Exploits

PackWeb Formap E-learning 1.0 – ‘NumCours’ SQL Injection

# Exploit Title: PackWeb Formap E-learning 1.0 - 'NumCours' SQL Injection

EyesOfNetwork 5.3 – Remote Code Execution

# Exploit Title: EyesOfNetwork 5.3 - Remote Code Execution

ExpertGPS 6.38 – XML External Entity Injection

[+] Exploit Title: ExpertGPS 6.38 - XML External Entity Injection

Google Invisible RECAPTCHA 3 – Spoof Bypass

# Exploit Title: Google Invisible RECAPTCHA 3 - Spoof Bypass

AbsoluteTelnet 11.12 – “license name” Denial of Service (PoC)

# Exploit Title: AbsoluteTelnet 11.12 - "license name" Denial of Service (PoC)

AbsoluteTelnet 11.12 – ‘license name’ Denial of Service (PoC)

# Exploit Title: AbsoluteTelnet 11.12 - "license name" Denial of Service (PoC)

Online Job Portal 1.0 – ‘user_email’ SQL Injection

# Exploit Title: Online Job Portal 1.0 - 'user_email' SQL Injection

VIM 8.2 – Denial of Service (PoC)

# Exploit Title: VIM 8.2 - Denial of Service (PoC)

ELAN Smart-Pad 11.10.15.1 – ‘ETDService’ Unquoted Service Path

#Exploit Title: ELAN Smart-Pad 11.10.15.1 - 'ETDService' Unquoted Service Path

AbsoluteTelnet 11.12 – ‘SSH2/username’ Denial of Service (PoC)

# Exploit Title: AbsoluteTelnet 11.12 - 'SSH2/username' Denial of Service (PoC)

TapinRadio 2.12.3 – ‘address’ Denial of Service (PoC)

# Exploit Title: TapinRadio 2.12.3 - 'address' Denial of Service (PoC)

Online Job Portal 1.0 – Remote Code Execution

# Exploit Title: Online Job Portal 1.0 - Remote Code Execution

TapinRadio 2.12.3 – ‘username’ Denial of Service (PoC)

# Exploit Title: TapinRadio 2.12.3 - 'username' Denial of Service (PoC)

RarmaRadio 2.72.4 – ‘username’ Denial of Service (PoC)

# Exploit Title: RarmaRadio 2.72.4 - 'username' Denial of Service (PoC)

RarmaRadio 2.72.4 – ‘server’ Denial of Service (PoC)

# Exploit Title: RarmaRadio 2.72.4 - 'server' Denial of Service (PoC)

Online Job Portal 1.0 – Cross Site Request Forgery (Add User)

# Exploit Title: Online Job Portal 1.0 - Cross Site Request Forgery (Add User)

Ecommerce Systempay 1.0 – Production KEY Brute Force

# Exploit Title: Ecommerce Systempay 1.0 - Production KEY Brute Force

Cisco Data Center Network Manager 11.2 – Remote Code Execution

#!/usr/bin/python

Cisco Data Center Network Manager 11.2.1 – ‘getVmHostData’ SQL Injection

#!/usr/bin/python

Cisco Data Center Network Manager 11.2.1 – ‘LanFabricImpl’ Command Injection

#!/usr/bin/python

Sudo 1.8.25p – ‘pwfeedback’ Buffer Overflow

#!/bin/bash

AVideo Platform 8.1 – Information Disclosure (User Enumeration)

# Exploit Title: AVideo Platform 8.1 - Information Disclosure (User Enumeration)

Wago PFC200 – Authenticated Remote Code Execution (Metasploit)

# Exploit Title: Wago PFC200 - Authenticated Remote Code Execution (Metasploit)

Socat 1.7.3.4 – Heap-Based Overflow (PoC)

