Exploits

Print n Share 5.5 iOS – Multiple Web Vulnerabilities

Document Title:

WordPress Plugin PhotoSmash Galleries – ‘bwbps-uploader.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/64173/info

Apple Safari For Windows – PhishingAlert Security Bypass

source: https://www.securityfocus.com/bid/64543/info

D-Link DSR Router Series – Remote Command Execution

#!/usr/bin/python

Eaton Network Shutdown Module 3.21 – Remote PHP Code Injection

#!/usr/bin/env python

WordPress Plugin DZS Video Gallery 3.1.3 – Remote File Disclosure / Local File Disclosure

# Exploit Title: WordPress DZS Video Gallery (dzs-videogallery) 3.1.3 Plugins Remote and Local File Disclosure Vulner...

BoxBilling 3.6.11 – ‘mod_notification’ Persistent Cross-Site Scripting

BoxBilling 3.6.11 (mod_notification) Stored Cross-Site Scripting Vulnerability

WordPress Plugin page-flip-image-gallery – Arbitrary File Upload

###############################################################

Zimbra 2009-2013 – Local File Inclusion

# Exploit Title: Zimbra 0day exploit / Privilegie escalation via LFI

Enorth Webpublisher CMS – ‘thisday’ SQL Injection

source: https://www.securityfocus.com/bid/64110/info

NeoBill – ‘/modules/nullregistrar/PHPwhois/example.php?query’ Remote Code Execution

source: https://www.securityfocus.com/bid/64112/info

NeoBill – ‘/install/include/solidstate.php’ Multiple SQL Injections

source: https://www.securityfocus.com/bid/64112/info

NeoBill 0.9-alpha – ‘language’ Local File Inclusion

source: https://www.securityfocus.com/bid/64112/info

WordPress Plugin Easy Career Openings – ‘jobid’ SQL Injection

source: https://www.securityfocus.com/bid/64167/info

Wireless Transfer App 3.7 iOS – Multiple Web Vulnerabilities

Document Title:

SonicWALL Gms 7.x – Filter Bypass / Persistent

Document Title:

MySQL 5.0.x – IF Query Handling Remote Denial of Service

source: https://www.securityfocus.com/bid/23911/info

Imagam iFiles 1.16.0 iOS – Multiple Web Vulnerabilities

Document Title:

Steinberg MyMp3PRO 5.0 – Local Buffer Overflow (SEH) (DEP Bypass + ROP)

#!/usr/bin/ruby

Notepad++ Plugin Notepad 1.5 – Local Overflow

# Exploit Title: Notepad++ - Notepad# plugin local exploit

Cisco Prime Data Center Network Manager – Arbitrary File Upload (Metasploit)

##

ABB MicroSCADA – ‘wserver.exe’ Remote Code Execution (Metasploit)

##

Kimai 0.9.2 – ‘db_restore.php’ SQL Injection (Metasploit)

##

Microsoft – Tagged Image File Format ‘.TIFF’ Integer Overflow (Metasploit)

##

Chamilo Lms 1.9.6 – ‘profile.php?password’ SQL Injection

Advisory ID: HTB23182

Dokeos 2.2 RC2 – ‘index.php?language’ SQL Injection

Advisory ID: HTB23181

Microsoft Windows – ‘NDPROXY’ SYSTEM Privilege Escalation (MS14-002)

# NDPROXY Local SYSTEM privilege escalation

Photo Transfer Wifi 1.4.4 iOS – Multiple Web Vulnerabilities

Document Title:

WordPress Plugin Formcraft – SQL Injection

#######################################################################

D-Link DIR-Series Routers – ‘/model/__show_info.php’ Local File Disclosure

source: https://www.securityfocus.com/bid/64043/info

Multiple WordPress Orange Themes – Cross-Site Request Forgery (Arbitrary File Upload)

#Title : Wordpress Orange Themes CSRF File Upload Vulnerability

TVT TD-2308SS-B DVR – Directory Traversal

# Exploit Title: TVT TD-2308SS-B DVR directory traversal

PHPThumb – ‘PHPThumb.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/64041/info

FlashComs Chat 6.5 – Arbitrary File Upload

Ametys CMS 3.5.2 – ‘lang’ XPath Injection

Ametys CMS 3.5.2 (lang parameter) XPath Injection Vulnerability

TP-Link TL-WR740N / TL-WR740ND 150M Wireless Lite N Router – HTTP Denial of Service

# Exploit title: 150M Wireless Lite N Router HTTP DoS

Uptime Agent 5.0.1 – Stack Overflow

# Exploit Title: Up.Time Agent 5.0.1 Stack Overflow

Kingsoft Office Writer 2012 8.1.0.3385 – ‘.wps’ Local Buffer Overflow (SEH)

#!/usr/bin/python

Zend-Framework – Full Information Disclosure

# Exploit Title : Zend-Framework Full Info Disclosure

TP-Link TD-8840t – Cross-Site Request Forgery

######################################################################

Audacious Player 3.4.2/3.4.1 – ‘.mp3’ Crash (PoC)

# Exploit Title: Audacious Player 3.4.2/3.4.1 (Windows) (.mp3) - Crash POC

Scientific-Atlanta, Inc. DPR2320R2 – Multiple Cross-Site Request Forgery Vulnerabilities

###########################################################

MyBB 1.6.11 – Remote Code Execution

ZIP Password Recovery Professional 5.1 – ‘.zip’ Crash (PoC)

# Exploit Title: ZIP Password Recovery Professional 5.1 (.zip) - Crash POC

Adobe Acrobat Reader – ASLR + DEP Bypass with Sandbox Bypass

CVE-2013-0640/1

Microsoft Internet Explorer – CardSpaceClaimCollection ActiveX Integer Underflow (MS13-090) (Metasploit)

##

Microsoft Internet Explorer – COALineDashStyleArray Unsafe Memory Access (MS12-022) (Metasploit)

##

Apache Roller – OGNL Injection (Metasploit)

##

Palo Alto Networks Pan-OS 5.0.8 – Multiple Vulnerabilities

from http://thomaspollet.blogspot.be/2013/11/Palo-Alto-XSS.html

WordPress Plugin dzs-videogallery – Arbitrary File Upload

###################################################################################################