Ladon Framework for Python 0.9.40 - XML External Entity Expansion

Advisory: XML External Entity Expansion in Ladon Webservice Attackers who can send SOAP messages to a Ladon webservice via the HTTP interface of the Ladon webservice can exploit an XML external entity expansion vulnerability and read local files, forge server side requests or overload the service...

Ipswitch WS_FTP Professional < 12.6.0.3 - Local Buffer Overflow (SEH)

!/usr/bin/python Title: Ipswitch WSFTP Professional Local Buffer Overflow SEH Author: anonymous Vendor Website: https://www.ipswitch.com Date: 03/11/2017 Version: 12.6.03 CVE: CVE-2017-16513 Tested on: Windows 7 32-bit Use script to generate payload. Paste payload into search field, replace Ds wi...

Jnes 1.0.2 - Stack Buffer Overflow

!/usr/bin/env python coding: utf-8 Exploit Title: Jnes Version 1.0.2 Stack Buffer Overflow Date: 3-11-2017 Exploit Author: crashmanucoot Contact: twitter.com/crashmanucoot Vendor Homepage: http://www.jabosoft.com/home Software Link: http://www.jabosoft.com/categories/3 Version: v1.0.2.15 Tested o...

WordPress Plugin JTRT Responsive Tables 4.1 - SQL Injection

Exploit Title: JTRT Responsive Tables 4.1 – WordPress Plugin – Sql Injection Exploit Author: Lenon Leite Vendor Homepage: https://wordpress.org/plugins/jtrt-responsive-tables/ Software Link: https://wordpress.org/plugins/jtrt-responsive-tables/ Contact: http://twitter.com/lenonleite Website:...

tnftp - 'savefile' Arbitrary Command Execution (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'tnftp "savefile" Arbitrary Command Execution', 'Description' = %q This module exploits an arbitrary command execution vulnerability in tnftp's...

Logitech Media Server 7.9.0 - 'favorites' Cross-Site Scripting

Exploit Title: Logitech Media Server : Persistent Cross Site ScriptingXSS Shodan Dork: Search Logitech Media Server Date: 11/03/2017 Exploit Author: Dewank Pant Vendor Homepage: www.logitech.com Software Link: download link if available Version: 7.9.0 Tested on: Windows 10, Linux CVE : Applied Fo...

Debut Embedded HTTPd 1.20 - Denial of Service

Exploit Title: Remote un-authenticated DoS in Debut embedded httpd server in Brother printers Date: 11/02/2017 Exploit Author: z00n @0xz00n Vendor Homepage: http://www.brother-usa.com Version: = 1.20 CVE : CVE-2017-16249 Description: The Debut embedded http server contains a remotely exploitable...

Cisco UCS Platform Emulator 3.1(2ePE1) - Remote Code Execution

Vulnerabilities Summary The following advisory describes two remote code execution vulnerabilities found in Cisco UCS Platform Emulator version 3.12ePE1. Cisco UCS Platform Emulator is the Cisco UCS Manager application bundled into a virtual machine VM. The VM includes software that emulates...

Ingenious School Management System 2.3.0 - 'friend_index' SQL injection

Exploit Title: Ingenious School Management System 2.3.0 - SQL injection Date: 01.11.2017 Vendor Homepage: http://iloveprograming.com/ Software Link: https://www.codester.com/items/4945/ingenious-school-management-system Demo: http://iloveprograming.com/view/login.php Version: 2.3.0 Category:...

OctoberCMS 1.0.426 (Build 426) - Cross-Site Request Forgery

Exploit Title: OctoberCMS 1.0.426 - CSRF to Admin Account Takover Vendor Homepage: https://octobercms.com Software Link: https://octobercms.com/download Exploit Author: Zain Sabahat Website: https://about.me/ZainSabahat Category: webapps CVE: CVE-2017-16244 1. Description Cross-Site Request Forge...

Vir.IT eXplorer Anti-Virus 8.5.39 - 'VIAGLT64.SYS' Local Privilege Escalation

/ Exploit Title - Vir.IT eXplorer Anti-Virus Arbitrary Write Privilege Escalation Date - 1st November 2017 Discovered by - Parvez Anwar @parvezghh Vendor Homepage - http://www.tgsoft.it Tested Version - 8.5.39 Driver Version - 1.0.0.11 - VIAGLT64.SYS Tested on OS - 64bit Windows 7 and Windows 10...

