webapps

Zend Framework / zend-mail < 2.4.11 - Remote Code Execution

b2evolution 6.8.2 – Arbitrary File Upload

# Exploit Title: b2evolution6.8.2stable – Upload

Dell SonicWALL Secure Mobile Access SMA 8.1 – Cross-Site Scripting / Cross-Site Request Forgery

Dell SonicWALL Secure Mobile Access SMA 8.1 XSS And WAF CSRF

Dell SonicWALL Global Management System GMS 8.1 – Blind SQL Injection

Dell SonicWALL Global Management System GMS 8.1 Blind SQL Injection

WordPress Plugin Slider Templatic Tevolution < 2.3.6 - Arbitrary File Upload

# Exploit Title: WordPress Templatic

PHPMailer < 5.2.18 - Remote Code Execution

"""

Joomla! Component aWeb Cart Watching System for Virtuemart 2.6.0 – SQL Injection

# Exploit Title: Sqli Blind Timebased on Joomla + Viertuemart + aweb-cartwatching-system/aweb-cartwatching

SwiftMailer < 5.4.5-DEV - Remote Code Execution

WordPress Plugin Simply Poll 1.4.1 – SQL Injection

# Exploit Title: Simply Poll 1.4.1 Plugin for WordPress ­ SQL Injection

PHPMailer < 5.2.20 - Remote Code Execution

#!/usr/bin/python

PHPMailer < 5.2.19 - Sendmail Argument Injection (Metasploit)

##

PHPMailer < 5.2.18 - Remote Code Execution

#!/bin/bash

Joomla! Component Blog Calendar – SQL Injection

==========================================================================================

Sonicwall 8.1.0.2-14sv – ‘extensionsettings.cgi’ Remote Command Injection (Metasploit)

# Exploit Title: Sonicwall extensionsettings scriptname Remote Command Injection Vulnerablity

PHPMailer < 5.2.18 - Remote Code Execution

Sonicwall 8.1.0.2-14sv – ‘viewcert.cgi’ Remote Command Injection (Metasploit)

# Exploit Title: Sonicwall viewcert.cgi CGI Remote Command Injection Vulnerablity

Freepbx < 2.11.1.5 - Remote Code Execution

Exploit Title: Freepbx coockie recordings injection

Apache mod_session_crypto – Padding Oracle

'''

WordPress Plugin 404 Redirection Manager 1.0 – SQL Injection

# Exploit Title: Unauthenticated SQL injeciton in 404 plugin for Wordpress v1.0

WordPress Plugin WP Private Messages 1.0.1 – SQL Injection (1)

# Exploit Title: WP Private Messages 1.0.1 – Plugin WordPress – Sql Injection

WordPress Plugin WP Support Plus Responsive Ticket System 7.1.3 – SQL Injection

# Exploit Title: WP Support Plus Responsive Ticket System 7.1.3 – WordPress Plugin – Sql Injection

WordPress Plugin Quiz And Survey Master 4.5.4/4.7.8 – Cross-Site Request Forgery

Click the submit button on the following page (in a real attack the form can be submitted without user interaction):

WHMCompleteSolution (WHMCS) Addon VMPanel 2.7.4 – SQL Injection

=====================================================

Joomla! Component DT Register – ‘cat’ SQL Injection

Title: SQL injection in Joomla extension DT Register

Sophos Web Appliance 4.2.1.3 – DiagnosticTools Remote Command Injection (Metasploit)

# Exploit Title: Sophos Web Appliance diagnostic_tools wget Remote Command Injection Vulnerablity

Sophos Web Appliance 4.2.1.3 – block/unblock Remote Command Injection (Metasploit)

# Exploit Title: Sophos Web Appliance UnBlock/Block-IP Remote Command Injection Vulnerablity

WordPress Plugin Multisite Post Duplicator 0.9.5.1 – Cross-Site Request Forgery

ARG-W4 ADSL Router – Multiple Vulnerabilities

# Exploit Title: ARG-W4 ADSL Router - Multiple Vulnerabilities

Netgear R7000 – Cross-Site Scripting

# Exploit Title: Netgear R7000 - XSS via. DHCP hostname

D-Link DI-524 – Cross-Site Request Forgery

Title: D-Link DI-524 - Cross-Site-Request-Forgery Vulnerability

Splunk Enterprise 6.4.3 – Server-Side Request Forgery

'''

Roundcube 1.2.2 – Remote Code Execution

Roundcube 1.2.2: Command Execution via Email

Netgear R7000 – Command Injection

# Exploit Title: Netgear R7000 - Command Injection

Cisco Unified Communications Manager 7/8/9 – Directory Traversal

# Exploit Title: Cisco Unified Communications Manager Administrative Web Interface Directory traversal CVE-2013-5528

Edge SkateShop – Authentication bypass

# Exploit Title: Edge SkateShop Authentication Bypass

AbanteCart 1.2.7 – Cross-Site Scripting

# Exploit Title: AbanteCart 1.2.7 Stored XSS

WordPress Plugin Single Personal Message 1.0.3 – SQL Injection

# Exploit Title: Single Personal Message 1.0.3 – Plugin WordPress – Sql Injection

Smart Guard Network Manager 6.3.2 – SQL Injection

# Exploit Title: SQL Injection In Smart Guard Network Manager Api

Xfinity Gateway – Remote Code Execution

# Exploit Title: Xfinity Gateway: Remote Code Execution

Xfinity Gateway – Cross-Site Request Forgery

EXPLOIT TITLE: CSRF RCE XFINITY WEB GATEWAY

WordPress Plugin WP Vault 0.8.6.6 – Local File Inclusion

# Exploit Title: WP Vault 0.8.6.6 – Plugin WordPress – Local File Inclusion

Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 – Multiple Vulnerabilities

# Exploit Title: [Trend Micro Interscan Web Security Virtual Appliance (IWSVA) 6.5.x Multiple Vulnerabilities]

Red Hat JBoss EAP – Deserialization of Untrusted Data

Security Advisory @ Mediaservice.net Srl

Tenda/Dlink/Tplink TD-W8961ND – ‘DHCP’ Cross-Site Scripting

Document Title:

osTicket 1.9.14 – ‘X-Forwarded-For’ Cross-Site Scripting

# Exploit Title: Osticket 1.9.14 and below (X-Forwarded-For) Stored XSS.

AppFusions Doxygen for Atlassian Confluence 1.3.2 – Cross-Site Scripting

[RCESEC-2016-009] AppFusions Doxygen for Atlassian Confluence v1.3.2 renderContent() Persistent Cross-Site Scripting

SAP NetWeaver AS JAVA – ‘BC-BMT-BPM-DSK’ XML External Entity Injection

Application: SAP NetWeaver AS JAVA

EasyPHP Devserver 16.1.1 – Cross-Site Request Forgery / Remote Command Execution

[+] Credits: John Page aka hyp3rlinx

WordPress Plugin Olimometer 2.56 – SQL Injection

# Exploit Title: Olimometer Plugin for WordPress – Sql Injection

FUDforum 3.0.6 – Local File Inclusion

Security Advisory - Curesec Research Team