webapps

Openfire 3.10.2 – Remote File Inclusion

[+] Credits: hyp3rlinx

Openfire 3.10.2 – Unrestricted Arbitrary File Upload

[+] Credits: hyp3rlinx

WordPress Plugin CP Reservation Calendar 1.1.6 – SQL Injection

# Exploit Title: WordPress: cp-reservation-calendar 1.1.6 SQLi injection]

WordPress Plugin EZ SQL Reports < 4.11.37 - Multiple Vulnerabilities

# Exploit Title: EZ SQL Reports < 4.11.37: Arbitrary File Download (admin/colaborator required)

ManageEngine OpManager 11.5 – Multiple Vulnerabilities

Exploit Title: ManageEngine OpManager multiple vulnerabilities

ManageEngine EventLog Analyzer < 10.6 build 10060 - SQL Execution

Exploit Title: ManageEngine EventLog Analyzer SQL query execution

Monsta FTP 1.6.2 – Multiple Vulnerabilities

# Exploit Title: CSRF XSS Monsta FTP

Octogate UTM 3.0.12 – Admin Interface Directory Traversal

# Exploit Title: Octogate UTM Admin Interface Directory Traversal

Synology Video Station 1.5-0757 – Multiple Vulnerabilities

------------------------------------------------------------------------

PHP 5.5.9 – ‘zend_executor_globals’ ‘CGIMode FPM WriteProcMemFile’ disable_functions Bypass / Load Dynamic Library

Auto-Exchanger 5.1.0 – Cross-Site Request Forgery

Qlikview 11.20 SR11 – Blind XML External Entity Injection

Exploit Title: Qlikview blind XXE security vulnerability

DirectAdmin Web Control Panel 1.483 – Multiple Vulnerabilities

=============================================================================

WordPress Theme White-Label Framework 2.0.6 – Cross-Site Scripting

# Exploit Title: Wordpress White-Label Framework XSS

JSPMySQL Administrador – Multiple Vulnerabilities

[+] Credits: hyp3rlinx

Netgear Wireless Management System 2.1.4.15 (Build 1236) – Privilege Escalation

NETGEAR Wireless Management System - Authentication Bypass and

Elastix < 2.5 - PHP Code Injection

FireEye Appliance – Unauthorized File Disclosure

Just one of many handfuls of FireEye / Mandiant 0day. Been sitting on this for more than 18 months with no fix from t...

WordPress Plugin Contact Form Generator 2.0.1 – Multiple Cross-Site Request Forgery Vulnerabilities

HooToo Tripmate HT-TM01 2.000.022 – Cross-Site Request Forgery

# Exploit Title: HooToo Tripmate HT-TM01 Cross Site Request Forgery

Zhone ADSL2+ 4P Bridge & Router (Broadcom) – Multiple Vulnerabilities

Document Title:

Tenda N3 Wireless N150 Router – Authentication Bypass

# Exploit Title: Complete Authentication Bypass In Tenda N3 Wireless N150 Routers

Cerb 7.0.3 – Cross-Site Request Forgery

Advisory ID: HTB23269

GPON Home Router FTP G-93RG1 – Cross-Site Request Forgery / Command Execution

CSRF Demo Exploit

YesWiki 0.2 – ‘squelette’ Directory Traversal

# Exploit Title: YESWIKI 0.2 - Path Traversal

Mantis Bug Tracker 1.2.19 – Host Header

# Exploit Title: MantisBT 1.2.19 - Host header attack vulnerability

Thomson Wireless VoIP Cable Modem TWG850-4B ST9C.05.08 – Authentication Bypass

###############################################################################

Edimax BR6228nS/BR6228nC – Multiple Vulnerabilities

# Title: Edimax BR6228nS/BR6228nC - Multiple vulnerabilities

Bedita 3.5.1 – Cross-Site Scripting

########################################################################################

Cyberoam Firewall CR500iNG-XP 10.6.2 MR-1 – Blind SQL Injection

# Exploit Title: Cyberoam : Blind SQL Injection

Ganglia Web Frontend < 3.5.1 - PHP Code Execution

Edimax PS-1206MF – Web Admin Authentication Bypass

# Title: Edimax PS-1206MF - Web Admin Auth Bypass

PhpWiki 1.5.4 – Multiple Vulnerabilities

# Title: phpwiki 1.5.4 - Cross Site Scripting / Local File Inclusion

Samsung SyncThruWeb 2.01.00.26 – SMB Hash Disclosure

# Exploit Title: Samsung SyncThruWeb SMB Hash Disclosure

Pluck CMS 4.7.3 – Multiple Vulnerabilities

# Title: Pluck 4.7.3 - Multiple vulnerabilities

Wolf CMS – Arbitrary File Upload / Execution

# Exploit Title : Wolf CMS 0.8.2 Arbitrary File Upload To Command

Jenkins 1.626 – Cross-Site Request Forgery / Code Execution

# Title: Jenkins 1.626 - Cross Site Request Forgery / Code Execution

WordPress Plugin Responsive Thumbnail Slider 1.0 – Arbitrary File Upload

# Exploit Title: Wordpress Responsive Thumbnail Slider Arbitrary File Upload

Oracle GlassFish Server 4.1 – Directory Traversal

Trustwave SpiderLabs Security Advisory TWSL2015-016:

Invision Power Board (IP.Board) 4.x – Persistent Cross-Site Scripting

# Exploit Title: IP.Board 4.X Stored XSS

Magento eCommerce – Remote Code Execution

##################################################################################################

vBulletin 3.6.0 < 4.2.3 - 'ForumRunner' SQL Injection

##################################################################################################

Keeper IP Camera 3.2.2.10 – Authentication Bypass

# Exploit Title: Keeper IP Camera - Authentication Bypass

WordPress Theme GeoPlaces3 – Arbitrary File Upload

##################################################################################

Pligg CMS 2.0.2 – Cross-Site Request Forgery (Add Admin)

Admin

Netsweeper 4.0.8 – Arbitrary File Upload / Execution

+--------------------------------------------------------+

Netsweeper 3.0.6 – Authentication Bypass

+------------------------------------------------------------------------+

Netsweeper 4.0.9 – Arbitrary File Upload / Execution

+--------------------------------------------------------+

Netsweeper 4.0.8 – Authentication Bypass (via Disabling of IP Quarantine)

+-----------------------------------------------------------------------+

Netsweeper 4.0.8 – SQL Injection / Authentication Bypass

+----------------------------------------------------------------+