remote

Easy Address Book Web Server 1.6 – Remote Stack Buffer Overflow

#!/usr/bin/env python

Easy File Management Web Server 5.3 – Remote Stack Buffer Overflow

#!/usr/bin/env python

AoA MP4 Converter 4.1.2 – ActiveX

AoA DVD Creator 2.6.2 – ActiveX

AoA Audio Extractor Basic 2.3.7 – ActiveX

UPS Web/SNMP-Manager CS121 – Authentication Bypass

source: https://www.securityfocus.com/bid/67438/info

Easy File Sharing Web Server 6.8 – Remote Stack Buffer Overflow

# Exploit Title: Easy File Sharing Web Server 6.8 stack buffer overflow

Adobe Flash Player – Shader Buffer Overflow (Metasploit)

##

Yokogawa CS3000 – ‘BKESimmgr.exe’ Remote Buffer Overflow (Metasploit)

##

EFS Easy Chat Server 3.1 – Remote Stack Buffer Overflow

## Exploit-DB Note: The offset to SEH is influenced by the installation path of the program.

Foscam IP Camera – Predictable Credentials Security Bypass

// source: https://www.securityfocus.com/bid/67510/info

Adobe Flash Player – Integer Underflow Remote Code Execution (Metasploit)

##

AssistMyTeam Team Helpdesk – Multiple Information Disclosure Vulnerabilities

source: https://www.securityfocus.com/bid/67271/info

F5 BIG-IQ 4.1.0.2013.0 – Privilege Escalation (Metasploit)

##

Apache Struts – ClassLoader Manipulation Remote Code Execution (Metasploit)

##

Alienvault Open Source SIEM (OSSIM) – SQL Injection / Remote Code Execution (Metasploit)

##

Adobe Flash Player – Type Confusion Remote Code Execution (Metasploit)

##

McAfee ePolicy Orchestrator 4.6.0 < 4.6.5 - 'ePowner' Multiple Vulnerabilities

# Exploit Title: McAfee ePolicy Orchestrator 4.6.0-4.6.5 (ePowner) - Multiple vulnerabilities

Kolibri Web Server 2.0 – GET Stack Buffer Overflow

#!/usr/bin/python

OpenSSL TLS Heartbeat Extension – ‘Heartbleed’ Information Leak (2) (DTLS Support)

/* * CVE-2014-0160 heartbleed OpenSSL information leak exploit * =========================================================...

Acunetix 8 build 20120704 – Remote Stack Overflow

#!/usr/bin/python

COMTREND CT-5361T Router – ‘Password.cgi’ Cross-Site Request Forgery (Admin Password Manipulation)

source: https://www.securityfocus.com/bid/67033/info

Adobe Flash Player – Regular Expression Heap Overflow (Metasploit)

##

Sercomm TCP/32674 – Backdoor Reactivation

#include

NRPE 2.15 – Remote Command Execution

=============================================

SAP Router – Timing Attack Password Disclosure

Core Security - Corelabs Advisory

Microsoft Internet Explorer – CMarkup Use-After-Free (MS14-012) (Metasploit)

##

lxml – ‘clean_html’ Security Bypass

source: https://www.securityfocus.com/bid/67159/info

Unitrends Enterprise Backup 7.3.0 – Root Remote Code Execution (Metasploit)

Unitrends Enterprise Backup 7.3.0

Microsoft Internet Explorer 10 – CMarkup Use-After-Free (MS14-012)

ICOMM 610 Wireless Modem – Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/66593/info

Vtiger – ‘Install’ Remote Command Execution (Metasploit)

##

OpenSSL TLS Heartbeat Extension – ‘Heartbleed’ Information Leak (1)

c->sslContext = SSL_CTX_new(SSLv23_client_method());

Sophos Web Protection Appliance Interface – (Authenticated) Arbitrary Command Execution (Metasploit)

##

OpenSSL 1.0.1f TLS Heartbeat Extension – ‘Heartbleed’ Memory Disclosure (Multiple SSL/TLS Versions)

# Exploit Title: [OpenSSL TLS Heartbeat Extension - Memory Disclosure - Multiple SSL/TLS versions]

Fritz!Box Webcm – Command Injection (Metasploit)

##

OpenSSL TLS Heartbeat Extension – ‘Heartbleed’ Memory Disclosure

#!/usr/bin/python

Halon Security Router (SR) 3.2-winter-r1 – Multiple Vulnerabilities

ADVISORY INFORMATION

Bluetooth Text Chat 1.0 iOS – Code Execution

Document Title:

JIRA Issues Collector – Directory Traversal (Metasploit)

##

PhonerLite 2.14 SIP Soft Phone – SIP Digest Disclosure

-----BEGIN PGP SIGNED MESSAGE-----

SePortal 2.5 – SQL Injection / Remote Code Execution (Metasploit)

##

plexusCMS 0.5 – Cross-Site Scripting / Remote Shell / Credentials Leak

# Exploit Title: plexusCMS 0.5 XSS Remote Shell Exploit

Fitnesse Wiki – Remote Command Execution (Metasploit)

##

Katello (RedHat Satellite) – users/update_roles Missing Authorisation (Metasploit)

##

FreePBX – ‘config.php’ Remote Code Execution (Metasploit)

##

Array Networks vAPV and vxAG – Private Key Privilege Escalation / Code Execution (Metasploit)

##

Horde Framework – Unserialize PHP Code Execution (Metasploit)

##

Microsoft Internet Explorer – TextRange Use-After-Free (MS14-012) (Metasploit)

##

Quantum DXi V1000 2.2.1 – Static SSH Key

-----------