Exploits

Crime24 Stealer Panel 1.0 – Multiple Vulnerabilities

#=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

Seagate BlackArmor NAS – Multiple Vulnerabilities

# Exploit Title: Seagate BlackArmor NAS Multiple Vulnerabilities

Alienvault Open Source SIEM (OSSIM) – SQL Injection / Remote Code Execution (Metasploit)

##

Apache Struts – ClassLoader Manipulation Remote Code Execution (Metasploit)

##

F5 BIG-IQ 4.1.0.2013.0 – Privilege Escalation (Metasploit)

##

Fritz!Box – Remote Command Execution

App : Fritz!Box

Netgear DGN2200 1.0.0.29_1.7.29_HotS – Persistent Cross-Site Scripting

# Exploit Title: Stored XSS Vulnerability in NETGEAR DGN2200 Web interface

Beetel 450TC2 Router – Cross-Site Request Forgery (Admin Password)

​​

TRENDnet TEW-634GRU 1.00.23 – Multiple Vulnerabilities

# Title: TRENDnet TEW-634GRU 1.00.23 Multiple Vulnerabilities

NULL NUKE CMS 2.2 – Multiple Vulnerabilities

NULL NUKE CMS v2.2 Multiple Vulnerabilities

Adobe Flash Player – Type Confusion Remote Code Execution (Metasploit)

##

Wireshark 1.8.12/1.10.5 – wiretap/mpeg.c Stack Buffer Overflow (Metasploit)

# Exploit Title: Wireshark 1.8.12/1.10.5 wiretap/mpeg.c Stack Buffer

ApPHP MicroBlog 1.0.1 – Remote Command Execution

#!/usr/bin/python

McAfee ePolicy Orchestrator 4.6.0 < 4.6.5 - 'ePowner' Multiple Vulnerabilities

# Exploit Title: McAfee ePolicy Orchestrator 4.6.0-4.6.5 (ePowner) - Multiple vulnerabilities

Adem 0.5.1 – Local File Inclusion

----------[exploit Debut]

NTP ntpd monlist Query Reflection – Denial of Service

//------------------------------------------------------------------------------------------------//

GeoCore MAX DB Ver. 7.3.3 – Blind SQL Injection

###########################################################################################

WordPress Plugin iMember360 3.8.012 < 3.9.001 - Multiple Vulnerabilities

------------

Symantec Endpoint Protection Manager 12.1.x – Overflow (SEH) (PoC)

# Exploit-DB Mirror: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/33056-sepm-seca...

ApPHP MicroBlog 1.0.1 – Multiple Vulnerabilities

----------[exploit Debut]

cFos Personal Net 3.09 – Remote Heap Memory Corruption (Denial of Service)

cFos Personal Net v3.09 Remote Heap Memory Corruption Denial of Service

miSecureMessages 4.0.1 – Session Management / Authentication Bypass

Affected Product

Depot WiFi 1.0.0 iOS – Multiple Vulnerabilities

Document Title:

Kolibri Web Server 2.0 – GET Stack Buffer Overflow

#!/usr/bin/python

JRuby Sandbox 0.2.2 – Sandbox Escape

Phenoelit Advisory

Acunetix 8 build 20120704 – Remote Stack Overflow

#!/usr/bin/python

OpenSSL TLS Heartbeat Extension – ‘Heartbleed’ Information Leak (2) (DTLS Support)

/* * CVE-2014-0160 heartbleed OpenSSL information leak exploit * =========================================================...

Bonefire 0.7.1 – Reinstall Admin Account

#!/usr/bin/env python

WordPress Plugin Work-The-Flow 1.2.1 – Arbitrary File Upload

# Author: nopesled

dompdf 0.6.0 – ‘dompdf.php?read’ Arbitrary File Read

Vulnerability title: Arbitrary file read in dompdf

WD Arkeia Virtual Appliance 10.2.9 – Local File Inclusion

SEC Consult Vulnerability Lab Security Advisory < 20140423-0 >

Alienvault 4.3.1 – SQL Injection / Cross-Site Scripting

AlienVault 4.3.1 Unauthenticated SQL Injection

HP Laser Jet – JavaScript Persistent Cross-Site Scripting via PJL Directory Traversal

#!/usr/bin/perl

Sixnet Sixview 2.4.1 – Web Console Directory Traversal

#Exploit Title: Sixnet sixview web console directory traversal

No-CMS 0.6.6 rev 1 – Admin Account Hijacking / Remote Code Execution via Static Encryption Key

kitForm CRM Extension 0.43 – ‘sorter.ph?sorter_value’ SQL Injection

-----BEGIN PGP SIGNED MESSAGE-----

Apple Mac OSX – Local Security Bypass

// source: https://www.securityfocus.com/bid/67023/info

iDevAffiliate – ‘idevads.php’ SQL Injection

source: https://www.securityfocus.com/bid/67031/info

Adobe Flash Player – Regular Expression Heap Overflow (Metasploit)

##

COMTREND CT-5361T Router – ‘Password.cgi’ Cross-Site Request Forgery (Admin Password Manipulation)

source: https://www.securityfocus.com/bid/67033/info

Teracom Modem T2-B-Gawv1.4U10Y-BI – Cross-Site Request Forgery

# Exploit Title: Teracom Modem CSRF Vulnerability

PTCeffect 4.6 – Local File Inclusion / SQL Injection

# Exploit Title: PTCeffect LFI & SQL Injection Vulnerabilities

NRPE 2.15 – Remote Command Execution

=============================================

Linux Kernel – ‘group_info’ refcounter Overflow Memory Corruption

#include

CMSimple 4.4/4.4.2 – Remote File Inclusion

=============================================================================================================

Sercomm TCP/32674 – Backdoor Reactivation

#include

SAP Router – Timing Attack Password Disclosure

Core Security - Corelabs Advisory

Jzip – Buffer Overflow (PoC) (SEH Unicode)

#!/usr/bin/python

Microsoft Internet Explorer – CMarkup Use-After-Free (MS14-012) (Metasploit)

##

Netgear WNDR3400 N600 Wireless Dual Band – Multiple Vulnerabilities

Title: Multiple vulnerabilities in NETGEAR N600 WIRELESS DUAL BAND WNDR3400