webapps

WordPress Plugin KittyCatfish 2.2 – SQL Injection

# Exploit Title: KittyCatfish 2.2 Plugin for WordPress - SQL Injection

FlySpray 1.0-rc4 – Cross-Site Scripting / Cross-Site Request Forgery

# Exploit Title: XSRF Stored FlySpray 1.0-rc4 (XSS2CSRF add admin account)

OpenText Documentum Content Server – dm_bp_transition.ebs docbase Method Arbitrary Code Execution

'''

LogRhythm Network Monitor – Authentication Bypass / Command Injection

# Exploit Title: LogRhythm Network Monitor Auth Bypass Root RCE

Joomla! Component Myportfolio 3.0.2 – ‘pid’ SQL Injection

# Exploit Title: Joomla Component Myportfolio 3.0.2 - SQL Injection

Apple WebKit / Safari 10.0.2(12602.3.12.0.1) – ‘operationSpreadGeneric’ Universal Cross-Site Scripting

Apple WebKit / Safari 10.0.2(12602.3.12.0.1) – ‘PrototypeMap::createEmptyStructure’ Universal Cross-Site Scripting

Mantis Bug Tracker 1.3.0/2.3.0 – Password Reset

[+] Credits: John Page a.k.a hyp3rlinx

Concrete5 CMS 8.1.0 – ‘Host’ Header Injection

[+] Credits: John Page a.k.a hyp3rlinx

Alienvault OSSIM/USM 5.3.4/5.3.5 – Remote Command Execution (Metasploit)

##

agorum core Pro 7.8.1.4-251 – Persistent Cross-Site Scripting

agorum core Pro 7.8.1.4-251 – Cross-Site Request Forgery

Apple WebKit / Safari 10.0.3 (12602.4.8) – Universal Cross-Site Scripting via a Focus Event and a Link Element

Apple WebKit / Safari 10.0.3 (12602.4.8) – Synchronous Page Load Universal Cross-Site Scripting

click anywhere

Horde Groupware Webmail 3/4/5 – Multiple Remote Code Executions

Source: https://blogs.securiteam.com/index.php/archives/3107

Brother MFC-J6520DW – Authentication Bypass / Password Change

MyBB smilie Module < 1.8.11 - 'pathfolder' Directory Traversal

Description:

MyBB < 1.8.11 - 'email' MyCode Cross-Site Scripting

Description:

FAQ Script 3.1.3 – ‘category_id’ SQL Injection

# # # # #

Social Directory Script 2.0 – SQL Injection

# # # # #

WordPress Plugin Spider Event Calendar 1.5.51 – Blind SQL Injection

=============================================

MyClassifiedScript 5.1 – SQL Injection

# # # # #

Jobscript4Web 4.5 – Authentication Bypass

----------------

Adobe (Multiple Products) – XML Injection File Content Disclosure

#!/bin/bash

WordPress Plugin CopySafe Web Protect < 2.6 - Cross-Site Request Forgery

WordPress Plugin WHIZZ < 1.1.1 - Cross-Site Request Forgery

======

e107 CMS 2.1.4 – Cross-Site Request Forgery

QNAP TVS-663 QTS < 4.2.4 build 20170313 - Command Injection

QNAP QTS multiple RCE vulnerabilities

WordPress Plugin Firewall 2 1.3 – Cross-Site Request Forgery / Cross-Site Scripting

\">

D-Link DWR-116 / DWR-116A1 – Arbitrary File Download

# Title: D-Link DWR-116 Arbitrary File Download

Ladder System 6.0 – ‘faqid’ SQL Injection

# # # # #

My Gaming Ladder Combo System 7.5 – SQL Injection

# # # # #

Survey Template 1.1 – ‘masterkey1’ SQL Injection

# # # # #

Quiz Template 1.0 – ‘testid’ SQL Injection

# # # # #

Forum Template 1.0 – SQL Injection

# # # # #

Calendar Template 2.0 – ‘editid1’ SQL Injection

# # # # #

Shopping Cart Template – ‘item’ SQL Injection

# # # # #

Document Management Template – ‘hash’ SQL Injection

# # # # #

Invoice Template – ‘hash’ SQL Injection

# # # # #

Intellinet NFC-30IR Camera – Multiple Vulnerabilities

Bitcrack Cyber Security - BitLabs Advisory

Moodle 2.x/3.x – SQL Injection

# Exploit: Moodle SQL Injection via Object Injection Through User Preferences

Faveo Helpdesk Community 1.9.3 – Cross-Site Request Forgery

# Exploit Title: CSRF / Privilege Escalation (Manipulation of Role Agent to Admin) on Faveo version Community 1.9.3

HelpDEZK 1.1.1 – Cross-Site Request Forgery / Code Execution

# Exploit Title: Multiple CSRF Remote Code Execution Vulnerability on HelpDEZK 1.1.1

D-Link DIR-615 – Cross-Site Request Forgery

Title:

Appointment Script – SQL Injection

# # # # #

Sweepstakes Pro Software – SQL Injection

# # # # #

Premium Penny Auction Script – SQL Injection

# # # # #

Airbnb Crashpadder Clone Script – SQL Injection

# # # # #

ImagePro Lazygirls Clone Script – SQL Injection

# # # # #

Apple WebKit 10.0.2 (12602.3.12.0.1, r210800) – ‘constructJSReadableStreamDefaultReader’ Type Confusion

let rs = new ReadableStream();