Exploits

WordPress Plugin Event Tickets 4.10.7.1 – CSV Injection

# Exploit Title: WordPress Plugin Event Tickets >= 4.10.7.1 - CSV Injection

IntelBras TELEFONE IP TIP200/200 LITE 60.61.75.15 – Arbitrary File Read

#!/usr/bin/perl -w

Alkacon OpenCMS 10.5.x – Cross-Site Scripting

# Exploit Title: Alkacon OpenCMS 10.5.x - Multiple XSS in Apollo Template

Alkacon OpenCMS 10.5.x – Cross-Site Scripting (2)

# Exploit Title: Alkacon OpenCMS 10.5.x - Multiple XSS in Alkacon OpenCms

Alkacon OpenCMS 10.5.x – Local File inclusion

# Exploit Title: Alkacon OpenCMS 10.5.x - Multiple LFI in Alkacon OpenCms

Kaseya VSA agent 9.5 – Privilege Escalation

# Exploit Title: Kaseya VSA agent

Wolters Kluwer TeamMate 3.1 – Cross-Site Request Forgery

Hello,

Craft CMS 2.7.9/3.2.5 – Information Disclosure

# Exploit Title : CraftCms Users information disclosure From uploaded File

Microsoft Windows – ‘WSReset’ UAC Protection Bypass (Registry)

#### Fileless UAC bypass (WSReset.exe)

SQL Server Password Changer 1.90 – Denial of Service

#Exploit Title: SQL Server Password Changer v1.90 Denial of Service Exploit

Easy MP3 Downloader 4.7.8.8 – ‘Unlock Code’ Denial of Service

#!/usr/bin/python

Canon PRINT 2.5.5 – Information Disclosure

# Exploit Title: Content Provider URI Injection on Canon PRINT 2.5.5

Asus Precision TouchPad 11.0.0.25 – Denial of Service

#!/usr/bin/python

Sentrifugo 3.2 – File Upload Restriction Bypass

# Exploit Title: Sentrifugo 3.2 - File Upload Restriction Bypass

Sentrifugo 3.2 – Persistent Cross-Site Scripting

# Exploit Title: Sentrifugo 3.2 - Persistent Cross-Site Scripting

DomainMod 4.13 – Cross-Site Scripting

# Exploit Title: DomainMod

YouPHPTube 7.4 – Remote Code Execution

# Exploit Title: YouPHPTube

WordPress Plugin WooCommerce Product Feed 2.2.18 – Cross-Site Scripting

# Exploit Title: WordPress Plugin WooCommerce Product Feed

VX Search Enterprise 10.4.16 – ‘User-Agent’ Denial of Service

# Exploit Title: VX Search Enterprise v10.4.16 DoS

Jobberbase 2.0 – ‘subscribe’ SQL Injection

#!/bin/bash

PilusCart 1.4.1 – Local File Disclosure

# Exploit Title: PilusCart

Webkit JSC: JIT – Uninitialized Variable Access in ArgumentsEliminationPhase::transform

https://github.com/WebKit/webkit/blob/94e868c940d46c5745869192d07255331d00102b/Source/JavaScriptCore/dfg/DFGArguments...

Outlook Password Recovery 2.10 – Denial of Service

#Exploit Title: Outlook Password Recovery v2.10 Denial of Service Exploit

SQLiteManager 1.2.0 / 1.2.4 – Blind SQL Injection

Jobberbase 2.0 CMS – ‘jobs-in’ SQL Injection

# Exploit Title: Jobberbase 2.0 CMS - 'jobs-in' SQL Injection

Tableau – XML External Entity

# Exploit Title: Tableau XXE

LSoft ListServ < 16.5-2018a - Cross-Site Scripting

# Exploit Title: LSoft ListServ < 16.5 - Cross-Site Scripting (XSS)

WordPress Plugin Import Export WordPress Users 1.3.1 – CSV Injection

# Exploit Title: Wordpress Plugin Import Export WordPress Users

WordPress Plugin UserPro 4.9.32 – Cross-Site Scripting

# Exploit Title: UserPro

openITCOCKPIT 3.6.1-2 – Cross-Site Request Forgery

# Exploit Title: openITCOCKPIT 3.6.1-2 - CSRF 2 RCE

Microsoft Windows 10 – SET_REPARSE_POINT_EX Mount Point Security Feature Bypass

Windows: SET_REPARSE_POINT_EX Mount Point Security Feature Bypass

Exim 4.87 / 4.91 – Local Privilege Escalation (Metasploit)

##

Nimble Streamer 3.0.2-2 < 3.5.4-9 - Directory Traversal

# Nimble Streamer 3.0.2-2 to 3.5.4-9 - Path Traversal

Pulse Secure 8.1R15.1/8.2/8.3/9.0 SSL VPN – Arbitrary File Disclosure (Metasploit)

# Exploit Title: File disclosure in Pulse Secure SSL VPN (metasploit)

LibreOffice < 6.2.6 Macro - Python Code Execution (Metasploit)

##

Nagios XI 5.6.5 – Remote Code Execution / Root Privilege Escalation

Cisco UCS Director, Cisco Integrated Management Controller Supervisor and Cisco UCS Director Express for Big Data – Multiple Vulnerabilities

>> Multiple critical vulnerabilities in Cisco UCS Director, Cisco Integrated Management Controller Supervisor and Cis...

WordPress Plugin Add Mime Types 2.2.1 – Cross-Site Request Forgery

# Exploit Title: CSRF vulnerabilities in WP Add Mime Types Plugin

QEMU – Denial of Service

#include

RAR Password Recovery 1.80 – ‘User Name and Registration Code’ Denial of Service

# Exploit Title: RAR Password Recovery v1.80 Denial of Service Exploit

Kimai 2 – Persistent Cross-Site Scripting

# Exploit Title: Kimai 2- persistent cross-site scripting (XSS)

Fortinet FortiOS 5.6.3 – 5.6.7 / FortiOS 6.0.0 – 6.0.4 – Credentials Disclosure (Metasploit)

# Exploit Title: Fortinet FortiOS Leak file - Reading login/passwords in clear text.

Fortinet FortiOS 5.6.3 – 5.6.7 / FortiOS 6.0.0 – 6.0.4 – Credentials Disclosure

# Exploit Title: Fortinet FortiOS Leak file - Reading login/passwords in clear text.

Neo Billing 3.5 – Persistent Cross-Site Scripting

# Exploit Title: Neo Billing 3.5 - Stored Cross Site Scripting Vulnerability

Webmin 1.920 – Remote Code Execution

#!/bin/sh

YouPHPTube 7.2 – ‘userCreate.json.php’ SQL Injection

# Exploit Title: YouPHPTube < 7.3 SQL Injection

EyesOfNetwork 5.1 – Authenticated Remote Command Execution

# Exploit Title: EyesOfNetwork 5.1 - Authenticated Remote Command Execution

Joomla! component com_jsjobs 1.2.6 – Arbitrary File Deletion

# Exploit Title: Joomla! component com_jsjobs 1.2.6 - Arbitrary File Deletion

GetGo Download Manager 6.2.2.3300 – Denial of Service

# Exploit Title : GetGo Download Manager 6.2.2.3300 - Denial of Service

Integria IMS 5.0.86 – Arbitrary File Upload

# Exploit Title: Integria IMS 5.0.86 - Arbitrary File Upload