Hex : Shard of Fate 1.0.1.026 - Unquoted Path Privilege Escalation

Hex : Shard of Fate 1.0.1.026 - Unquoted Path Privilege Escalation ----------------------------------------------------------------------------------------------------------------- Exploit Title: Hex : Shard of Fate 1.0.1.026 - Privilege Escalation Unquoted path vulnerability Date: 15/05/2016...

Multiples Nexon Games - Unquoted Path Privilege Escalation

----------------------------------------------------------------------------------------------------------------- Exploit Title: Multiples Nexon Games - Privilege Escalation Unquoted path vulnerabilities Date: 13/05/2016 Exploit Author : Cyril Vallicari Vendor Homepage: http://www.nexon.net/...

Web2py 2.14.5 CSRF / XSS / Local File Inclusion

Title - Web2py 2.14.5 Multiple Vulnerabilities LFI,XSS,CSRF Exploit Title : Web2py 2.14.5 Multiple Vulnerabilities LFI, XSS,CSRF Reported Date : 2-April-2016 Fixed Date : 4-April-2016 Exploit Author : Narendra Bhati - https://www.exploit-db.com/author/?a=7638 CVE ID : LFI - CVE-2016-4806 ,...

Web2py 2.14.5 - Multiple Vulnerabilities

Title - Web2py 2.14.5 Multiple Vulnerabilities LFI,XSS,CSRF Exploit Title : Web2py 2.14.5 Multiple Vulnerabilities LFI, XSS,CSRF Reported Date : 2-April-2016 Fixed Date : 4-April-2016 Exploit Author : Narendra Bhati - https://www.exploit-db.com/author/?a=7638 CVE ID : LFI - CVE-2016-4806 ,...

CJExploiter - Drag and Drop ClickJacking Exploit Development Assistance Tool

CJExploiter is drag and drop ClickJacking exploit development assistance tool. First open the "index.html" with your browser locally and enter target URL and click on "View Site". You can dynamically create your own inputs. Finally by click the "Exploit It" you can see the P0C. Summery...

Microsoft Windows Media Center - '.MCL' File Processing Remote Code Execution (MS16-059)

Exploit for windows platform in category remote exploits Exploit Title: Microsoft Windows Media Center .MCL File Processing Remote Code Execution Vulnerability MS16-059 Date: May 11th, 2016 Exploit Author: Eduardo Braun Prado Vendor Homepage : http://www.microsoft.com Version: All prior to May...

Ipswitch WS_FTP LE 12.3 SEH Overwrite

!/usr/bin/python Author: Zahid Adeel Author Email: [email protected] Title: Ipswitch WSFTP LE 12.3 - Search field SEH Overwrite POC Vendor Homepage: http://www.wsftple.com/ Software Link: http://www.wsftple.com/download.aspx Version: LE 12.3 Tested on: Windows 8.1 x64 Pro Date: 2016-05-10...

Microsoft Windows Media Center - '.MCL' File Processing Remote Code Execution (MS16-059)

Exploit Title: Microsoft Windows Media Center .MCL File Processing Remote Code Execution Vulnerability MS16-059 Date: May 11th, 2016 Exploit Author: Eduardo Braun Prado Vendor Homepage : http://www.microsoft.com Version: All prior to May 10th, 2016 update. Tested on: Windows Media Center running ...

CIScan 1.00 - HostnameIP Field Overwrite (SEH) (PoC)

CIScan 1.00 - HostnameIP Field Overwrite SEH PoC !/usr/bin/python Exploit Title : CIScanv1.00 Hostname/IP Field SEH Overwrite POC Discovery by : Nipun Jaswal Email : [email protected] Discovery Date : 11/05/2016 Software Link : http://www.mcafee.com/us/downloads/free-tools/ciscan.aspx Tested...

Joomla Event Manager 2.x Cross Site Scripting

Exploit Title : Joomla Event Manager comjem - Cross Site Scripting Exploit Author : Persian Hack Team Vendor Homepage : http://www.joomlaeventmanager.net/download Category: Webapps Tested on: Win Version: 2.x Date: 2016/05/11 PoC: itemid=XSS Payload = "PersianHack Team Demo :...

