remote

Mako Web Server 2.5 – Multiple Vulnerabilities

[+] SSD Beyond Security: https://blogs.securiteam.com/index.php/archives/3391

Docker Daemon – Unprotected TCP Socket (Metasploit)

##

Apache Struts 2.0.1 < 2.3.33 / 2.5 < 2.5.10 - Arbitrary Code Execution

import requests

HiSilicon DVR Devices – Remote Code Execution

#!/usr/bin/env python2

Gh0st Client (C2 Server) – Remote Buffer Overflow (Metasploit)

##

Apache Struts 2.5 < 2.5.12 - REST Plugin XStream Remote Code Execution

# Exploit Title: Struts 2.5 - 2.5.12 REST Plugin XStream RCE

Mongoose Web Server 6.5 – Cross-Site Request Forgery / Remote Code Execution

[+] Credits: John Page AKA hyp3rlinx

Git < 2.7.5 - Command Injection (Metasploit)

##

QNAP Transcode Server – Command Execution (Metasploit)

##

Disk Pulse Enterprise 9.9.16 – Remote Buffer Overflow (SEH)

#!/usr/bin/env python

Sync Breeze Enterprise 9.9.16 – Remote Buffer Overflow (SEH)

#!/usr/bin/env python

Disk Savvy Enterprise 9.9.14 – Remote Buffer Overflow (SEH)

#!/usr/bin/env python

Dup Scout Enterprise 9.9.14 – Remote Buffer Overflow (SEH)

#!/usr/bin/env python

IBM OpenAdmin Tool – SOAP welcomeServer PHP Code Execution (Metasploit)

##

Mozilla Firefox < 45.0 - 'nsHtml5TreeBuilder' Use-After-Free (EMET 5.52 Bypass)

CVE-2016-1960

Android Bluetooth – ‘Blueborne’ Information Leak (1)

from pwn import *

Unitrends UEB 9.1 – Authentication Bypass / Remote Command Execution

# Exploit Title: Unauthenticated root RCE for Unitrends UEB 9.1

Unitrends UEB 9.1 – ‘Unitrends bpserverd’ Remote Command Execution

# Exploit Title: Unauthenticated root RCE for Unitrends UEB 9.1

McAfee Security Scan Plus – Remote Command Execution

## Vulnerability Summary

DiskBoss Enterprise 8.2.14 – Remote Buffer Overflow

#!/usr/bin/env python

Jenkins < 1.650 - Java Deserialization

import random

VICIdial 2.9 RC 1 < 2.13 RC1 - 'user_authorization' Command Execution (Metasploit)

##

IPFire < 2.19 Update Core 110 - Remote Code Execution (Metasploit)

##

CenturyLink ZyXEL PK5001Z Router – Root Remote Code Execution

#include

Microsoft Internet Explorer – ‘mshtml.dll’ Remote Code Execution (MS17-007)

aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa

Virtual Postage (VPA) – Man In The Middle Remote Code Execution

# Exploit Title: Virtual Postage (VPA) - Remote Code Execution via MITM

SKILLS.com.au Industry App – Man In The Middle Remote Code Execution

# Exploit Title: SKILLS.com.au Industry App - Remote Code Execution via MITM

Belkin F7D7601 NetCam – Multiple Vulnerabilities

# Exploit Title: Belkin NetCam F7D7601 | Remote Command Execution

FTPGetter 5.89.0.85 – Remote Buffer Overflow (SEH)

#!/usr/bin/python

Firefox 50.0.1 – ASM.JS JIT-Spray Remote Code Execution

OrientDB – Code Execution

## Vulnerability Summary

360 Total Security – Local Privilege Escalation

## Vulnerability Summary

Skype for Business 2016 – Cross-Site Scripting

# Exploit Title: Skype for Business 2016 XSS Injection - CVE-2017-8550

Microsoft Windows 7/8.1/2008 R2/2012 R2/2016 R2 – ‘EternalBlue’ SMB Remote Code Execution (MS17-010)

#!/usr/bin/python

Easy File Sharing Web Server 7.2 – GET ‘PassWD’ Remote Buffer Overflow (DEP Bypass)

#!/usr/bin/python

Yaws 1.91 – Remote File Disclosure

[+] Credits: John Page aka hyp3rlinx

Lepide Auditor Suite – ‘createdb()’ Web Console Database Injection / Remote Code Execution

#!/usr/bin/python

GoAutoDial CE 3.3 – Authentication Bypass / Command Injection (Metasploit)

##

Joomla! 3.7 – SQL Injection

--==[[ code for India ]]==--

Australian Education App – Remote Code Execution

# Exploit Title: Australian Education App - Remote Code Execution

BestSafe Browser – Man In The Middle Remote Code Execution

# Exploit Title: BestSafe Browser FREE NoAds - Remote Code Execution

eVestigator Forensic PenTester – Man In The Middle Remote Code Execution

# Exploit Title: eVestigator Forensic PenTester v1 - Remote Code Execution via MITM

Veritas/Symantec Backup Exec – SSL NDMP Connection Use-After-Free (Metasploit)

##

ActiveMQ < 5.14.0 - Web Shell Upload (Metasploit)

##

Easy File Sharing Web Server 7.2 – GET ‘PassWD’ Remote Buffer Overflow (SEH)

#!/usr/bin/python

Netgear DGN2200 – ‘dnslookup.cgi’ Command Injection (Metasploit)

##

Symantec Messaging Gateway 10.6.2-7 – Remote Code Execution (Metasploit)

##

SpyCamLizard 1.230 – Remote Buffer Overflow

#!/usr/bin/python

Easy File Sharing HTTP Server 7.2 – POST Buffer Overflow (Metasploit)

##

Easy File Sharing Web Server 7.2 – ‘POST’ Remote Buffer Overflow (DEP Bypass)

#!/usr/bin/python