WhatsApp 2.17.52 - Memory Corruption

!/usr/bin/env python -- coding: utf-8 -- Found this and more exploits on my open source security project: http://www.exploitpack.com Exploit Author: Juan Sacco at KPN Red Team - http://www.kpn.com Date and time of release: 11 October 2017 Tested on: iPhone 5/6s iOS 10.3.3 and 11 Description:...

ZyXEL PK5001Z Modem - Backdoor Account

Exploit Title: ZyXEL PK5001Z Modem - CenturyLink Hardcoded admin and root Telnet Password. Google Dork: n/a Date: 2017-10-31 Exploit Author: Matthew Sheimo Vendor Homepage: https://www.zyxel.com/ Software Link: n/a Version: PK5001Z 2.6.20.19 Tested on: Linux About: ZyXEL PK5001Z Modem is used by...

D-Park Pro 1.0 - SQL Injection

Username: Password:...

CPA Lead Reward Script - SQL Injection

...

Fake Magazine Cover Script - SQL Injection

Exploit Title: Fake Magazine Cover Script - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://www.websitescripts.org/ Software Link: http://www.websitescripts.org/website-scripts/fake-magazine-cover-script/prod81.html Demo: http://websitescripts.org/demo/magazinecoverscript/ Versio...

Adult Script Pro 2.2.4 - SQL Injection

Exploit Title: Adult Script Pro 2.2.4 - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://www.adultscriptpro.com/ Software Link: http://www.adultscriptpro.com/order.html Demo: http://www.adultscriptpro.com/demo.html Version: 2.2.4 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64...

AROX School ERP PHP Script - 'id' SQL Injection

Exploit Title: AROX School ERP PHP Script - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://arox.in/ Software Link: https://www.codester.com/items/4908/arox-school-erp-php-script Demo: http://erp1.arox.in/ Version: CVE-2017-15978 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64...

Basic B2B Script - SQL Injection

Exploit Title: Basic B2B Script - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://www.phpscriptsmall.com/ Software Link: http://www.exclusivescript.com/product/nC3F4570353/php-scripts/basic-b2b-script Demo: http://readymadeb2bscript.com/product/entrepreneur/ Version: N/A Category...

Article Directory Script 3.0 - 'id' SQL Injection

Exploit Title: Article Directory Script 3.0 - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://www.yourarticlesdirectory.com/ Software Link: http://www.yourarticlesdirectory.com/ Demo: http://www.yourarticlesdirectory.com/livedemo.php Version: 3.0 Category: Webapps Tested on:...

iProject Management System 1.0 - 'ID' SQL Injection

Exploit Title: iProject Management System 1.0 - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://ikodes.com/ Software Link: https://codecanyon.net/item/iproject-management-system/20483358 Demo: http://project.ikodes.com/ikpms/ Version: 1.0 Category: Webapps Tested on:...

iStock Management System 1.0 - Arbitrary File Upload

Exploit Title: iStock Management System 1.0 - Arbitrary File Upload Dork: N/A Date: 30.10.2017 Vendor Homepage: http://ikodes.com/ Software Link: https://codecanyon.net/item/istock-management-system/20405084 Demo: http://project.ikodes.com/basicims/ Version: 1.0 Category: Webapps Tested on:...

iTech Gigs Script 1.21 - SQL Injection

Exploit Title: iTech Gigs Script 1.21 - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://itechscripts.com/ Software Link: http://itechscripts.com/the-gigs-script/ Demo: http://gigs.itechscripts.com/ Version: 1.21 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: CVE-2017-1596...

Job Board Script - 'nice_theme' SQL Injection

Exploit Title: Job Board Script - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://www.nicephpscripts.com/ Software http://www.nicephpscripts.com/jobboardscript.htm Demo: http://www.nicephpscripts.com/scripts/faqscript/ Version: N/A Category: Webapps Tested on: WiN7x64/KaLiLinuXx6...