CIScan 1.00 SEH Overwrite

!/usr/bin/python Exploit Title : CIScanv1.00 Hostname/IP Field SEH Overwrite POC Discovery by : Nipun Jaswal Email : [email protected] Discovery Date : 11/05/2016 Software Link : http://www.mcafee.com/us/downloads/free-tools/ciscan.aspx Tested Version : 1.00 Vulnerability Type: SEH Overwrite...

Vimeo: All Vimeo Private videos disclosure via Authorization Bypass

Hello, There is a vulnerability in https://vimeo.com/VIDEOID?action=share that makes all Vimeo private videos available to anybody. POC link : http://opnsec.com/vimeo/vl/videoLeak.php?video=VIDEOID POC requirements : - No need to be logged in Vimeo - Because of sensitivity of this, I put a passwo...

Adobe Reader DC 15.010.20060 - Memory Corruption

Title: Adobe Reader DC = 15.010.20060 - Memory corruption Application: Adobe Reader DC Version: 15.010.20060 and earlier versions Platform: Windows and Macintosh Software Link: https://acrobat.adobe.com/ca/fr/acrobat/pdf-reader.html Date: May 10, 2016 CVE: CVE-2016-1077 Author: Pier-Luc Maltais...

Ipswitch WS_FTP LE 12.3 - Search field Overwrite (SEH) (PoC)

Exploit for windows platform in category dos / poc !/usr/bin/python Author: Zahid Adeel Author Email: email protected Title: Ipswitch WSFTP LE 12.3 - Search field SEH Overwrite POC Vendor Homepage: http://www.wsftple.com/ Software Link: http://www.wsftple.com/download.aspx Version: LE 12.3 Tested...

Ipswitch WS_FTP LE 12.3 - Search field Overwrite (SEH) (PoC)

Ipswitch WSFTP LE 12.3 - Search field Overwrite SEH PoC !/usr/bin/python Author: Zahid Adeel Author Email: [email protected] Title: Ipswitch WSFTP LE 12.3 - Search field SEH Overwrite POC Vendor Homepage: http://www.wsftple.com/ Software Link: http://www.wsftple.com/download.aspx Version: L...

Core FTP Server 32-bit Build 587 - Heap Overflow

-- coding: cp1252 -- Exploit Title: Core FTP Server 32-bit - Build 587 Heap Overflow Date: 05/10/2016 Exploit Author: Paul Purcell Contact: ptpxploit at gmail Vendor Homepage: http://www.coreftp.com/ Vulnerable Version Download: http://coreftp.com/server/download/archive/CoreFTPServer587.exe...

Ipswitch WS_FTP LE 12.3 - Search field Overwrite (SEH) (PoC)

!/usr/bin/python Author: Zahid Adeel Author Email: [email protected] Title: Ipswitch WSFTP LE 12.3 - Search field SEH Overwrite POC Vendor Homepage: http://www.wsftple.com/ Software Link: http://www.wsftple.com/download.aspx Version: LE 12.3 Tested on: Windows 8.1 x64 Pro Date: 2016-05-10...

Microsoft Windows 7 - 'WebDAV' Local Privilege Escalation (MS16-016) (2)

Exploit Title: WebDAV Elevation of Privilege Vulnerability MS16-2 Date: 8/5/2016 Exploit Author: hex0r Version:WebDAV on Windows 7 84x CVE : CVE-2016-0051 Intro: Credits go to koczkatama for coding a PoC, however if you run this exploit from shell connection, not a remote desktop, the result will...

RPCScan 2.03 - Hostname/IP Field Overwrite (SEH) (PoC)

Exploit for windows platform in category dos / poc !/usr/bin/python Exploit Title : RPCScan v2.03 Hostname/IP Field SEH Overwrite POC Discovery by : Nipun Jaswal Email : email protected Discovery Date : 08/05/2016 Vendor Homepage : http://samspade.org Software Link :...

Microsoft Windows 7 - 'WebDAV' Privilege Escalation (MS16-016) (2)

Exploit for windows platform in category local exploits Exploit Title: WebDAV Elevation of Privilege Vulnerability MS16-2 Date: 8/5/2016 Exploit Author: hex0r Version:WebDAV on Windows 7 84x CVE : CVE-2016-0051 Intro: Credits go to koczkatama for coding a PoC, however if you run this exploit from...