webapps

Web Interface for DNSmasq / Mikrotik – SQL Injection

[+] Credits: hyp3rlinx

eXtplorer 2.1.9 – ‘.ZIP’ Directory Traversal

[+] Credits: John Page aka hyp3rlinx

CakePHP Framework 3.2.4 – IP Spoofing

=============================================

Trend Micro – ‘CoreServiceShell.exe’ Multiple HTTP s

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=775

WordPress Plugin Huge-IT Image Gallery 1.8.9 – Multiple Vulnerabilities

# Exploit Title: WordPress plugin Image Gallery Full Path Disclosure and SQL Injection

WordPress Plugin Q and A (Focus Plus) FAQ 1.3.9.7 – Multiple Vulnerabilities

# Exploit Title: WordPress Q and A (Focus Plus) FAQ Full Path Disclosure and SQL Injection

JVC HDRs / Net (Multiple Cameras) – Multiple Vulnerabilities

| | | |

ZeewaysCMS – Multiple Vulnerabilities

ZeewaysCMS Multiple Vulnerabilities

Ajaxel CMS 8.0 – Multiple Vulnerabilities

Ajaxel CMS 8.0 Multiple Vulnerabilities

ManageEngine Applications Manager Build 12700 – Multiple Vulnerabilities

[SPSA-2016-02/ManageEngine ApplicationsManager]------------------------------

DotNetNuke 07.04.00 – Administration Authentication Bypass

# Exploit Title: DotNetNuke 07.04.00 Administration Authentication Bypass

WordPress Plugin Ninja Forms 2.9.36 < 2.9.42 - File Upload (Metasploit)

##

Imagick 3.3.0 (PHP 5.4) – disable_functions Bypass

# Exploit Title: PHP Imagick disable_functions Bypass

IPFire < 2.19 Core Update 101 - Remote Command Execution

######################################################################################

NetCommWireless HSPA 3G10WVE Wireless Router – Multiple Vulnerabilities

Title:

WordPress Plugin Acunetix WP Security Plugin 3.0.3 – Cross-Site Scripting

1. Introduction

CMS Made Simple < 1.12.1 / < 2.1.3 - Web Server Cache Poisoning

=============================================

Alibaba Clone B2B Script – Admin Authentication Bypass

# Exploit Title: Alibaba Clone B2B Script Admin Authentication Bypass

WordPress Plugin Ghost 0.5.5 – Unrestricted Export Download

# Exploit Title: WordPress Export to Ghost Unrestricted Export Download

GLPi 0.90.2 – SQL Injection

Advisory ID: HTB23301

Merit Lilin IP Cameras – Multiple Vulnerabilities

_ _ _ _ _ _ _ _ _ _

Observium 0.16.7533 – (Authenticated) Arbitrary Command Execution

# Exploit title: Observium Commercial - Authenticated RCE

Observium 0.16.7533 – Cross-Site Request Forgery

Change admin password

RomPager 4.34 (Multiple Router Vendors) – ‘Misfortune Cookie’ Authentication Bypass

# Title: Misfortune Cookie Exploit (RomPager

EMC ViPR SRM – Cross-Site Request Forgery

ImpressCMS 1.3.9 – SQL Injection

=============================================

NationBuilder – Multiple Persistent Cross-Site Scripting Vulnerabilities

#1 Stored XSS in 'signup[note]' POST parameter

Gemtek CPE7000 – WLTCS-106 ‘sysconf.cgi’ Remote Command Execution (Metasploit)

##

Gemtek CPE7000 – WLTCS-106 Administrator SID Retriever (Metasploit)

##

C/C++ Offline Compiler and C For OS – Persistent Cross-Site Scripting

Document Title:

Totemomail 4.x/5.x – Persistent Cross-Site Scripting

Document Title:

Gemtek CPE7000 / WLTCS-106 – Multiple Vulnerabilities

#!/usr/bin/python

Symantec Brightmail 10.6.0-7 – LDAP Credentials Disclosure (Metasploit)

# Exploit Title: Symantec Brightmail ldap credential Grabber

phpLiteAdmin 1.9.6 – Multiple Vulnerabilities

#####################################################################################################################...

PHPBack 1.3.0 – SQL Injection

[+] Credits: hyp3rlinx

modified eCommerce Shopsoftware 2.0.0.0 rev 9678 – Blind SQL Injection

# Title: Blind Injection modified eCommerce 2.0.0.0 rev 9678

pfSense Community Edition 2.2.6 – Multiple Vulnerabilities

( , ) (,

Webutler CMS 3.2 – Cross-Site Request Forgery

Dear OffSec,

WordPress Plugin Kento Post View Counter 2.8 – Cross-Site Request Forgery / Cross-Site Scripting

I would like to disclose CSRF and stored XSS vulnerability in Kento post view counter plugin version 2.8 .

WordPress Plugin leenk.me 2.5.0 – Cross-Site Request Forgery / Cross-Site Scripting

I would like to disclose CSRF and stored XSS vulnerability in Wordpress

AirOS 6.x – Arbitrary File Upload

EDB-Note Source: https://hackerone.com/reports/73480

PHPmongoDB 1.0.0 – Multiple Vulnerabilities

#####################################################################################################################...

Brickcom Corporation Network Cameras – Multiple Vulnerabilities

_ _ _ _

pfSense Firewall 2.2.6 – Services Cross-Site Request Forgery

# Exploit Title: pfSense Firewall

Oracle Application Testing Suite (ATS) 12.4.0.2.0 – Authentication Bypass / Arbitrary File Upload

# Exploit Title: Oracle Application Testing Suite Authentication Bypass and Arbitrary File Upload Remote Exploit

Ovidentia troubleticketsModule 7.6 – Remote File Inclusion

# Title: Ovidentia Module troubletickets 7.6 GLOBALS[babInstallPath] Remote File Inclusion Vulnerability

Novell ServiceDesk 6.5/7.0.3/7.1.0 – Multiple Vulnerabilities

>> Multiple vulnerabilities in Novell Service Desk 7.1.0, 7.0.3 and 6.5

Axis Network Cameras – Multiple Vulnerabilities

_ _ _ _

RockMongo PHP MongoDB Administrator 1.1.8 – Multiple Vulnerabilities

#####################################################################################################################...

OpenCart 2.1.0.2 < 2.2.0.0 - json_decode Function Remote Code Execution

OpenCart json_decode function Remote PHP Code Execution