# Exploit Title: Socat 1.7.3.4 - Heap Based Overflow (PoC)

xglance-bin 11.00 – Privilege Escalation

# Exploit Title: xglance-bin 11.00 - Privilege Escalation

Kronos WebTA 4.0 – Authenticated Remote Privilege Escalation

# Exploit Title: Kronos WebTA 4.0 - Authenticated Remote Privilege Escalation

Verodin Director Web Console 3.5.4.0 – Remote Authenticated Password Disclosure (PoC)

# Exploit Title: Verodin Director Web Console 3.5.4.0 - Remote Authenticated Password Disclosure (PoC)

AVideo Platform 8.1 – Cross Site Request Forgery (Password Reset)

# Exploit Title: AVideo Platform 8.1 - Cross Site Request Forgery (Password Reset)

HiSilicon DVR/NVR hi3520d firmware – Remote Backdoor Account

# Exploit Title: HiSilicon DVR/NVR hi3520d firmware - Remote Backdoor Account

Centreon 19.10.5 – ‘Pollers’ Remote Command Execution (Metasploit)

##

Sudo 1.8.25p – ‘pwfeedback’ Buffer Overflow (PoC)

# Title: Sudo 1.8.25p - Buffer Overflow

F-Secure Internet Gatekeeper 5.40 – Heap Overflow (PoC)

# Title: F-Secure Internet Gatekeeper 5.40 - Heap Overflow (PoC)

BearFTP 0.1.0 – ‘PASV’ Denial of Service

# Exploit Title: BearFTP 0.1.0 - 'PASV' Denial of Service

IceWarp WebMail 11.4.4.1 – Reflective Cross-Site Scripting

# Title: IceWarp WebMail 11.4.4.1 - Reflective Cross-Site Scripting

phpList 3.5.0 – Authentication Bypass

# Exploit Title: phpList 3.5.0 - Authentication Bypass

Jira 8.3.4 – Information Disclosure (Username Enumeration)

# Exploit Title: Jira 8.3.4 - Information Disclosure (Username Enumeration)

Schneider Electric U.Motion Builder 1.3.4 – Authenticated Command Injection

# Exploit Title: Schneider Electric U.Motion Builder 1.3.4 - Authenticated Command Injection

School ERP System 1.0 – Cross Site Request Forgery (Add Admin)

# Title: School ERP System 1.0 - Cross Site Request Forgery (Add Admin)

P2PWIFICAM2 for iOS 10.4.1 – ‘Camera ID’ Denial of Service (PoC)

# Exploit Title: P2PWIFICAM2 for iOS 10.4.1 - 'Camera ID' Denial of Service (PoC)

Cacti 1.2.8 – Authenticated Remote Code Execution

#!/usr/bin/python3

Cacti 1.2.8 – Unauthenticated Remote Code Execution

#!/usr/bin/python3

Lotus Core CMS 1.0.1 – Local File Inclusion

# Exploit Title: Lotus Core CMS 1.0.1 - Local File Inclusion

FlexNet Publisher 11.12.1 – Cross-Site Request Forgery (Add Local Admin)

# Exploit Title: FlexNet Publisher 11.12.1 - Cross-Site Request Forgery (Add Local Admin)

Microsoft Windows Media Center WMV / WMA 6.3.9600.16384 – Code Execution

# Exploit Title: Microsoft Windows Media Center WMV or WMA 6.3.9600.16384 - Code Execution

rConfig 3.9.3 – Authenticated Remote Code Execution

# Exploit Title: rConfig 3.9.3 - Authenticated Remote Code Execution

OpenSMTPD 6.6.1 – Remote Code Execution

# Exploit Title: OpenSMTPD 6.6.1 - Remote Code Execution

PHP 7.0 < 7.4 (Unix) - 'debug_backtrace' disable_functions Bypass

Kibana 6.6.1 – CSV Injection

# Exploit Title: Kibana 6.6.1 - CSV Injection

Liferay CE Portal 6.0.2 – Remote Command Execution

# Exploit Title: Liferay CE Portal 6.0.2 - Remote Command Execution

Cups Easy 1.0 – Cross Site Request Forgery (Password Reset)

# Title: Cups Easy 1.0 - Cross Site Request Forgery (Password Reset)