remote

Ultra Mini HTTPd 1.21 – Remote Stack Buffer Overflow

# Exploit Title: Ultra Mini HTTPD stack buffer overflow

Nginx 1.3.9/1.4.0 (x86) – Brute Force

#nginx 1.3.9/1.4.0 x86 brute force remote exploit

Air Drive Plus – Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/61081/info

Zoom Telephonics (Multiple Devices) – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/61044/info

InstantCMS 1.6 – PHP Remote Code Execution (Metasploit)

require 'msf/core'

Google Android – ‘APK’ code Remote Security Bypass

#source: https://www.securityfocus.com/bid/60952/info

Intelligent Platform Management Interface – Information Disclosure

source: https://www.securityfocus.com/bid/61076/info

Java Applet – ProviderSkeleton Insecure Invoke Method (Metasploit)

##

PCMan FTP Server 2.0 – Remote Buffer Overflow

#!/usr/bin/python

Bifrost 1.2d – Remote Buffer Overflow

#!/usr/bin/python2.7

Bifrost 1.2.1 – Remote Buffer Overflow

#!/usr/bin/python2.7

PCMan FTP Server 2.0.7 – Remote Buffer Overflow

#!/usr/bin/env python

Motion – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/60818/info

MoinMoin – twikidraw Action Traversal Arbitrary File Upload (Metasploit)

##

LibrettoCMS File Manager – Arbitrary File Upload (Metasploit)

##

HP System Management Homepage – JustGetSNMPQueue Command Injection (Metasploit)

##

ZPanel 10.0.0.2 htpasswd Module – ‘Username’ Command Execution (Metasploit)

##

Seowonintech Devices – Remote Command Execution

#!/usr/bin/perl

TP-Link TL-PS110U Print Server – ‘tplink-enum.py’ Security Bypass

source: https://www.securityfocus.com/bid/60682/info

TP-Link PS110U Print Server TL – Sensitive Information Enumeration

# Exploit Title: TP-Link Print Server Sensitive Information Enumeration

TaxiMonger for Android – ‘name’ HTML Injection

source: https://www.securityfocus.com/bid/60566/info

Monkey HTTP Daemon Mandril Security Plugin – Security Bypass

source: https://www.securityfocus.com/bid/60569/info

Microsoft Internet Explorer – COALineDashStyleArray Integer Overflow (MS13-009) (Metasploit)

##

Grandstream Multiple IP Cameras – Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/60532/info

Sony CH / DH Series IP Cameras – Multiple Cross-Site Request Forgery Vulnerabilities

source: https://www.securityfocus.com/bid/60529/info

Brickcom Multiple IP Cameras – Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/60526/info

Java Applet – Driver Manager Privileged ‘toString()’ Remote Code Execution (Metasploit)

##

Synactis PDF In-The-Box – ConnectToSynactic Stack Buffer Overflow (Metasploit)

##

Java – Web Start Double Quote Injection Remote Code Execution (Metasploit)

##

MobileIron Virtual Smartphone Platform – Privilege Escalation

MobileIron Virtual Smartphone Platform Privilege Escalation Exploit 0day

Microsoft Internet Explorer – textNode Use-After-Free (MS13-037) (Metasploit)

##

Apache Struts – OGNL Expression Injection

source: https://www.securityfocus.com/bid/60345/info

Xpient – Cash Drawer Operation

Core Security - Corelabs Advisory

Plesk < 9.5.4 - Remote Command Execution

Plesk Apache zeroday / June 2013

Apache Struts – includeParams Remote Code Execution (Metasploit)

##

Oracle WebCenter Content – ‘CheckOutAndOpen.dll’ ActiveX Remote Code Execution (Metasploit)

##

MiniUPnPd 1.0 – Remote Stack Buffer Overflow Remote Code Execution (Metasploit)

##

Exim – ‘sender_address’ Remote Code Execution

#!/usr/bin/env python

MongoDB – ‘conn’ Mongo Object Remote Code Execution

source: https://www.securityfocus.com/bid/61309/info

Lianja SQL 1.0.0RC5.1 – db_netserver Stack Buffer Overflow (Metasploit)

##

Intrasrv Simple Web Server 1.0 – Remote Code Execution (SEH)

# Exploit Title: Intrasrv Simple Web Server 1.0 SEH based Remote Code Execution BOF

Logic Print 2013 – vTable Overwrite Stack Overflow

IBM SPSS SamplePower C1Tab – ActiveX Heap Overflow (Metasploit)

##

Nginx 1.3.9 < 1.4.0 - Chuncked Encoding Stack Buffer Overflow (Metasploit)

##

Barracuda SSL VPN 680 – ‘returnTo’ Open Redirection

source: https://www.securityfocus.com/bid/60172/info

SIEMENS Solid Edge ST4/ST5 WebPartHelper – ActiveX RFMSsvs!JShellExecuteEx Remote Code Execution

SIEMENS Solid Edge ST4/ST5 WebPartHelper ActiveX Control

D-Link DIR-615H – OS Command Injection (Metasploit)

##

Linksys WRT160N v2 – ‘apply.cgi’ Remote Command Injection (Metasploit)

##

Acme thttpd HTTP Server – Directory Traversal

source: https://www.securityfocus.com/bid/60010/info

Python RRDtool Module – Function Format String

source: https://www.securityfocus.com/bid/60004/info