Exploits

MusicBee 2.0.4663 – ‘.m3u’ Denial of Service

#!/usr/bin/perl

TP-Link TL-PS110U Print Server – ‘tplink-enum.py’ Security Bypass

source: https://www.securityfocus.com/bid/60682/info

Joomla! Component com_rokdownloads – Arbitrary File Upload

source: https://www.securityfocus.com/bid/60690/info

et-chat – Privilege Escalation / Arbitrary File Upload

source: https://www.securityfocus.com/bid/60660/info

WordPress Plugin Ultimate WordPress Auction Plugin 1.0 – Cross-Site Request Forgery

=============================================================

Fly-High CMS 2012-07-08 – Unrestricted Arbitrary File Upload

Adrenalin Player 2.2.5.3 – ‘.wax’ Local Buffer Overflow (SEH)

# !/usr/bin/python

Havalite CMS 1.1.7 – Unrestricted Arbitrary File Upload

SPBAS Business Automation Software 2012 – Multiple Vulnerabilities

# SPBAS Business Automation Software- XSS & CSRF Vulnerability

Winamp 5.12 – ‘.m3u’ Local Stack Buffer Overflow

# Exploit Title: Winamp 5.12 .m3u stack based buffer overflow

Simple File Manager 024 – Authentication Bypass

# Exploit Title: Simple File Manager v.024 Login Bypass Vulnerability

BloofoxCMS – ‘index.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/60585/info

TaxiMonger for Android – ‘name’ HTML Injection

source: https://www.securityfocus.com/bid/60566/info

ZamFoo – ‘date’ Remote Command Injection

source: https://www.securityfocus.com/bid/60826/info

LibrettoCMS 2.2.2 – Arbitrary File Upload

# Exploit Title : LibrettoCMS 2.2.2 Malicious File Upload

Easy LAN Folder Share 3.2.0.100 – Buffer Overflow

# Exploit Title: Easy LAN Folder Share Version 3.2.0.100 Buffer Overflow vulnerability(SEH)

Monkey HTTP Daemon Mandril Security Plugin – Security Bypass

source: https://www.securityfocus.com/bid/60569/info

AXIS Media Control 6.2.10.11 – Unsafe ActiveX Method

========================================================================

Airlive IP Cameras – Multiple Vulnerabilities

===========================================================================

Microsoft Internet Explorer – COALineDashStyleArray Integer Overflow (MS13-009) (Metasploit)

##

Syslog Server 1.2.3 – Crash (PoC)

#!/usr/bin/python

Ubiquiti airCam RTSP Service 1.1.5 – Buffer Overflow (PoC)

Core Security - Corelabs Advisory

Brickcom Multiple IP Cameras – Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/60526/info

Sony CH / DH Series IP Cameras – Multiple Cross-Site Request Forgery Vulnerabilities

source: https://www.securityfocus.com/bid/60529/info

Grandstream Multiple IP Cameras – Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/60532/info

WordPress Plugin NextGEN Gallery – ‘upload.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/60533/info

Java – Web Start Double Quote Injection Remote Code Execution (Metasploit)

##

WordPress Plugin WP-SendSms 1.0 – Multiple Vulnerabilities

=============================================================

Weathermap 0.97c – ‘mapname’ Local File Inclusion

=============================================

NanoBB 0.7 – Multiple Vulnerabilities

# Exploit Title : NanoBB 0.7 Multiple Vulnerabilities

Buffalo WZR-HP-G300NH2 – Cross-Site Request Forgery

######################################################################

WinRadius 2.11 – Denial of Service

#!/usr/bin/python

Linux Kernel < 3.8.9 (x86-64) - 'perf_swevent_init' Local Privilege Escalation (2)

#define _GNU_SOURCE

Fobuc Guestbook 0.9 – SQL Injection

# Exploit Title : Fobuc Guestbook 0.9 SQL Injection

Sami FTP Server 2.0.1 – RETR Denial of Service

#!/usr/bin/python

Synactis PDF In-The-Box – ConnectToSynactic Stack Buffer Overflow (Metasploit)

##

Java Applet – Driver Manager Privileged ‘toString()’ Remote Code Execution (Metasploit)

##

Simple PHP Agenda 2.2.8 – ‘edit_event.php?eventid’ SQL Injection

=============================================

mkCMS – ‘index.php’ Arbitrary PHP Code Execution

source: https://www.securityfocus.com/bid/60488/info

MobileIron Virtual Smartphone Platform – Privilege Escalation

MobileIron Virtual Smartphone Platform Privilege Escalation Exploit 0day

Resin Application Server 4.0.36 – Source Code Disclosure

Resin Application Server 4.0.36 Source Code Disclosure Vulnerability

Concrete5 CMS 5.6.1.2 – Multiple Vulnerabilities

=============================================================

Cisco ASA < 8.4.4.6 < 8.2.5.32 - Ethernet Information Leak

#!/usr/bin/env python

HP Insight Diagnostics – Remote Code Injection

source: https://www.securityfocus.com/bid/60447/info

HP Insight Diagnostics 9.4.0.4710 – Local File Inclusion

source: https://www.securityfocus.com/bid/60449/info

Lokboard – ‘index_4.php’ PHP Code Injection

source: https://www.securityfocus.com/bid/60459/info

ScriptCase – ‘scelta_categoria.php’ SQL Injection

source: https://www.securityfocus.com/bid/60461/info

Max Forum – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/60455/info

WordPress Theme Ambience – ‘src’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/60458/info

Ruubikcms 1.1.1 – Persistent Cross-Site Scripting

# Exploit Title: [ruubikcms v1.1.1 Stored XSS]