VMware Workstation - ALSA Config File Local Privilege Escalation Exploit

This Metasploit module exploits a vulnerability in VMware Workstation Pro and Player on Linux which allows users to escalate their privileges by using an ALSA configuration file to load and execute a shared object as root when launching a virtual machine with an attached sound card. This Metasplo...

HP Mercury LoadRunner Agent magentproc.exe - Remote Command Execution (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "HP Mercury LoadRunner Agent magentproc.exe Remote Command Execution", 'Description' = %q This module exploits a remote command execution...

HP Intelligent Management Center dbman opcode 10008 command injection

Added: 12/14/2017 CVE: CVE-2017-5816 BID: 98469 Background HP Intelligent Management Center IMC, also known as HP iNode Management Center, is a comprehensive management platform for delivering integrated, modular network management capabilities. Problem A remote, unauthenticated attacker could...

InduSoft Web Studio Unspecified Stack Buffer Overflow Vulnerability - Windows

InduSoft Web Studio is prone to an unspecified stack buffer overflow vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Cisco Prime Collaboration Provisioning ScriptMgr HEAD request vulnerability

Added: 10/25/2017 CVE: CVE-2017-6622 BID: 98520 Background The Cisco Prime Collaboration product family facilitates installation and maintenance of Cisco Unified Communications and Cisco TelePresence components, as well as the provisioning of users and services. Problem Missing security constrain...

Open Source Invalid Traffic Detection: Nameles

Nameles provides an easy to deploy, scalable IVT detection and filtering solution that is proven to detect at a high level of accuracy ad fraud and other types of invalid traffic such as web scraping. Comprehensive Detection Detects display, video and in-app based ad fraud, web scraping and other...

LAquis SCADA 4.1.0.2385 - Directory Traversal Exploit

Exploit for multiple platform in category remote exploits require 'msf/core' class MetasploitModule 'LAquis SCADA Web Server Directory Traversal Information Disclosure', 'Description' = %q This module exploits a directory traversal vulnerability found in the LAquis SCADA application. The...

LAquis SCADA 4.1.0.2385 - Directory Traversal (Metasploit)

LAquis SCADA 4.1.0.2385 - Directory Traversal Metasploit require 'msf/core' class MetasploitModule 'LAquis SCADA Web Server Directory Traversal Information Disclosure', 'Description' = %q This module exploits a directory traversal vulnerability found in the LAquis SCADA application. The...

Dameware Mini Remote Control 4.0 Username Stack Buffer Overflow

require 'msf/core' class MetasploitModule 'Dameware Mini Remote Control Username Stack Buffer Overflow', 'Description' = %q This module exploits a stack based buffer overflow vulnerability found in Dameware Mini Remote Control v4.0. The overflow is caused when sending an overly long username to t...

ICLowBidAuction 3.3 SQL Injection

Exploit Title: Unique Low Bid Auction Script 3.3 - SQL Injection Dork: N/A Date: 13.09.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Link: http://www.icloudcenter.com/unique-low-bid-auction-script.htm Demo: http://www.icloudcenter.net/demos/iclowbidauction/ Version: 3.3 Category:...

Carel PlantVisor 2.4.4 - Directory Traversal Information Disclosure (Metasploit)

Carel PlantVisor 2.4.4 - Directory Traversal Information Disclosure Metasploit require 'msf/core' class MetasploitModule 'Carel Pl@ntVisor Directory Traversal', 'Description' = %q This module exploits a directory traversal vulnerability found in Carel Pl@ntVisor 'james fitts' , 'License' =...

Carel PlantVisor 2.4.4 - Directory Traversal Information Disclosure Exploit

Exploit for windows platform in category web applications require 'msf/core' class MetasploitModule 'Carel email protected Directory Traversal', 'Description' = %q This module exploits a directory traversal vulnerability found in Carel email protected 'james fitts' , 'License' = MSFLICENSE,...

Dameware Mini Remote Control 4.0 - Username Stack Buffer Overflow (Metasploit)

Dameware Mini Remote Control 4.0 - Username Stack Buffer Overflow Metasploit require 'msf/core' class MetasploitModule 'Dameware Mini Remote Control Username Stack Buffer Overflow', 'Description' = %q This module exploits a stack based buffer overflow vulnerability found in Dameware Mini Remote...

ICLowBidAuction 3.3 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Unique Low Bid Auction Script 3.3 - SQL Injection Dork: N/A Date: 13.09.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Link: http://www.icloudcenter.com/unique-low-bid-auction-script.htm Demo:...

Dameware Mini Remote Control 4.0 - Username Stack Buffer Overflow (Metasploit)

require 'msf/core' class MetasploitModule 'Dameware Mini Remote Control Username Stack Buffer Overflow', 'Description' = %q This module exploits a stack based buffer overflow vulnerability found in Dameware Mini Remote Control v4.0. The overflow is caused when sending an overly long username to t...

Carel PlantVisor 2.4.4 - Directory Traversal Information Disclosure (Metasploit)

require 'msf/core' class MetasploitModule 'Carel Pl@ntVisor Directory Traversal', 'Description' = %q This module exploits a directory traversal vulnerability found in Carel Pl@ntVisor 'james fitts' , 'License' = MSFLICENSE, 'References' = 'CVE', '2011-3487' , 'BID', '49601' , , 'DisclosureDate' =...

HP iLO 4 1.00-2.50 Authentication Bypass Administrator Account Creation

This module exploits an authentication bypass in HP iLO 4 1.00 to 2.50, triggered by a buffer overflow in the Connection HTTP header handling by the web server. Exploiting this vulnerability gives full access to the REST API, allowing arbitrary accounts creation. Module Options msf use...

Jenkins groovy.util.Expando Java deserialization vulnerability

Added: 08/15/2017 CVE: CVE-2016-0792 BID: 83720 Background Jenkins is a standalone, open-source automation server written in Java. Problem A deserialization vulnerability in the groovy.util.Expando class allows a remote attacker to execute arbitrary commands by requesting createItem with speciall...

Advantech SUSIAccess 3.0 File Upload

! /usr/bin/env ruby =begin Exploit Title: Advantech SUSIAccess RecoveryMgmt File Upload Date: 07/31/17 Exploit Author: james fitts Vendor Homepage: http://www.advantech.com/ Version: Advantech SUSIAccess = 3.0 Tested on: Windows 7 SP1 Relavant Advisories: ZDI-16-630 ZDI-16-628 CVE-2016-9349...

Advantech SUSIAccess 3.0 - Directory Traversal Information Disclosure (Metasploit)

Advantech SUSIAccess 3.0 - Directory Traversal Information Disclosure Metasploit require 'msf/core' class MetasploitModule 'Advantech SUSIAccess Server Directory Traversal Information Disclosure', 'Description' = %q This module exploits an information disclosure vulnerability found in Advantech...