remote

ArcSight Logger – Arbitrary File Upload / Code Execution

# Exploit Title: ArcSight Logger - Arbitrary File Upload (Code Execution)

Adobe Flash Player – ByteArray UncompressViaZlibVariant Use-After-Free (Metasploit)

##

ElasticSearch – Remote Code Execution

#!/bin/python2

HP Data Protector 8.10 – Remote Command Execution (Metasploit)

##

Seagate Business NAS – Remote Command Execution (Metasploit)

##

Symantec Web Gateway 5 – ‘restore.php’ (Authenticated) Command Injection (Metasploit)

##

Persistent Systems Client Automation – Command Injection Remote Code Execution (Metasploit)

# Exploit Title: Persistent Systems Client Automation (PSCA, formerly HPCA or Radia) Command Injection Remote Code Ex...

HP Client – Automation Command Injection (Metasploit)

##

jQuery – jui_filter_rules PHP Code Execution

-----BEGIN PGP SIGNED MESSAGE-----

Java JMX – Server Insecure Configuration Java Code Execution (Metasploit)

##

X360 VideoPlayer – ActiveX Control Buffer Overflow (Metasploit)

##

PCMan FTP Server 2.0.7 – ‘MKD’ Remote Buffer Overflow

# Title: PCMan FTP Server v2.0.7 Buffer Overflow - MKD Command

Achat 0.150 beta7 – Remote Buffer Overflow (Metasploit)

##

Achat 0.150 beta7 – Remote Buffer Overflow

#!/usr/bin/python

LG DVR LE6016D – Remote Users/Passwords Disclosure

#!/usr/bin/perl

Shuttle Tech ADSL Modem/Router 915 WM – Remote DNS Change

#!/bin/bash

HP Data Protector 8.x – Remote Command Execution

#!/usr/bin/python

Symantec Encryption Management Server < 3.2.0 MP6 - Remote Command Injection

Vantage Point Security Advisory 2014-007

X360 VideoPlayer ActiveX Control 2.6 – ASLR + DEP Bypass

runme

ClearSCADA – Remote Authentication Bypass

#!/usr/bin/python

D-Link DSL-2740R – Remote DNS Change

#!/bin/bash

Cisco Ironport Appliances – Privilege Escalation

Cisco Ironport Appliances Privilege Escalation Vulnerability

ManageEngine (Multiple Products) – (Authenticated) Arbitrary File Upload (Metasploit)

##

Samsung SmartViewer BackupToAvi 3.0 – Remote Code Execution

WordPress Plugin WP Symposium 14.11 – Arbitrary File Upload (Metasploit)

##

Oracle MySQL (Windows) – FILE Privilege Abuse (Metasploit)

##

Lexmark MarkVision Enterprise – Arbitrary File Upload (Metasploit)

##

Pandora FMS 3.1 – Authentication Bypass / Arbitrary File Upload (Metasploit)

##

SkinCrafter3 vs2005 3.8.1.0 – Multiple ActiveX Buffer Overflows

ActiveX Buffer Overflow in SkinCrafter3_vs2005

ASUSWRT 3.0.0.4.376_1071 – LAN Backdoor Command Execution

#!/usr/bin/env python3

ProjectSend – Arbitrary File Upload (Metasploit)

##

Liferay Portal 7.0.0 M1/7.0.0 M2/7.0.0 M3 – Remote Code Execution

#!/bin/sh

Varnish Cache CLI Interface – Remote Code Execution (Metasploit)

##

GIT 1.8.5.6/1.9.5/2.0.5/2.1.4/2.2.1 & Mercurial < 3.2.3 - Multiple Vulnerabilities (Metasploit)

##

ActualAnalyzer – ‘ant’ Cookie Command Execution (Metasploit)

##

Tuleap – PHP Unserialize Code Execution (Metasploit)

##

Apache James Server 2.3.2 – Remote Command Execution

#!/usr/bin/python

Microsoft Windows Kerberos – Privilege Escalation (MS14-068)

#!/usr/bin/python

Tincd – (Authenticated) Remote TCP Stack Buffer Overflow (Metasploit)

##

tnftp (FreeBSD 8/9/10) – ‘tnftp’ Client Side

#!/usr/bin/env python2

IPUX CS7522/CS2330/CS2030 IP Camera – ‘UltraHVCamX.ocx’ ActiveX Stack Buffer Overflow

IPUX CS7522/CS2330/CS2030 IP Camera (UltraHVCamX.ocx) ActiveX Stack Buffer Overflow

IPUX CL5452/CL5132 IP Camera – ‘UltraSVCamX.ocx’ ActiveX Stack Buffer Overflow

IPUX CL5452/CL5132 IP Camera (UltraSVCamX.ocx) ActiveX Stack Buffer Overflow

IPUX Cube Type CS303C IP Camera – ‘UltraMJCamX.ocx’ ActiveX Stack Buffer Overflow

IPUX Cube Type CS303C IP Camera (UltraMJCamX.ocx) ActiveX Stack Buffer Overflow

Pandora Fms – SQL Injection Remote Code Execution (Metasploit)

##

Hikvision DVR – RTSP Request Remote Code Execution (Metasploit)

##

Microsoft Internet Explorer OLE Pre-IE11 – Automation Array Remote Code Execution / PowerShell VirtualAlloc (MS14-064)

|--------------------------------------------------------------------------|

Mantis Bug Tracker 1.2.0a3 < 1.2.17 XmlImportExport Plugin - PHP Code Injection (Metasploit) (2)

##

Samsung Galaxy KNOX Android Browser – Remote Code Execution (Metasploit)

##

.NET Remoting Services – Remote Command Execution

Source: https://github.com/tyranid/ExploitRemotingService

Microsoft Internet Explorer 8 – Fixed Col Span ID (Full ASLR + DEP + EMET 5.1 Bypass) (MS12-037)