webapps

Citrix CloudBridge – ‘CAKEPHP’ Cookie Command Injection

POST /cgi-bin/login.cgi?redirect=/ HTTP/1.1

Netscaler SD-WAN 9.1.2.26.561201 – Command Injection (Metasploit)

# Exploit Title: Citix SD-WAN logout cookie preauth Remote Command Injection Vulnerablity

Sonicwall < 8.1.0.2-14sv - 'sitecustomization.cgi' Command Injection (Metasploit)

# Exploit Title: Sonicwall importlogo/sitecustomization CGI Remote Command Injection Vulnerablity

Sonicwall < 8.1.0.6-21sv - 'gencsr.cgi' Command Injection (Metasploit)

# Exploit Title: Sonicwall gencsr CGI Remote Command Injection Vulnerablity

Sonicwall Secure Remote Access 8.1.0.2-14sv – Command Injection

Sonicwall Secure Remote Access (SRA) - Command Injection Vulnerabilities

Oracle E-Business Suite 12.x – Server-Side Request Forgery

# Exploit Title: Oracle E-Business Suite - Server Side Request Forgery

PEGA Platform <= 7.2 ML0 - Missing Access Control / Cross-Site Scripting

Summary

Barracuda Load Balancer Firmware < 6.0.1.006 - Remote Command Injection (Metasploit)

# Exploit Title: Barracuda Load Balancer Firmware

Sophos Web Appliance 4.3.0.2 – ‘trafficType’ Remote Command Injection (Metasploit)

# Exploit Title: Sophos Web Appliance reporting JSON trafficType Remote Command Injection Vulnerablity

Geneko Routers – Path Traversal

## Vulnerability Summary

Orangescrum 1.6.1 – Multiple Vulnerabilities

# Exploit Title: [Orangescrum 1.6.1 Multiple Vulnerabilities]

WDTV Live SMP 2.03.20 – Remote Password Reset

#######################################################

Dasan Networks GPON ONT WiFi Router H64X Series – Configuration Download

Dasan Networks GPON ONT WiFi Router H64X Series System Config Download

Dasan Networks GPON ONT WiFi Router H64X Series – Privilege Escalation

Dasan Networks GPON ONT WiFi Router H64X Series Privilege Escalation

Dasan Networks GPON ONT WiFi Router H64X Series – Cross-Site Request Forgery

Dasan Networks GPON ONT WiFi Router H64X Series Cross-Site Request Forgery

Dasan Networks GPON ONT WiFi Router H64X Series – Authentication Bypass

Dasan Networks GPON ONT WiFi Router H64X Series Authentication Bypass

WordPress Plugin Sabai Discuss – Cross-Site Scripting

# Exploit Title: Sabai Discuss Wordpress Plugin Stored XSS vulnerability

NfSen < 1.3.7 / AlienVault OSSIM 4.3.1 - 'customfmt' Command Injection

# Exploit Title: NfSen/AlienVault remote root exploit (command injection in customfmt parameter)

DataTaker DT80 dEX 1.50.012 – Information Disclosure

[+] Title: DataTaker DT80 dEX 1.50.012 - Sensitive Configurations Exposure

Pelco VideoXpert 1.12.105 – Information Disclosure

Schneider Electric Pelco VideoXpert Missing Encryption Of Sensitive Information

Pelco VideoXpert 1.12.105 – Directory Traversal

Schneider Electric Pelco VideoXpert Core Admin Portal Directory Traversal

Pelco Sarix/Spectra Cameras – Remote Code Execution

Schneider Electric Pelco Sarix/Spectra Cameras Root Remote Code Execution

Pelco Sarix/Spectra Cameras – Cross-Site Request Forgery (Enable SSH Root Access)

Schneider Electric Pelco Sarix/Spectra Cameras CSRF Enable SSH Root Access

Pelco Sarix/Spectra Cameras – Cross-Site Request Forgery / Cross-Site Scripting

Schneider Electric Pelco Sarix/Spectra Cameras Multiple XSS Vulnerabilities

NfSen < 1.3.7 / AlienVault OSSIM 5.3.4 - Command Injection

# Exploit Title: NfSen/AlienVault remote root exploit (IPC query command injection)

Apache Struts 2.3.x Showcase – Remote Code Execution

#!/usr/bin/python

OpenDreamBox 2.0.0 Plugin WebAdmin – Remote Code Execution

# Exploit Title: OpenDreamBox 2.0.0 - Plugin WebAdmin RCE

WordPress Plugin WatuPRO 5.5.1 – SQL Injection

#####################################

Joomla! Component Joomanager 2.0.0 – ‘com_Joomanager’ Arbitrary File Download

#!/usr/bin/python2

Humax HG100R 2.0.6 – Backup File Download

# coding: utf-8

Kaspersky Anti-Virus File Server 8.0.3.297 – Multiple Vulnerabilities

1. *Advisory Information*

Easy File Sharing Web Server 7.2 – Unrestricted File Upload

##################################

WordPress Plugin Ultimate Product Catalogue 4.2.2 – SQL Injection

# Exploit Title: Ultimate Product Catalogue 4.2.2 Sql Injection – Plugin WordPress – Sql Injection

GLPI 0.90.4 – SQL Injection

# Exploit Title: Multiple SQL injection vulnerabilities in GLPI 0.90.4

Eltek SmartPack – Backdoor Account

Eltek SmartPack - Backdoor Account

PHPMailer < 5.2.20 with Exim MTA - Remote Code Execution

#!/usr/bin/python

BOA Web Server 0.94.14rc21 – Arbitrary File Access

BOA Web Server 0.94.14 - Access to arbitrary files as privileges

Sophos XG Firewall 16.05.4 MR-4 – Path Traversal

## Vulnerabilities Summary

WonderCMS 2.1.0 – Cross-Site Request Forgery

D-Link DSL-2640B ADSL Router – ‘dnscfg’ Remote DNS Change

#!/bin/bash

Beetel BCM96338 Router – DNS Change

#!/bin/bash

D-Link DSL-2640U – DNS Change

#!/bin/bash

UTstarcom WA3002G4 – DNS Change

#!/bin/bash

iBall Baton iB-WRA150N – DNS Change

#!/bin/bash

IBM Informix Dynamic Server – Code Injection / Remote Code Execution

#!/usr/local/bin/python

Joomla! Component JoomRecipe 1.0.3 – SQL Injection

# # # # #

KBVault MySQL 0.16a – Arbitrary File Upload

# Exploit Title: [KBVault MySQL v0.16a - Unauthenticated File Upload to Run Code]

Real Estate Classifieds Script – SQL Injection

# # # # #

WordPress Plugin WP Jobs < 1.5 - SQL Injection

# Exploit Title: WordPress Plugin WP Jobs < 1.5 - SQL Injection

PaulShop – SQL Injection

# Exploit Title: [PaulShop CMS