remote

PHP-Fusion 9.03.00 – ‘Edit Profile’ Remote Code Execution (Metasploit)

##

Oracle Weblogic Server – ‘AsyncResponseService’ Deserialization Remote Code Execution (Metasploit)

##

PostgreSQL 9.3 – COPY FROM PROGRAM Command Execution (Metasploit)

\##

Google Chrome 72.0.3626.119 – ‘FileReader’ Use-After-Free (Metasploit)

##

Lotus Domino 8.5.3 – ‘EXAMINE’ Stack Buffer Overflow DEP/ASLR Bypass (NSA’s EMPHASISMINE)

##########################################################

Xitami Web Server 2.5 – Remote Buffer Overflow (SEH + Egghunter)

# Exploit Title: Xitami Web Server 2.5 Remote Buffer Overflow (SEH + Egghunter)

LG Supersign EZ CMS – Remote Code Execution (Metasploit)

##

Blue Angel Software Suite – Command Execution

# Exploit Title: Blue Angel Software Suite - Authenticated Command Execution

Microsoft Windows PowerShell ISE – Remote Code Execution

[+] Credits: John Page (aka hyp3rlinx)

Ruby On Rails – DoubleTap Development Mode secret_key_base Remote Code Execution (Metasploit)

##

Pimcore < 5.71 - Unserialize Remote Code Execution (Metasploit)

##

AIS logistics ESEL-Server – Unauthenticated SQL Injection Remote Code Execution (Metasploit)

##

Moodle 3.6.3 – ‘Install Plugin’ Remote Command Execution (Metasploit)

##

Freefloat FTP Server 1.0 – ‘STOR’ Remote Buffer Overflow

# Exploit Title: Free Float FTP 1.0 "STOR" Remote Buffer Overflow

Freefloat FTP Server 1.0 – ‘SIZE’ Remote Buffer Overflow

# Exploit Title: Free Float FTP 1.0 "SIZE" Remote Buffer Overflow

Google Chrome 72.0.3626.121 / 74.0.3725.0 – ‘NewFixedDoubleArray’ Integer Overflow

VULNERABILITY DETAILS

ManageEngine Applications Manager 14.0 – Authentication Bypass / Remote Command Execution (Metasploit)

##

Atlassian Confluence Widget Connector Macro – Velocity Template Injection (Metasploit)

##

ManageEngine Applications Manager 11.0 < 14.0 - SQL Injection / Remote Code Execution (Metasploit)

##

MailCarrier 2.51 – POP3 ‘RETR’ SEH Buffer Overflow

#!/usr/bin/python

Cisco RV130W Routers – Management Interface Remote Command Execution (Metasploit)

##

MailCarrier 2.51 – POP3 ‘TOP’ SEH Buffer Overflow

#!/usr/bin/python

MailCarrier 2.51 – POP3 ‘LIST’ SEH Buffer Overflow

#!/usr/bin/python

MailCarrier 2.51 – POP3 ‘USER’ Buffer Overflow

#!/usr/bin/python

CuteNews 2.1.2 – ‘avatar’ Remote Code Execution (Metasploit)

##

RemoteMouse 3.008 – Arbitrary Remote Command Execution

# Exploit Title: Remote Mouse 3.008 - Failure to Authenticate

MailCarrier 2.51 – ‘RCPT TO’ Buffer Overflow

#!/usr/bin/python

Zimbra Collaboration – Autodiscover Servlet XXE and ProxyServlet SSRF (Metasploit)

##

Apache Axis 1.4 – Remote Code Execution

#+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++#

TP-LINK TL-WR940N / TL-WR941ND – Buffer Overflow

#Author Grzegorz Wypych - h0rac

QNAP Netatalk < 3.1.12 - Authentication Bypass

##

WordPress Core 5.0.0 – Crop-image Shell Upload (Metasploit)

##

Cisco RV320 and RV325 – Unauthenticated Remote Code Execution (Metasploit)

##

Google Chrome 72.0.3626.96 / 74.0.3702.0 – ‘JSPromise::TriggerPromiseReactions’ Type Confusion

PhreeBooks ERP 5.2.3 – Remote Command Execution (1)

# Exploit Title: PhreeBooks ERP 5.2.3 - Remote Command Execution

TeemIp IPAM < 2.4.0 - 'new_config' Command Injection (Metasploit)

##

Oracle Weblogic Server Deserialization RCE – Raw Object (Metasploit)

##

CMS Made Simple (CMSMS) Showtime2 – File Upload Remote Code Execution (Metasploit)

##

Jenkins 2.137 and Pipeline Groovy Plugin 2.61 – ACL Bypass and Metaprogramming Remote Code Execution (Metasploit)

##

BMC Patrol Agent – Privilege Escalation Code Execution Execution (Metasploit)

##

Mail Carrier 2.5.1 – ‘MAIL FROM’ Buffer Overflow

# Exploit Title: Tabs Mail Carrier 2.5.1 MAIL FROM: Buffer Overflow

Apache UNO / LibreOffice Version: 6.1.2 / OpenOffice 4.1.6 API – Remote Code Execution

"""

FTPGetter Standard 5.97.0.177 – Remote Code Execution

# Exploit Title: FTPGetter Standard - v.5.97.0.177 Remote Code Execution

Apache Tika-server < 1.18 - Command Injection

######################################################################################################

elFinder PHP Connector < 2.1.48 - 'exiftran' Command Injection (Metasploit)

##

Drupal < 8.5.11 / < 8.6.10 - RESTful Web Services unserialize() Remote Command Execution (Metasploit)

##

Imperva SecureSphere 13.x – ‘PWS’ Command Injection (Metasploit)

##

QNAP TS-431 QTS < 4.2.2 - Remote Command Execution (Metasploit)

##

Alcatel-Lucent (Nokia) GPON I-240W-Q – Buffer Overflow

#!/usr/bin/python3

PHP 7.2 – ‘imagecolormatch()’ Out of Band Heap Write