Ingenious 2.3.0 - Arbitrary File Upload

Exploit Title: Ingenious School Management System 2.3.0 - Arbitrary File Upload Dork: N/A Date: 30.10.2017 Vendor Homepage: http://iloveprograming.com/ Software Link: https://www.codester.com/items/4945/ingenious-school-management-system Demo: http://iloveprograming.com/view/login.php Version: N/...

Oracle Java SE - Web Start jnlp XML External Entity Processing Information Disclosure

!/usr/local/bin/python """ Oracle Java SE Web Start jnlp XML External Entity Processing Information Disclosure Vulnerability Affected: + eg: ./poc.py 'C:/Program Files/Java/jre1.8.0131/README.txt' saturn: mrme$ ./poc.py 'C:/Program Files/Java/jre1.8.0131/README.txt' Oracle Java Web Start JNLP XML...

Online Exam Test Application - 'sort' SQL Injection

Exploit Title: Online Exam Test Application - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://www.phpscriptsmall.com/ Software Link: http://www.exclusivescript.com/product/1z2e4672468/php-scripts/online-exam-test-application Demo: http://198.38.86.159/onlineexamboard/ Version: N/...

Newspaper 1.0 - SQL Injection

Exploit Title: Newspaper Magazine & Blog CMS 1.0 - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://geniusocean.com/ Software Link: https://codecanyon.net/item/mymagazine-fully-responsive-magazine-cms/19493325 Demo: http://demo.geniusocean.com/newspaper/ Version: 1.0 Category:...

Php Inventory - Arbitrary File Upload

Exploit Title: Php Inventory & Invoice Management System - Arbitrary File Upload Dork: N/A Date: 30.10.2017 Vendor Homepage: http://savsofteproducts.com/ Software Link: http://www.phpinventory.com/ Demo: http://phpinventory.com/phpinventorydemo/ Version: N/A Category: Webapps Tested on:...

PHP CityPortal 2.0 - SQL Injection

Exploit Title: PHP CityPortal 2.0 - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://www.phpcityportal.com/ Software Link: http://www.phpcityportal.com/index.php Demo: http://phpcityportal.com/demo Version: 2.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: CVE-2017-15970...

PG All Share Video 1.0 - SQL Injection

Exploit Title: PG All Share Video 1.0 - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://www.pilotgroup.net/ Software Link: http://www.allsharevideo.com/features.php Demo: http://demo.allsharevideo.com/ Version: 1.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE:...

Joomla! Component NS Download Shop 2.2.6 - 'id' SQL Injection

Exploit Title: Joomla! Component NS Download Shop 2.2.6 - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: https://nswd.co/ Software Link: https://extensions.joomla.org/extensions/extension/e-commerce/paid-downloads/ns-downloadshop/ Demo: https://ds.nswd.co/ Version: 2.2.6 Category:...

News 1.0 - SQL Injection

Exploit Title: News Magazine & Blog CMS 1.0 - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://geniusocean.com/ Software Link: https://codecanyon.net/item/news-dynamic-newspaper-magazine-and-blog-cms-script/19656143 Demo: http://demo.geniusocean.com/news/ Version: 1.0 Category:...

MyBuilder Clone 1.0 - 'subcategory' SQL Injection

Exploit Title: MyBuilder Clone 1.0 - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://www.contractorscripts.com/ Software Link: http://order.contractorscripts.com/ Demo: http://demo.contractorscripts.com/ Version: 1.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE:...

MyMagazine 1.0 - 'id' SQL Injection

Exploit Title: MyMagazine Magazine & Blog CMS 1.0 - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://geniusocean.com/ Software Link: https://codecanyon.net/item/mymagazine-bootstrap-newspaper-magazine-and-blog-cms-script/19620468 Demo: http://demo.geniusocean.com/mymagazine/...

Mailing List Manager Pro 3.0 - SQL Injection

Exploit Title: Mailing List Manager Pro 3.0 - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://www.vote-pro.com/ Software Link: http://www.mailing-manager.com/demo.html Demo: http://www.mailing-manager.com/demo-gold/ Version: 3.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64...

Protected Links - SQL Injection

Username Password...

US Zip Codes Database - 'state' SQL Injection

Exploit Title: US Zip Codes Database Script - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://rowindex.com/ Software Link: https://www.codester.com/items/4898/us-zip-codes-database-php-script Demo: http://rowindex.com/demo/ Version: N/A Category: Webapps Tested on:...

