remote

Mutiny 5 – Arbitrary File Upload (Metasploit)

##

SAP SOAP RFC – SXPG_CALL_SYSTEM Remote Command Execution (Metasploit)

##

SAP SOAP RFC – SXPG_COMMAND_EXECUTE Remote Command Execution (Metasploit)

##

Dovecot with Exim – ‘sender_address’ Remote Command Execution

Advisory: Exim with Dovecot: Typical Misconfiguration Leads to Remote

Microsoft Internet Explorer – CGenericElement Object Use-After-Free (Metasploit)

##

WordPress Plugin W3 Total Cache – PHP Code Execution (Metasploit)

##

phpMyAdmin – ‘preg_replace’ (Authenticated) Remote Code Execution (Metasploit)

##

Cisco Linksys E4200 – ‘/apply.cgi’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/59558/info

Belkin F5D8236-4 Router – Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/59476/info

GroundWork – ‘monarch_scan.cgi’ OS Command Injection (Metasploit)

##

Light HTTPd 0.1 (Windows) – Remote Buffer Overflow

import urllib2

SAP ConfigServlet – Remote Payload Execution (Metasploit)

require 'msf/core'

TP-Link TL-WR1043N Router – Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/59442/info

Java Applet – Reflection Type Confusion Remote Code Execution (Metasploit)

##

Netgear DGN2200B – ‘pppoe.cgi’ Remote Command Execution (Metasploit)

##

D-Link DIR-865L – Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/59312/info

SAP ConfigServlet – OS Command Execution (Metasploit)

require 'msf/core'

FirePHP Firefox Plugin 0.7.1 – Remote Command Execution

# Exploit Title: Firephp firefox plugin RCE

Cisco Linksys EA2700 Router – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/59054/info

MinaliC WebServer 2.0.0 – Remote Buffer Overflow

#!/usr/bin/env python

D-Link DIR-645 / DIR-815 – ‘diagnostic.php’ Command Execution (Metasploit)

##

Nagios Remote Plugin Executor – Arbitrary Command Execution (Metasploit)

##

KNet Web Server 1.04b – Stack Corruption Buffer Overflow

#!/usr/bin/perl

Adobe ColdFusion APSB13-03 – Remote Multiple Vulnerabilities (Metasploit)

##

Linksys WRT54GL – ‘apply.cgi’ Command Execution (Metasploit)

##

Freefloat FTP Server 1.0 – DEP Bypass with ROP

#!usr/bin/python

BigAnt Server 2.97 – DDNF ‘Username’ Remote Buffer Overflow

#!/usr/bin/python

Foscam IP (Multiple Cameras) – Multiple Cross-Site Request Forgery Vulnerabilities

source: https://www.securityfocus.com/bid/58943/info

MongoDB 2.2.3 – nativeHelper.apply Remote Code Execution

#Title: MongoDB nativeHelper.apply Remote Code Execution

Novell ZENworks Configuration Management 10 SP3/11 SP2 – Remote Execution (Metasploit)

##

HP System Management – Anonymous Access Code Execution (Metasploit)

##

Linksys E1500/E2500 – ‘apply.cgi’ Remote Command Injection (Metasploit)

##

MongoDB – nativeHelper.apply Remote Code Execution (Metasploit)

##

Netgear DGN1000B – ‘setup.cgi’ Remote Command Execution (Metasploit)

##

McAfee Virtual Technician (MVT) 6.5.0.2101 – Insecure ActiveX Method

Advisory ID: HTB23128

v0pCr3w (Web Shell) – Remote Code Execution (Metasploit)

##

Java CMM – Remote Code Execution (Metasploit)

##

STUNSHELL (Web Shell) – Remote Code Execution (Metasploit)

##

STUNSHELL (Web Shell) – PHP Remote Code Execution (Metasploit)

##

KNet Web Server 1.04b – Remote Buffer Overflow (SEH)

#!/usr/bin/ruby

IBM Lotus Domino 8.5.x – ‘x.nsf’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/58715/info

Rosewill RSVA11001 – Remote Command Injection

I have been hacking on a Rosewill RSVA11001 for a while now, something to

HP Intelligent Management Center – Arbitrary File Upload (Metasploit)

##

ActFax 5.01 – RAW Server Buffer Overflow (Metasploit)

##

Mutiny – Remote Command Execution (Metasploit)

##

KingView – Log File Parsing Buffer Overflow (Metasploit)

##

Mitsubishi MX ActiveX Component 3 – ‘ActUWzd.dll’ ‘WzTitle’ Remote Heap Spray

Cool PDF Image Stream – Remote Buffer Overflow (Metasploit)

##

Sami FTP Server – ‘LIST’ Buffer Overflow (Metasploit)

##

Apache Struts – ‘ParametersInterceptor’ Remote Code Execution (Metasploit)

##