remote

GetGo Download Manager 5.3.0.2712 – Buffer Overflow (SEH)

#!/usr/bin/python

AsusWRT LAN – Remote Code Execution (Metasploit)

##

CloudMe Sync 1.10.9 – Stack-Based Buffer Overflow (Metasploit)

##

Disk Savvy Enterprise 10.4.18 – Stack-Based Buffer Overflow (Metasploit)

##

Papenmeier WiFi Baby Monitor Free & Lite < 2.02.2 - Remote Audio Record

Whilst analysing a number of free communication based applications on the Google Play Store, I took a look at WiFi Ba...

Disk Pulse Enterprise 10.4.18 – ‘Import Command’ Buffer Overflow (SEH)

#!/usr/bin/env python

Disk Savvy Enterprise 10.4.18 – Buffer Overflow (SEH)

# Exploit Title: Disk Savvy Enterprise v10.4.18 Server - Unauthenticated Remote Buffer Overflow SEH

EChat Server 3.1 – ‘CHAT.ghp’ Buffer Overflow

# Exploit Author: Juan Sacco

μTorrent (uTorrent) Classic/Web – JSON-RPC Remote Code Execution / Information Disclosure

By default, utorrent create an HTTP RPC server on port 10000 (uTorrent classic) or 19575 (uTorrent web). There are nu...

Tenda AC15 Router – Remote Code Execution

#!/usr/bin/env python

Advantech WebAccess 8.3.0 – Remote Code Execution

Vulnerability Title: Advantech WebAccess Node8.3.0 "AspVBObj.dll" - Remote Code Execution

CloudMe Sync < 1.11.0 - Buffer Overflow

[+] Credits: John Page (aka hyp3rlinx)

LibreOffice < 6.0.1 - '=WEBSERVICE' Remote Arbitrary File Disclosure

# Vulnerability description

Adobe Coldfusion 11.0.03.292866 – BlazeDS Java Object Deserialization Remote Code Execution

# Exploit Title: Adobe Coldfusion BlazeDS Java Object Deserialization RCE

HPE iLO 4 < 2.53 - Add New Administrator User

#!/usr/bin/env python

Microsoft Windows – ‘EternalRomance’/’EternalSynergy’/’EternalChampion’ SMB Remote Code Execution (Metasploit) (MS17-010)

##

Geovision Inc. IP Camera & Video – Remote Command Execution

#!/usr/bin/env python2.7

Geovision Inc. IP Camera/Video/Access Control – Multiple Remote Command Execution / Stack Overflow / Double Free / Unauthorized Access

[STX]

BMC Server Automation RSCD Agent – NSH Remote Command Execution (Metasploit)

##

Sync Breeze Enterprise 10.4.18 – Remote Buffer Overflow (SEH)

# Exploit Title: Sync Breeze Enterprise v10.4.18 Server - Unauthenticated Remote Buffer Overflow SEH

HPE iMC 7.3 – RMI Java Deserialization

# Exploit Title: HPE iMC 7.3 Java RMI Registry Deserialization RCE Vulnerability

Oracle WebLogic – wls-wsat Component Deserialization Remote Code Execution (Metasploit)

##

Trend Micro Threat Discovery Appliance 2.6.1062r1 – ‘dlp_policy_upload.cgi’ Remote Code Execution

#!/usr/local/bin/python

Werkzeug – ‘Debug Shell’ Command Execution

#!/usr/bin/env python

BMC BladeLogic 8.3.00.64 – Remote Command Execution

# Exploit Title: BMC BladeLogic RSCD agent remote exec - XMLRPC version

Exodus Wallet (ElectronJS Framework) – Remote Code Execution

GoAhead Web Server 2.5 < 3.6.5 - HTTPd 'LD_PRELOAD' Arbitrary Module Load (Metasploit)

##

Kaltura – Remote PHP Code Execution over Cookie (Metasploit)

##

RAVPower 2.000.056 – Root Remote Code Execution

"""

Herospeed – ‘TelnetSwitch’ Remote Stack Overflow / Overwrite Password / Enable TelnetD

#!/usr/bin/env python2.7

AsusWRT Router < 3.0.0.4.380.7743 - LAN Remote Code Execution

>> Unauthenticated LAN remote code execution in AsusWRT

Master IP CAM 01 – Multiple Vulnerabilities

# Exploit Title: Master IP CAM 01 Multiple Vulnerabilities

Synology Photo Station 6.8.2-3461 – ‘SYNOPHOTO_Flickr_MultiUpload’ Race Condition File Write Remote Code Execution

#!/usr/local/bin/python

Disk Pulse Enterprise 10.1.18 – Remote Buffer Overflow

# Exploit Title: Disk Pulse Enterprise Server v10.1.18 - Buffer Overflow

SysGauge Server 3.6.18 – Remote Buffer Overflow

# Exploit Title: SysGauge Server 3.6.18 - Buffer Overflow

Transmission – RPC DNS Rebinding

The transmission bittorrent client uses a client/server architecture, the user interface is the client and a daemon r...

Seagate Personal Cloud – Multiple Vulnerabilities

# SSD Advisory – Seagate Personal Cloud Multiple Vulnerabilities

ALLMediaServer 0.95 – Remote Buffer Overflow

#!/usr/bin/python

phpCollab 2.5.1 – File Upload (Metasploit)

##

LabF nfsAxe 3.7 FTP Client – Stack Buffer Overflow (Metasploit)

##

HPE iMC – dbman ‘RestartDB’ Remote Command Execution (Metasploit)

##

HPE iMC – dbman ‘RestoreDBase’ Remote Command Execution (Metasploit)

##

DiskBoss Enterprise 8.8.16 – Remote Buffer Overflow

# Exploit Title: DiskBoss

Commvault Communications Service (cvd) – Command Injection (Metasploit)

##

Cisco IOS – Remote Code Execution

#!/usr/bin/env python

Ayukov NFTP FTP Client 2.0 – Remote Buffer Overflow (Metasploit)

##

Xplico – Remote Code Execution (Metasploit)

##

Linksys WVBR0-25 – User-Agent Command Execution (Metasploit)

##

Oracle WebLogic < 10.3.6 - 'wls-wsat' Component Deserialisation Remote Command Execution

#!/usr/bin/env python

WDMyCloud < 2.30.165 - Multiple Vulnerabilities

WDMyCloud Multiple Vulnerabilities