LikeSoftware CMS Cross Site Request Forgery / Shell Upload

Exploit Title: LikeSoftware CMS - Arbitrary File Upload Google Dork: inurl:/painel/kcfinder/upload/ For easy you can using Google Search Image Date: 2018-05-24 Exploit Author: Mr.7z Vendor Homepage: http://www.likesoftware.com.br/ Software Link: - Tested on: Windows 10 64bit Home Edition Exploit:...

VLC Media Player MKV Use After Free

This module exploits a use after free vulnerability in VideoLAN VLC = use exploit/windows/fileformat/vlc/mkv msf undefinedmkv show actions ...actions... msf undefinedmkv set ACTION msf undefinedmkv show options ...show and set options... msf undefinedmkv run This module requires Metasploit:...

EU MRV Regulatory Complete Solution 1 SQL Injection

Exploit Title: EU MRV Regulatory Complete Solution 1 - Authentication Bypass Date: 2018-05-24 Exploit Author: Veyselxan Vendor Homepage: https://codecanyon.net/item/eu-mrv-regulatory-complete-solution/21680923?srank=11 Version: v1 REQUIRED Tested on: Windows...

MySQL Smart Reports 1.0 Cross Site Scripting / SQL Injection

Exploit Title: MySQL Smart Reports 1.0 - SQL Injection / Cross-Site Scripting Dork: N/A Date: 22.05.2018 Exploit Author: Azkan Mustafa AkkuA AkkuS Vendor Homepage: https://codecanyon.net/item/mysql-smart-reports-online-report-generator-with-existing-data/16836503 Version: 1.0 Category: Webapps...

iSocial 1.2.0 - Cross-Site Scripting / Cross-Site Request Forgery Vulnerabilities

Exploit for php platform in category web applications Exploit Title: iSocial 1.2.0 - Cross-Site Scripting / Cross-Site Request Forgery Exploit Author: Borna nematzadeh L0RD Vendor Homepage: https://codecanyon.net/item/isocial-social-network-platform/21164041?srank=2 Version: 1.2.0 Tested on: Kali...

FTPShell Server 6.80 - Buffer Overflow (SEH)

!/usr/bin/python ---------------------------------------------------------------------------------------------------------- Exploit Title : FTPShell Server v6.80 - Local Buffer Overflow SafeSEH Bypass Exploit Author : Hashim Jawad - @ihack4falafel Vendor Homepage : http://www.ftpshell.com/...

Merge PACS 7.0 - Cross-Site Request Forgery Vulnerability

Exploit for linux platform in category web applications Exploit Title: Merge PACS 7.0 - Cross-Site Request Forgery Exploit Author: Safak Aslan Vendor Homepage: http://www.merge.com/ Version: Merge PACS 7.0 Tested on: Windows CVE: - 1. Proof of Concept history.pushState'', '', '/' Post Data: POST...

R 3.4.4 Local Buffer Overflow

!/usr/bin/python Exploit Title : R v3.4.4 - Local Buffer Overflow DEP Bypass Exploit Author : Hashim Jawad Twitter : @ihack4falafel Author Website : ihack4falafel.com Vendor Homepage : https://www.r-project.org/ Vulnerable Software:...

PaulPrinting CMS Printing 1.0 - SQL Injection

Exploit Title: PaulPrinting CMS Printing 1.0 - SQL Injection Exploit Date: 2018-05-19 Software Link: https://codecanyon.net/item/paulprinting-cms-printing-solutions/19546365 Author: Mehmet Onder Key Version: 1.0 Tested On: Linux 1. Description Any visitor can run code to exploit css and sql...

Monstra CMS 3.0.4 Cross Site Scripting

Exploit Title: Stored XSS at Monstra CMS 3.0.4 Install Page Date: 20.05.2018 Exploit Author: Ismail Tasdelen Vendor Homepage: http://monstra.org/ Software Link: Monstra CMS Version: Monstra CMS 3.0.4 Tested on: Windows 10 / Debian - XAMMP Web Server PoC : https://www.youtube.com/watch?v=AQweKapFz...

Exploit for Improper Resource Shutdown or Release in Microsoft

CVE-2018-8120 CVE-2018-8120 Windows LPE exploit Supports both...

Linux 4.8.0 < 4.8.0-46 - AF_PACKET packet_set_ring Privilege Escalation Exploit

Exploit for linux platform in category local exploits This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'AFPACKET packetsetring Privilege Escalation', 'Description' = %q This module exploits a...

NodAPS 4.0 - SQL injection Cross-Site Request Forgery

NodAPS 4.0 - SQL injection Cross-Site Request Forgery Exploit Title: Online Booking system - NodAPS 4.0 - 'search' SQL injection / Cross-Site Request Forgery Date: 2018-05-16 Exploit Author: Borna nematzadeh L0RD Vendor Homepage:...

XATABoost 1.0.0 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: XATABoost CMS Sql Injection Google Dork: inurl:php?id= Powered by XATABOOST Exploit Author: MgThuraMoeMyint Vendor Homepage: http://www2.xataboost.com Version: 1.0.0 Tested on: Kali Linux SQL Injection Type: Union Based Example...

Vayne-RaT - An Advanced C# .NET RAT

Vayne-RaT is Free and Open SourceRemote Administration Tool Coded In C. Features: Multi-Threaded CMD Shell File Manager Download & Upload Remote Desktop Password Recovery Assembly Builder Scan-Time Crypter FUD Requirements Stub Coded In .NET 2.0 Mono.Cecil.dll Dissembler Lib.dll BunifuUIv1.52.dll...

Allok Video Splitter 3.1.12.17 - Denial of Service

Allok Video Splitter 3.1.12.17 - Denial of Service Exploit Title: Allok Video Splitter 3.1.1217 Date: 2018-05-09 Exploit Author: Achilles Vendor Homepage: http://www.alloksoft.com/ Vulnerable Software: http://www.alloksoft.com/allokvsplitter.exe Tested on OS: Windows 7 64-bit DE Steps to reproduc...

HWiNFO 5.82-3410 - Denial of Service Exploit

Exploit for windows platform in category dos / poc !/usr/bin/python Exploit Author: bzyo Twitter: @bzyo Exploit Title: HWiNFO 5.82-3410 - Denial of Service Date: 05-04-18 Vulnerable Software: HWiNFO 5.82-3410 Vendor Homepage: https://www.hwinfo.com/ Version: 5.82-3410 Software Link:...

CSP MySQL User Manager 2.3.1 SQL Injection Vulnerability

CSP MySQL User Manager version 2.3.1 suffers from a remote SQL injection vulnerability that allows for authentication bypass. Exploit Title: CSP MySQL User Manager v2.3.1 SQL Injection Authentication Bypass Google Dork: intitle:"CSP MySQL User Manager" Exploit Author: Youssef mami Vendor Homepage...

CVE-2018-10563

An XSS in Flexense SyncBreeze affects all versions tested from SyncBreeze Enterprise from v10.1 to v10.7...

Ericsson-LG iPECS NMS A.1Ac - Cleartext Credential Disclosure

Ericsson-LG iPECS NMS A.1Ac - Cleartext Credential Disclosure -- coding: utf-8 -- Exploit Title: Ericsson-LG iPECS NMS - Cleartext Cred. Dump Vendor Notification: 03-03-2018 - No response Initial CVE: 04-04-2018 Disclosure: 21-04-2018 Exploit Author: Berk Cem Göksel Contact: twitter.com/berkcgoks...