Exploits

Adobe Reader for Android 11.1.3 – Arbitrary JavaScript Execution

------------------------------------------------------------------------

Unitrends Enterprise Backup 7.3.0 – Root Remote Code Execution (Metasploit)

Unitrends Enterprise Backup 7.3.0

Xerox DocuShare – SQL Injection

The following request is vulnerable to a SQL injection in the last URI segment:

lxml – ‘clean_html’ Security Bypass

source: https://www.securityfocus.com/bid/67159/info

Microsoft Internet Explorer 10 – CMarkup Use-After-Free (MS14-012)

Sagem Fast 3304-V2 – Authentication Bypass (1)

# Title : Sagem F@st 3304-V2 Authentication Bypass

WordPress Theme LineNity 1.20 – Local File Inclusion

[+] Local File Inclusion in WordPress Theme LineNity

WhatsApp < 2.11.7 - Remote Crash

#!/usr/bin/python

PDF Album 1.7 iOS – Local File Inclusion

Document Title:

WordPress Plugin Quick Page/Post Redirect 5.0.3 – Multiple Vulnerabilities

Details

WordPress Plugin Twitget 3.3.1 – Multiple Vulnerabilities

Details

eScan Web Management Console – Command Injection (Metasploit)

# This module requires Metasploit: http//metasploit.com/download

Xangati – ‘/servlet/MGConfigData’ Multiple Directory Traversals

source: https://www.securityfocus.com/bid/66817/info

Xangati – ‘/servlet/Installer?file’ Directory Traversal

source: https://www.securityfocus.com/bid/66817/info

Xangati XSR / XNR – ‘gui_input_test.pl’ Remote Command Execution

source: https://www.securityfocus.com/bid/66819/info

Jigowatt PHP Event Calendar – ‘day_view.php’ SQL Injection

source: https://www.securityfocus.com/bid/66923/info

CubeCart 5.2.8 – Session Fixation

# Exploit Title: CubeCart 5.2.8 Session Fixation

Microweber CMS 0.93 – Cross-Site Request Forgery

###########################################################

ICOMM 610 Wireless Modem – Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/66593/info

Apple Mac OSX (Lion) Kernel xnu-1699.32.7 except xnu-1699.24.8 NFS Mount – Local Privilege Escalation

/* * Apple Mac OS X Lion Kernel

Sendy 1.1.9.1 – SQL Injection

# Exploit Title: Sendy 1.1.9.1 - SQL Injection Vulnerability

Sophos Web Protection Appliance Interface – (Authenticated) Arbitrary Command Execution (Metasploit)

##

XCloner Standalone 3.5 – Cross-Site Request Forgery

Advisory ID: HTB23207

OpenSSL TLS Heartbeat Extension – ‘Heartbleed’ Information Leak (1)

c->sslContext = SSL_CTX_new(SSLv23_client_method());

Orbit Open Ad Server 1.1.0 – SQL Injection

Advisory ID: HTB23208

Microsoft Word – RTF Object Confusion (MS14-017) (Metasploit)

##

Vtiger – ‘Install’ Remote Command Execution (Metasploit)

##

OpenSSL 1.0.1f TLS Heartbeat Extension – ‘Heartbleed’ Memory Disclosure (Multiple SSL/TLS Versions)

# Exploit Title: [OpenSSL TLS Heartbeat Extension - Memory Disclosure - Multiple SSL/TLS versions]

csUpload Script Site – Authentication Bypass

# Exploit Title: ["csUpload Script Site" Authentication Bypass]

Quick.CMS 5.4 – Multiple Vulnerabilities

# Exploit Title: QuickCms 5.4 Multiple Vulnerabilites

eazyCMS – ‘index.php’ SQL Injection

source: https://www.securityfocus.com/bid/66769/info

BlazeDVD Pro Player 6.1 – Stack Buffer Overflow Jump ESP

## Exploit-DB Note: XPSP3 - my $eip = pack('V',0x7c868667); #jmp ESP on kernel32.dll

Bluetooth Text Chat 1.0 iOS – Code Execution

Document Title:

Halon Security Router (SR) 3.2-winter-r1 – Multiple Vulnerabilities

ADVISORY INFORMATION

OpenSSL TLS Heartbeat Extension – ‘Heartbleed’ Memory Disclosure

#!/usr/bin/python

WinRAR – Filename Spoofing (Metasploit)

##

Fritz!Box Webcm – Command Injection (Metasploit)

##

Apple Mac OSX 10.9 – Hard Link Memory Corruption

MacOSX/XNU HFS Multiple Vulnerabilities

Joomla! Component Inneradmission – ‘index.php’ SQL Injection

source: https://www.securityfocus.com/bid/66708/info

XAMPP 3.2.1 & phpMyAdmin 4.1.6 – Multiple Vulnerabilities

# Title: XAMPP 3.2.1 & phpMyAdmin 4.1.6 "'> } in the url resulting in a reflected cross site scripting attack.

JIRA Issues Collector – Directory Traversal (Metasploit)

##

EagleGet 1.1.8.1 – Denial of Service

# Exploit Title: EagleGet 1.1.8.1 DoS Exploit

Notepad++ DSpellCheck 1.2.12.0 – Denial of Service

# Exploit Title: Notepad++ - DSpellCheck v1.2.12.0 plugin[DOS]

InfraRecorder 0.53 – Memory Corruption (Denial of Service)

###########################################################

Puntopy – ‘novedad.php’ SQL Injection

source: https://www.securityfocus.com/bid/67241/info

Private Photo+Video 1.1 Pro iOS – Persistent

Document Title:

MA Lighting Technology grandMA onPC 6.808 – Remote Denial of Service

MA Lighting Technology grandMA onPC v6.808 Remote Denial of Service Exploit

PHPFox – Access Control Security Bypass

source: https://www.securityfocus.com/bid/66677/info

ibstat $PATH – Local Privilege Escalation (Metasploit)

##

WordPress Plugin XCloner 3.1.0 – Cross-Site Request Forgery

Advisory ID: HTB23206