remote

IBM Security AppScan Standard 9.0.2 – OLE Automation Array Remote Code Execution

#!/usr/bin/python

FTP Media Server 3.0 – Authentication Bypass / Denial of Service

#!/usr/bin/env python

Phoenix Contact ILC 150 ETH PLC – Remote Control Script

#!/usr/bin/env python

SixApart MovableType – Storable Perl Code Execution (Metasploit)

##

i.FTP 2.21 – Time Field (SEH)

#!/usr/bin/python

Novell ZENworks Configuration Management – Arbitrary File Upload (Metasploit)

##

Adobe Flash Player – NetConnection Type Confusion (Metasploit)

##

WordPress Plugin RevSlider 3.0.95 – Arbitrary File Upload / Execution (Metasploit)

##

Adobe Flash Player – domainMemory ByteArray Use-After-Free (Metasploit)

##

MacKeeper – URL Handler Remote Code Execution

#!/usr/bin/python

Adobe Flash Player – UncompressViaZlibVariant Uninitialized Memory (Metasploit)

##

MiniUPnPd 1.0 (MIPS) – Remote Stack Overflow Remote Code Execution for AirTies RT Series

#!/usr/bin/env python

Legend Perl IRC Bot – Remote Code Execution

#

WordPress Plugin Work The Flow – Arbitrary File Upload (Metasploit)

##

WordPress Plugin Creative Contact Form – Arbitrary File Upload (Metasploit)

##

WordPress Plugin N-Media Website Contact Form – Arbitrary File Upload (Metasploit)

##

WordPress Plugin Reflex Gallery – Arbitrary File Upload (Metasploit)

##

Adobe Flash Player – copyPixelsToByteArray Integer Overflow (Metasploit)

##

ProFTPd 1.3.5 – ‘mod_copy’ Remote Command Execution

# Title: ProFTPd 1.3.5 Remote Command Execution

Samsung iPOLiS – ReadConfigValue Remote Code Execution

Adobe Flash Player – casi32 Integer Overflow (Metasploit)

##

ProFTPd 1.3.5 – File Copy

Description TJ Saunders 2015-04-07 16:35:03 UTC

Barracuda Firmware 5.0.0.012 – (Authenticated) Remote Command Execution (Metasploit)

# Exploit Title: Barracuda Firmware

SolarWinds Firewall Security Manager 6.6.5 – Client Session Handling (Metasploit)

##

JBoss Seam 2 – Arbitrary File Upload / Execution (Metasploit)

#

w3tw0rk / Pitbull Perl IRC Bot – Remote Code Execution

# thehunter.py

WebGate eDVR Manager 2.6.4 – Connect Method Stack Buffer Overflow

WebGate eDVR Manager 2.6.4 – SiteChannel Property Stack Buffer Overflow

WebGate WinRDS 2.0.8 – PlaySiteAllChannel Stack Buffer Overflow

WebGate eDVR Manager 2.6.4 – AudioOnlySiteChannel Stack Buffer Overflow

WebGate WESP SDK 1.2 – ChangePassword Stack Overflow

Ceragon FibeAir IP-10 – SSH Private Key Exposure (Metasploit)

##

Adobe Flash Player – ByteArray With Workers Use-After-Free (Metasploit)

##

Airties Air5650TT – Remote Stack Overflow

#!/usr/bin/env python

Apache Spark Cluster 1.3.x – Arbitrary Code Execution

# Exploit Title: Arbitary Code Execution in Apache Spark Cluster

WebGate eDVR Manager 2.6.4 – SiteName Stack Overflow

WebGate Control Center 4.8.7 – GetThumbnail Stack Overflow

WebGate WinRDS 2.0.8 – StopSiteAllChannel Stack Overflow

WebGate WinRDS WESPPlayback.WESPPlaybackCtrl.1 StopSiteAllChannel Stack Buffer Overflow Vulnerability (0Day)

Acunetix 9.5 – OLE Automation Array Remote Code Execution

#!/usr/bin/python

WebGate eDVR Manager – Remote Stack Buffer Overflow

QNAP – Web Server Remote Code Execution via Bash Environment Variable Code Injection (Metasploit)

# Exploit Title: QNAP Web server remote code execution via Bash Environment Variable Code Injection

QNAP – Admin Shell via Bash Environment Variable Code Injection (Metasploit)

# Exploit Title: QNAP admin shell via Bash Environment Variable Code Injection

Adobe Flash Player – Arbitrary Code Execution

Source: https://github.com/SecurityObscurity/cve-2015-0313

Mozilla Firefox – Proxy Prototype Privileged JavaScript Injection (Metasploit)

##

Bsplayer 2.68 – HTTP Response Universal

#!/usr/bin/python

TWiki Debugenableplugins – Remote Code Execution (Metasploit)

##

Exim – ‘GHOST’ glibc gethostbyname Buffer Overflow (Metasploit)

##

Adobe Flash Player – PCRE Regex (Metasploit)

##

ElasticSearch – Search Groovy Sandbox Bypass (Metasploit)

##

IPass Control Pipe – Remote Command Execution (Metasploit)

##