Exploits

Asus RT56U 3.0.0.4.360 – Remote Command Injection

# Exploit Title: Asus RT56U Remote Command Injection

Microsoft Internet Explorer – textNode Use-After-Free (MS13-037) (Metasploit)

##

PHP Ticket System Beta 1 – Cross-Site Request Forgery

1.

AfterLogic WebMail Lite PHP 7.0.1 – Cross-Site Request Forgery

1.

Novell ZENworks Mobile Device Managment 2.6.1/2.7.0 – Local File Inclusion (Metasploit)

##

Quick TFTP Server Pro 2.2 – Denial of Service

#!/usr/bin/python

Linux Kernel 3.3.5 – ‘b43’ Wireless Driver Privilege Escalation

source: https://www.securityfocus.com/bid/60410/info

Caucho Resin – ‘/resin-admin/’ URI Cross-Site Scripting

source: https://www.securityfocus.com/bid/60426/info

Caucho Resin – ‘index.php?logout’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/60426/info

Seowonintech Routers fw: 2.3.9 – File Disclosure

#!/usr/bin/perl

Netgear WPN824v3 – Unauthorized Configuration Download

Title:

Exim – ‘sender_address’ Remote Code Execution

#!/usr/bin/env python

Cuppa CMS – ‘/alertConfigField.php’ Local/Remote File Inclusion

# Exploit Title : Cuppa CMS File Inclusion

PEStudio 3.69 – Denial of Service

# Title: PEStudio Version 3.69 Denial of Service

Ruubikcms 1.1.1 – ‘tinybrowser.php?folder’ Directory Traversal

# Exploit Title: [ruubikcms v1.1.1 Path Traversal vulnerability]

Apple Mac OSX Server – DirectoryService Buffer Overflow

Core Security - Corelabs Advisory

MiniUPnPd 1.0 – Remote Stack Buffer Overflow Remote Code Execution (Metasploit)

##

DS3 Authentication Server – Multiple Vulnerabilities

Original: http://www.digitalsec.net/stuff/explt+advs/DS3.AuthServer.txt

Imperva SecureSphere Operations Manager 9.0.0.5 – Multiple Vulnerabilities

Original: http://www.digitalsec.net/stuff/explt+advs/Imperva-SecureSphere.OptMgr.txt

Netgear DGN1000 / DGN2200 – Multiple Vulnerabilities

Unauthenticated command execution on Netgear DGN devices

Oracle WebCenter Content – ‘CheckOutAndOpen.dll’ ActiveX Remote Code Execution (Metasploit)

##

Apache Struts – includeParams Remote Code Execution (Metasploit)

##

Plesk < 9.5.4 - Remote Command Execution

Plesk Apache zeroday / June 2013

Xpient – Cash Drawer Operation

Core Security - Corelabs Advisory

Apache Struts – OGNL Expression Injection

source: https://www.securityfocus.com/bid/60345/info

QNAP VioStor NVR / QNAP NAS – Remote Code Execution

source: https://www.securityfocus.com/bid/60354/info

Linux Kernel 3.0.5 – ‘test_root()’ Local Denial of Service

source: https://www.securityfocus.com/bid/60586/info

Telaen 2.7.x – Cross-Site Scripting

source: https://www.securityfocus.com/bid/60288/info

Telaen 2.7.x – Open Redirection

source: https://www.securityfocus.com/bid/60290/info

CMS Gratis Indonesia – ‘config.php’ PHP Code Injection

source: https://www.securityfocus.com/bid/60337/info

MongoDB – ‘conn’ Mongo Object Remote Code Execution

source: https://www.securityfocus.com/bid/61309/info

Microsoft Windows NT/2000/2003/2008/XP/Vista/7/8 – ‘EPATHOBJ’ Local Ring

#ifndef WIN32_NO_STATUS

PHD Help Desk 2.12 – SQL Injection

# Exploit Title: PHD Help Desk 2.12 SQLi

Telaen – Information Disclosure

source: https://www.securityfocus.com/bid/60340/info

BOINC Manager (Seti@home) 7.0.64 – Field Buffer Overflow (SEH)

# Exploit Title: BOINC Manager 7.0.64 Field stack based buffer overflow

PhpTax 0.8 – File Manipulation ‘newvalue’ / Remote Code Execution

#

Lianja SQL 1.0.0RC5.1 – db_netserver Stack Buffer Overflow (Metasploit)

##

ModSecurity – Remote Null Pointer Dereference

Source: http://packetstormsecurity.com/files/121815/modsecurity_cve_2013_2765_check.py.txt

Logic Print 2013 – vTable Overwrite Stack Overflow

Intrasrv Simple Web Server 1.0 – Remote Code Execution (SEH)

# Exploit Title: Intrasrv Simple Web Server 1.0 SEH based Remote Code Execution BOF

Monkey HTTPd 1.1.1 – Crash (PoC)

Title:

CodeBlocks 12.11 (OSX) – Crash (PoC)

# Exploit Title: CodeBlocks 12.11 (Mac OS X) Crash POC

TP-Link WR842ND – Remote Multiple SSID Directory Traversals

#!/usr/bin/python

YeaLink IP Phone Firmware 9.70.0.100 – Phone Call

# Exploit Title: [YeaLink IP Phone SIP-TxxP firmware

TP-Link IP Cameras Firmware 1.6.18P12 – Multiple Vulnerabilities

Core Security - Corelabs Advisory

MayGion IP Cameras Firmware 09.27 – Multiple Vulnerabilities

Core Security - Corelabs Advisory

IBM SPSS SamplePower C1Tab – ActiveX Heap Overflow (Metasploit)

##

Zavio IP Cameras Firmware 1.6.03 – Multiple Vulnerabilities

Core Security - Corelabs Advisory

Code::Blocks – Denial of Service

source: https://www.securityfocus.com/bid/60208/info

HostBill – ‘cpupdate.php’ Authentication Bypass

source: https://www.securityfocus.com/bid/60958/info