remote

Microsoft Internet Explorer < 11 - OLE Automation Array Remote Code Execution (Metasploit)

##

Microsoft Internet Explorer 11 – OLE Automation Array Remote Code Execution (1)

//*

Visual Mining NetCharts Server – Remote Code Execution (Metasploit)

##

Belkin N750 – ‘jump?login’ Remote Buffer Overflow

"""

X7 Chat 2.0.5 – ‘message.php’ PHP Code Execution (Metasploit)

##

Citrix Netscaler SOAP Handler – Remote Code Execution (Metasploit)

##

Xerox Multifunction Printers (MFP) – ‘Patch’ DLM (Metasploit)

##

CUPS Filter – Bash Environment Variable Code Injection (Metasploit)

##

Konke Smart Plug K – Authentication Bypass

-----------------------------------------------------------------------

Centreon – SQL Injection / Command Injection (Metasploit)

##

Microsoft Windows – OLE Remote Code Execution ‘Sandworm’ (MS14-060)

# !/usr/bin/python

HP Data Protector – ‘EXEC_INTEGUTIL’ Remote Code Execution (Metasploit)

##

Joomla! Component Akeeba Kickstart – Unserialize Remote Code Execution (Metasploit)

##

Numara / BMC Track-It! FileStorageService – Arbitrary File Upload (Metasploit)

##

Aireplay-ng 1.2 beta3 – ‘tcp_test’ Length Stack Overflow

#include

F5 iControl – Remote Command Execution (Metasploit)

##

Rejetto HTTP File Server (HFS) – Remote Command Execution (Metasploit)

##

WordPress Plugin InfusionSoft – Arbitrary File Upload (Metasploit)

##

OpenSSH < 6.6 SFTP (x64) - Command Execution

#define _GNU_SOURCE

Apache mod_cgi – ‘Shellshock’ Remote Command Injection

#!/usr/bin/env python

Postfix SMTP 4.2.x < 4.2.48 - 'Shellshock' Remote Command Injection

#!/bin/python

OpenVPN 2.2.29 – ‘Shellshock’ Remote Command Injection

# Exploit Title: ShellShock OpenVPN Exploit

ManageEngine OpManager / Social IT – Arbitrary File Upload (Metasploit)

##

HP Network Node Manager I – PMD Buffer Overflow (Metasploit)

##

Pure-FTPd – External Authentication Bash Environment Variable Code Injection (Metasploit)

##

GNU bash 4.3.11 – Environment Variable dhclient

#!/usr/bin/python

Kolibri WebServer 2.0 – Remote Buffer Overflow (EMET 5.0 / EMET 4.1 Partial Bypass)

#!/bin/python

dhclient 4.1 – Bash Environment Variable Command Injection (Shellshock)

#!/usr/bin/python

Microsoft Internet Explorer 8 – Fixed Col Span ID (Full ASLR + DEP + EMET 5.0 Bypass) (MS12-037)

GNU Bash – Environment Variable Command Injection (Metasploit)

require 'msf/core'

Bash – ‘Shellshock’ Environment Variables Command Injection

GNU Bash – ‘Shellshock’ Environment Variable Command Injection

Exploit Database Note:

Advantech Webaccess – dvs.ocx GetColor Buffer Overflow (Metasploit)

##

EMC AlphaStor Device Manager Opcode 0x75 – Command Injection (Metasploit)

require 'msf/core'

Laravel – ‘Hash::make()’ Password Truncation Security

source: https://www.securityfocus.com/bid/69849/info

Aztech Modem Routers – Session Hijacking

source: https://www.securityfocus.com/bid/69811/info

Aztech Modem Routers – Information Disclosure

source: https://www.securityfocus.com/bid/69808/info

SolarWinds Storage Manager – Authentication Bypass (Metasploit)

##

ManageEngine Eventlog Analyzer – Arbitrary File Upload (Metasploit)

##

Railo 4.2.1 – Remote File Inclusion (Metasploit)

##

Rejetto HTTP File Server (HFS) 2.3.x – Remote Command Execution (1)

# Exploit Title: HttpFileServer 2.3.x Remote Command Execution

Ammyy Admin 3.5 – Remote Code Execution (Metasploit)

Mirror: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/34647.zip (aa0day.zip)

ALCASAR 2.8 – Remote Code Execution

#!/usr/bin/env python

ManageEngine Desktop Central StatusUpdate – Arbitrary File Upload (Metasploit)

##

Mozilla Firefox 9.0.1 / Thunderbird 3.1.20 – Information Disclosure

source: https://www.securityfocus.com/bid/69525/info

Wing FTP Server – (Authenticated) Command Execution (Metasploit)

##

F5 Big-IP – rsync Access

When configured in a high availability mode, the F5 solution suffers from an unauthenticated rsync access vulnerabili...

NRPE 2.15 – Remote Code Execution

#!/usr/bin/python

Mozilla Firefox – WebIDL Privileged JavaScript Injection (Metasploit)

##

Granding MA300 – Weak Pin Encryption Brute Force

source: https://www.securityfocus.com/bid/69390/info