remote

Granding MA300 – Traffic Sniffing Man In The Middle Fingerprint PIN Disclosure

source: https://www.securityfocus.com/bid/69390/info

Air Transfer Iphone 1.3.9 – Multiple Vulnerabilities

# Exploit Title: Air Transfer Iphone v1.3.9 -Remote crash, Broken Authentication file download and Memo Access.

HybridAuth – ‘install.php’ PHP Code Execution (Metasploit)

##

Gitlab-shell – Code Execution (Metasploit)

##

Mozilla Firefox – toString console.time Privileged JavaScript Injection (Metasploit)

##

Alienvault Open Source SIEM (OSSIM) < 4.7.0 - 'get_license' Remote Command Execution (Metasploit)

require 'msf/core'

VMTurbo Operations Manager 4.6 – ‘vmtadmin.cgi’ Remote Command Execution (Metasploit)

##

Oracle VM VirtualBox 4.3.6 – 3D Acceleration Virtual Machine Escape (Metasploit)

##

Barracuda Web Application Firewall – Authentication Bypass

source: https://www.securityfocus.com/bid/69028/info

Oxwall 1.7.0 – Remote Code Execution

#!/usr/bin/env python

Omeka 2.2.1 – Remote Code Execution

#!/usr/bin/env python

IBM GCM16/32 1.20.0.22575 – Multiple Vulnerabilities

The IBM 1754 GCM family provides KVM over IP and serial console management

Alfresco – ‘/cmisbrowser?url’ Server-Side Request Forgery

source: https://www.securityfocus.com/bid/68/info

Alfresco – ‘/proxy?endpoint’ Server-Side Request Forgery

source: https://www.securityfocus.com/bid/68/info

Boat Browser 8.0/8.0.1 – Remote Code Execution

CreatMalTxt POC - WebView

HP Data Protector Manager 8.10 – Remote Command Execution

#!/usr/bin/python

D-Link Devices – UPnP M-SEARCH Multicast Command Injection (Metasploit)

##

D-Link HNAP – Request Remote Buffer Overflow (Metasploit)

##

D-Link Devices – ‘info.cgi’ POST Buffer Overflow (Metasploit)

##

Kolibri Web Server 2.0 – GET (SEH)

#!/usr/bin/python

OpenVAS Manager 4.0 – Authentication Bypass

#!/usr/bin/python

Yokogawa CS3000 – ‘BKFSim_vhfd.exe’ Remote Buffer Overflow (Metasploit)

##

WordPress Plugin MailPoet Newsletters 2.6.8 – ‘wysija-newsletters’ Arbitrary File Upload (Metasploit)

##

Gitlist – Remote Command Execution (Metasploit)

##

Oracle Event Processing FileUploadServlet – Arbitrary File Upload (Metasploit)

##

Microsoft Internet Explorer 8 – Fixed Col Span ID (Full ASLR + DEP + EMET 4.1.x Bypass) (MS12-037)

Gitlist 0.4.0 – Remote Code Execution

from commands import getoutput

HP AutoPass License Server – Arbitrary File Upload (Metasploit)

##

Cogent DataHub – Command Injection (Metasploit)

##

Alienvault Open Source SIEM (OSSIM) – av-centerd Command Injection (Metasploit)

##

D-Link Devices – ‘hedwig.cgi’ Remote Buffer Overflow in Cookie Header (Metasploit)

##

D-Link Devices – ‘Authentication.cgi’ Remote Buffer Overflow (Metasploit)

##

Ericom AccessNow Server – Remote Buffer Overflow (Metasploit)

##

Rocket Servergraph Admin Center – fileRequestor Remote Code Execution (Metasploit)

##

Alienvault Open Source SIEM (OSSIM) < 4.7.0 - av-centerd 'get_log_line()' Remote Code Execution

# Exploit Title: AlienVault OSSIM < 4.7.0 av-centerd 'get_log_line()' Remote Code Execution

Easy File Management Web Server – Remote Stack Buffer Overflow (Metasploit)

##

Java – Debug Wire Protocol Remote Code Execution (Metasploit)

##

Alienvault Open Source SIEM (OSSIM) < 4.8.0 - 'get_file' Information Disclosure (Metasploit)

require 'msf/core'

Yealink VoIP Phone SIP-T38G – Privilege Escalation

Title: Yealink VoIP Phone SIP-T38G Privileges Escalation

Yealink VoIP Phone SIP-T38G – Remote Command Execution

Title: Yealink VoIP Phone SIP-T38G Remote Command Execution

Yealink VoIP Phone SIP-T38G – Default Credentials

Title: Yealink VoIP Phone SIP-T38G Default Credentials

Foreman Smart-Proxy – Remote Command Injection

source: https://www.securityfocus.com/bid/68117/info

Easy File Management Web Server 5.3 – ‘UserID’ Remote Buffer Overflow (ROP)

#!/usr/bin/python

Huawei E303 Router – Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/67747/info

ElasticSearch Dynamic Script – Arbitrary Java Execution (Metasploit)

##

TORQUE Resource Manager 2.5.x < 2.5.13 - Stack Buffer Overflow Stub

#!/usr/bin/env python

Castor Library – XML External Entity Information Disclosure

source: https://www.securityfocus.com/bid/67676/info

Easy File Sharing FTP Server 3.5 – Remote Stack Buffer Overflow

#!/usr/bin/env python

Symantec Workspace Streaming – Arbitrary File Upload (Metasploit)

##

Apache mod_wsgi – Information Disclosure

source: https://www.securityfocus.com/bid/67534/info