Vastal I-Tech Agent Zone - 'searchCommercial.php' / 'searchResidential.php' SQL Injection

Exploit Title: Vastal I-Tech Agent Zone - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://vastal.com/ Software http://vastal.com/agent-zone-real-estate-script.html Demo: http://agentzone.vastal.com/demo/ Version: N/A Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE:...

Vastal I-Tech Dating Zone 0.9.9 - 'product_id' SQL Injection

Exploit Title: Vastal I-Tech Dating Zone 0.9.9 - 'productid' Parameter SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://vastal.com/ Software http://vastal.com/dating-zone-the-dating-software.html Demo: http://datingzone.vastal.com/demo/ Version: 0.9.9 Category: Webapps Tested on:...

tPanel 2009 - Authentication Bypass

Exploit Title: tPanel 2009 - Authentication Bypass Dork: N/A Date: 30.10.2017 Vendor Homepage: http://www.datacomponents.net/ Software Link: http://www.datacomponents.net/products/hosting/tpanel/ Demo: http://demo.datacomponents.net/tpanel/ Version: 2009 Category: Webapps Tested on:...

Sokial Social Network Script 1.0 - SQL Injection

Exploit Title: Sokial Social Network Script 1.0 - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://www.sokial.net/ Software http://www.sokial.net/demonstrations-social-network.sk Demo: http://demo.sokial.net/ Version: 1.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE:...

SoftDatepro Dating Social Network 1.3 - SQL Injection

Exploit Title: SoftDatepro Dating Social Network 1.3 - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://www.softdatepro.com/ Software Link: https://codecanyon.net/item/softdatepro-build-your-own-dating-social-network/3650044 Demo: http://demo.softdatepro.com/ Version: 1.3 Category...

WordPress Plugin Ultimate Product Catalog 4.2.24 - PHP Object Injection

Exploit Title: WP Plugin Ultimate Product Catalog 4.2.24 PHP Object Injection Google Dork: NA Date: Okt 30 2017 Exploit Author: tomplixsee Author blog : cupuzone.wordpress.com Vendor Homepage: http://www.etoilewebdesign.com/plugins/ultimate-product-catalog/ Software Link:...

Joomla! Component Zh YandexMap 6.1.1.0 - 'placemarklistid' SQL Injection

Exploit Title: Joomla! Component Zh YandexMap 6.1.1.0 - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://zhuk.cc/ Software Link: https://extensions.joomla.org/extensions/extension/maps-a-weather/maps-a-locations/zh-yandexmap/ Demo: http://joomla.zhuk.cc/index.php Version: 6.1.1.0...

Shareet - 'photo' SQL Injection

Exploit Title: Shareet - Photo Sharing Social Network - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: https://odallated.com/ Software Link: https://www.codester.com/items/4910/shareet-photo-sharing-social-network Demo: https://odallated.com/shareet/demo/ Version: N/A Category: Webapps...

Website Broker Script - 'status_id' SQL Injection

Exploit Title: Website Broker Script - 'statusid' Parameter SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://www.phpscriptsmall.com/ Software Link: http://www.exclusivescript.com/product/UwCG4464436/php-scripts/website-broker-script Demo:...

Nice PHP FAQ Script - 'nice_theme' SQL Injection

Exploit Title: Nice PHP FAQ Script - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://www.nicephpscripts.com/ Software http://www.nicephpscripts.com/demophpscript-PHP-FAQ-Script-Knowledgebase-Script.htm Demo: http://www.nicephpscripts.com/scripts/faqscript/ Version: N/A Category:...

Same Sex Dating Software Pro 1.0 - SQL Injection

Exploit Title: Same Sex Dating Software Pro 1.0 - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://www.softdatepro.com/ Software Link: https://codecanyon.net/item/same-date-pro-same-sex-dating-software/4530959 Demo: http://www.ss.softdatepro.com/ Version: 1.0 Category: Webapps...

CmsLite 1.4 - 'S' SQL Injection

Exploit Title: Creative Management System - CMS Lite 1.4 - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://bekirk.co.uk/ Software Link: https://codecanyon.net/item/creative-management-system-cms-lite/15297597 Demo: http://demo.bekirk.co.uk/ Version: 1.4 Category: Webapps Tested o...