webapps

D-Link DVG­N5402SP – Multiple Vulnerabilities

# Exploit Title: [DLink DVG­N5402SP Multiple Vulnerabilities]

GE Industrial Solutions UPS SNMP Adapter < 4.8 - Multiple Vulnerabilities

# Exploit Title: [GE Industrial Solutions - UPS SNMP Adapter Command

Viprinet Multichannel VPN Router 300 – Persistent Cross-Site Scripting

Vulnerability title: Multiple Instances Of Cross-site Scripting In Viprinet Multichannel VPN Router 300

Jive Forums 5.5.25 – Directory Traversal

'''

TimeClock Software 0.995 – (Authenticated ) Multiple SQL Injections

#############################

eClinicalWorks (CCMR) – Multiple Vulnerabilities

# Title: eClinicalWorks (CCMR) - Multiple Vulnerabilities

Manage Engine Network Configuration Manager Build 11000 – Cross-Site Request Forgery

=========================================================================================

ManageEngine EventLog Analyzer 4.0 < 10 - Privilege Escalation

-----BEGIN PGP SIGNED MESSAGE-----

Hippo CMS 10.1 – Multiple Vulnerabilities

Hippo CMS 10.1 XML External Entity Information Disclosure Vulnerability

iScripts EasyCreate 3.0 – Remote Code Execution

#!C:/Python27/python.exe -u

iScripts EasyCreate 3.0 – Multiple Vulnerabilities

iScripts EasyCreate 3.0 Multiple Vulnerabilities

ProjectSend r582 – Multiple Vulnerabilities

Advisory ID: SGMA-16001

WordPress Plugin Simple Add Pages or Posts 1.6 – Cross-Site Request Forgery

########################################################################

SAP HANA 1.00.095 – hdbindexserver Memory Corruption

[ERPSCAN-15-024] SAP HANA hdbindexserver - Memory corruption

Netgear WNR1000v4 – Authentication Bypass

'''

Ramui Web Hosting Directory Script 4.0 – Remote File Inclusion

# Title: Ramui web hosting directory script 4.0 Remote File Include Vulnerability

Ramui Forum Script 9.0 – SQL Injection

# Title: Ramui forum script 9.0 SQL Injection Exploit

WordPress Plugin Booking Calendar Contact Form 1.1.24 – addslashes SQL Injection

# Exploit Title: WordPress appointment-booking-calendar query("update ".CPABC_TDEAPP_CONFIG." set specialDates='".$_...

WordPress Plugin Booking Calendar Contact Form 1.1.24 – Multiple Vulnerabilities

# Exploit Title: WordPress appointment-booking-calendar

BK Mobile jQuery CMS 2.4 – Multiple Vulnerabilities

#Product : BK Mobile CMS

Secure Item Hub 1.0 iOS – Multiple Vulnerabilities

Document Title:

Gongwalker API Manager 1.1 – Blind SQL Injection

gongwalker API Manager v1.1 - Blind SQL Injection

WordPress Plugin Booking Calendar Contact Form 1.1.23 – Shortcode SQL Injection

# Exploit Title: WordPress appointment-booking-calendar

WordPress Plugin Booking Calendar Contact Form 1.1.23 – SQL Injection

# Exploit Title: WordPress appointment-booking-calendar get_results( "SELECT * FROM ".CPABC_TDEAPP_CALENDAR_DATA_TABL...

pfSense Firewall 2.2.5 – Config File Cross-Site Request Forgery

SeaWell Networks Spectrum – Multiple Vulnerabilities

# Exploit Title: [SeaWell Networks Spectrum - Multiple Vulnerabilities]

Advanced Electron Forum 1.0.9 – Remote File Inclusion / Cross-Site Request Forgery

[+] Credits: hyp3rlinx

Advanced Electron Forum 1.0.9 – Persistent Cross-Site Scripting

[+] Credits: hyp3rlinx

Advanced Electron Forum 1.0.9 – Cross-Site Request Forgery

[+] Credits: hyp3rlinx

mcart.xls Bitrix Module 6.5.2 – SQL Injection

Advisory ID: HTB23279

Roundcube Webmail 1.1.3 – Directory Traversal

Advisory ID: HTB23283

phpDolphin 2.0.5 – Multiple Vulnerabilities

# Exploit Title: phpDolphin http://target.com/index.php?a=search&q=teste&filter=m">XSS

GlassFish Server – Arbitrary File Read

# Title: glassfish Arbitrary file read vulnerability

Manage Engine Application Manager 12.5 – Arbitrary Command Execution

#!C:/Python27/python.exe -u

Manage Engine Applications Manager 12 – Multiple Vulnerabilities

Manage Engine Applications Manager 12 Multiple Vulnerabilities

SevOne NMS 5.3.6.0 – Remote Command Execution

#!/usr/bin/env python

WhatsUp Gold 16.3 – Remote Code Execution

#

SedSystems D3 Decimator – Multiple Vulnerabilities

SedSystems D3 Decimator Multiple Vulnerabilities

WordPress Plugin WP Symposium Pro Social Network Plugin 15.12 – Multiple Vulnerabilities

#Product : WP Symposium Pro Social Network plugin

OpenMRS Reporting Module 0.9.7 – Remote Code Execution

Title: Unauthenticated remote code execution in OpenMRS

D-Link DCS-931L – Arbitrary File Upload (Metasploit)

##

MediaAccess TG788vn – File Disclosure

Vulnerable hardware : MediaAccess TG788vn with Cisco http firewall

PHPIPAM 1.1.010 – Multiple Vulnerabilities

######################################################################

Atlassian Confluence 5.2/5.8.14/5.8.15 – Multiple Vulnerabilities

[Systems Affected]

Simple PHP Polling System – Multiple Vulnerabilities

Exploit Title : Multiple Vulnerabilities in Simple PHP Polling System.

Online Airline Booking System – Multiple Vulnerabilities

Exploit Title : Online Airline Booking System multiple vulnerabilities

Open Audit – SQL Injection

#Exploit Title : Open Audit SQL Injection Vulnerability

WordPress Plugin Simple Ads Manager 2.9.4.116 – SQL Injection

# Exploit Title: Simple Ads Manager 2.9.4.116 SQL Injection

Rips Scanner 0.5 – ‘code.php’ Local File Inclusion

================================================================================

Beezfud – Remote Code Execution

================================================================================