Exploits

AllReader 1.0 iOS – Multiple Vulnerabilities

Document Title:

Bluetooth Photo-File Share 2.1 iOS – Multiple Vulnerabilities

Document Title:

IPSwitch IMail Server WEB client 12.4 – Persistent Cross-Site Scripting

# Exploit Title: IPSwitch IMail Server WEB client 12.4 persistent XSS

WordPress Plugin Participants Database 1.5.4.8 – SQL Injection

Yarubo #1: Arbitrary SQL Execution in Participants Database for Wordpress

dbus-glib pam_fprintd – Local Privilege Escalation

#include

Easy File Management Web Server 5.3 – ‘UserID’ Remote Buffer Overflow (ROP)

#!/usr/bin/python

Linux Kernel 3.2.0-23/3.5.0-23 (Ubuntu 12.04/12.04.1/12.04.2 x64) – ‘perf_swevent_init’ Local Privilege Escalation (3)

#define _GNU_SOURCE 1

Microsoft Internet Explorer 11 – WeakMap Integer Divide-by-Zero

ElasticSearch Dynamic Script – Arbitrary Java Execution (Metasploit)

##

Huawei E303 Router – Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/67747/info

TORQUE Resource Manager 2.5.x < 2.5.13 - Stack Buffer Overflow Stub

#!/usr/bin/env python

AuraCMS 3.0 – Multiple Vulnerabilities

# Exploit Title: AuraCMS 3.0 Multiple Vulnerabilities

Wireshark CAPWAP Dissector – Denial of Service (Metasploit)

#

Sharetronix 3.3 – Multiple Vulnerabilities

Advisory ID: HTB23214

webEdition CMS – ‘we_fs.php’ SQL Injection

source: https://www.securityfocus.com/bid/67689/info

Linux Kernel 3.3.5 – ‘/drivers/media/media-device.c’ Local Information Disclosure

source: https://www.securityfocus.com/bid/68048/info

WordPress Plugin BookX 1.7 – ‘bookx_export.php’ Local File Inclusion

source: https://www.securityfocus.com/bid/68556/info

WordPress Plugin WP Rss Poster – ‘/wp-admin/admin.php’ SQL Injection

source: https://www.securityfocus.com/bid/68557/info

WordPress Plugin ENL NewsLetter – ‘/wp-admin/admin.php’ SQL Injection

source: https://www.securityfocus.com/bid/68558/info

WordPress Plugin Tera Charts (tera-charts) – ‘/charts/treemap.php?fn’ Directory Traversal

source: https://www.securityfocus.com/bid/68662/info

WordPress Plugin Tera Charts (tera-charts) – ‘/charts/zoomabletreemap.php?fn’ Directory Traversal

source: https://www.securityfocus.com/bid/68662/info

WordPress Plugin HDW Player – ‘/wp-admin/admin.php’ SQL Injection

source: https://www.securityfocus.com/bid/69105/info

Easy File Sharing FTP Server 3.5 – Remote Stack Buffer Overflow

#!/usr/bin/env python

Castor Library – XML External Entity Information Disclosure

source: https://www.securityfocus.com/bid/67676/info

Videos Tube 1.0 – Multiple SQL Injections

# Exploit Title: Videos Tube SQL Injection and Remote Code Execution

Linux Kernel 3.14-rc1 < 3.15-rc4 (x64) - Raw Mode PTY Echo Race Condition Privilege Escalation

#include

ZYXEL P-660HW-T1 3 Wireless Router – Cross-Site Request Forgery

# Exploit Title: Zyxel P-660HW-T1 v3 Wireless Router - CSRF Vulnerabilities

D-Link Routers – Multiple Vulnerabilities

The following five D-Link model routers suffer from several

Symantec Workspace Streaming – Arbitrary File Upload (Metasploit)

##

User Cake – Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/67604/info

dpkg Source Package – Index: pseudo-header Processing Multiple Local Directory Traversals

source: https://www.securityfocus.com/bid/67727/info

InfraRecorder – ‘.m3u’ File Buffer Overflow (PoC)

source: https://www.securityfocus.com/bid/67076/info

Mayan-EDms Web-Based Document Management OS System – Multiple Persistent Cross-Site Scripting Vulnerabilities

# Exploit Title: Multiple Stored XSS

Web Terra 1.1 – ‘books.cgi’ Remote Command Execution

[+] Remote Comand Execution on books.cgi Web Terra v. 1.1

Core FTP Server 1.2 build 535 (32-bi)t – Crash (PoC)

#!/usr/bin/python

PHP-Nuke ‘Submit_News’ Component – SQL Injection

source: https://www.securityfocus.com/bid/67656/info

Pyplate – ‘addScript.py’ Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/67610/info

Microsoft Windows – Touch Injection API Local Denial of Service

// source: https://www.securityfocus.com/bid/67742/info

Easy File Management Web Server 5.3 – Remote Stack Buffer Overflow

#!/usr/bin/env python

Easy Address Book Web Server 1.6 – Remote Stack Buffer Overflow

#!/usr/bin/env python

Binatone DT 850W Wireless Router – Multiple Cross-Site Request Forgery Vulnerabilities

# Exploit Title: Binatone DT 850W Wireless Router - Multiple CSRF Vulnerabilities

Apache mod_wsgi – Information Disclosure

source: https://www.securityfocus.com/bid/67534/info

WordPress Plugin Booking System (Booking Calendar) – ‘booking_form_id’ SQL Injection

source: https://www.securityfocus.com/bid/67535/info

Clipperz Password Manager – ‘/backend/PHP/src/setup/rpc.php’ Remote Code Execution

source: https://www.securityfocus.com/bid/67498/info

SPIP CMS < 2.0.23/ 2.1.22/3.0.9 - Privilege Escalation

#!/usr/bin/env python

CyberLink Power2Go Essential 9.0.1002.0 – Registry Buffer Overflow (SEH Unicode)

#!/usr/bin/perl

SafeNet Sentinel Protection Server 7.0 < 7.4 / Sentinel Keys Server 1.0.3 < 1.0.4 - Directory Traversal

#!/usr/bin/python

AoA Audio Extractor Basic 2.3.7 – ActiveX

AoA DVD Creator 2.6.2 – ActiveX

AoA MP4 Converter 4.1.2 – ActiveX