS13-097) (Metasploit)

##

Python CGIHTTPServer – Encoded Directory Traversal

Advisory: Python CGIHTTPServer File Disclosure and Potential Code

WordPress Plugin Simple Share Buttons Adder 4.4 – Multiple Vulnerabilities

Details

Endeca Latitude 2.2.2 – Cross-Site Request Forgery

Advisory: Endeca Latitude Cross-Site Request Forgery

Thomson TWG87OUIR – POST Password Cross-Site Request Forgery

#Author: nopesled

Lunar CMS 3.3 – Remote Command Execution

#!/usr/bin/env python

Cogent DataHub – Command Injection (Metasploit)

##

Multiple WordPress Plugins (TimThumb 2.8.13 / WordThumb 1.07) – ‘WebShot’ Remote Code Execution

######################################################################

Microsoft Internet Explorer 8/9/10 – ‘CInput’ Use-After-Free Crash (PoC) (MS14-035)

MS14-035 Internet Explorer CInput Use-after-free POC