Carel PlantVisor 2.4.4 - Directory Traversal Information Disclosure (Metasploit)

Carel PlantVisor 2.4.4 - Directory Traversal Information Disclosure Metasploit require 'msf/core' class MetasploitModule 'Carel Pl@ntVisor Directory Traversal', 'Description' = %q This module exploits a directory traversal vulnerability found in Carel Pl@ntVisor 'james fitts' , 'License' =...

ICAffiliateTracking 1.1 - Authentication Bypass

ICAffiliateTracking 1.1 - Authentication Bypass Exploit Title: Affiliate Tracking Script 1.1 - Authentication Bypass Dork: N/A Date: 13.09.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Link: http://www.icloudcenter.com/affiliates-tracking-script.htm Demo:...

Motorola Netopia Netoctopus SDCS - Remote Stack Buffer Overflow (Metasploit)

Motorola Netopia Netoctopus SDCS - Remote Stack Buffer Overflow Metasploit require 'msf/core' class MetasploitModule 'Motorola Netopia Netoctopus SDCS Stack Buffer Overflow', 'Description' = %q This module exploits a vulnerability within the code responsible for parsing client requests. When...

Viap Automation WinPLC7 5.0.45.5921 - Recv Buffer Overflow (Metasploit)

Viap Automation WinPLC7 5.0.45.5921 - Recv Buffer Overflow Metasploit require 'msf/core' class MetasploitModule 'VIPA Authomation WinPLC7 recv Stack Buffer Overflow', 'Description' = %q This module exploits a stack based buffer overflow found in VIPA Automation WinPLC7 'james fitts' , 'License' =...

ICMLM 2.1 - key SQL Injection

ICMLM 2.1 - key SQL Injection Exploit Title: MLM Software Script 2.1 - SQL Injection Dork: N/A Date: 13.09.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Link: http://www.icloudcenter.com/mlm-script.htm Demo: http://www.icloudcenter.net/demos/icmlm/ Version: 2.1 Category: Webapps...

Alienvault OSSIM av-centerd - Util.pm sync_rserver Command Execution (Metasploit)

Alienvault OSSIM av-centerd - Util.pm syncrserver Command Execution Metasploit require 'msf/core' class MetasploitModule 'Alienvault OSSIM av-centerd Util.pm syncrserver Command Execution', 'Description' = %q This module exploits a command injection vulnerability found within the syncrserver...

Infinite Automation Mango Automation - Command Injection (Metasploit)

Infinite Automation Mango Automation - Command Injection Metasploit...

Carlo Gavazzi Powersoft 2.1.1.1 - Directory Traversal File Disclosure (Metasploit)

Carlo Gavazzi Powersoft 2.1.1.1 - Directory Traversal File Disclosure Metasploit require 'msf/core' class MetasploitModule 'Carlo Gavazzi Powersoft Directory Traversal', 'Description' = %q This module exploits a directory traversal vulnerability found in Carlo Gavazzi Powersoft 'james fitts' ,...

ICDoctor Appointment 1.3 - key SQL Injection

ICDoctor Appointment 1.3 - key SQL Injection Exploit Title: Doctor Appointment Script 1.3 - SQL Injection Dork: N/A Date: 13.09.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Link: http://www.icloudcenter.com/doctor-appointment-script.htm Demo:...

ICLowBidAuction 3.3 - SQL Injection

ICLowBidAuction 3.3 - SQL Injection Exploit Title: Unique Low Bid Auction Script 3.3 - SQL Injection Dork: N/A Date: 13.09.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Link: http://www.icloudcenter.com/unique-low-bid-auction-script.htm Demo:...

ICEstate 1.1 - id SQL Injection

ICEstate 1.1 - id SQL Injection Exploit Title: Real Estate Marketplace Site ASP.NET Script 1.1 - SQL Injection Dork: N/A Date: 13.09.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Link: http://www.icloudcenter.com/real-estate-marketplace-site.htm Demo:...

ZScada Modbus Buffer 2.0 - Stack Buffer Overflow (Metasploit)

ZScada Modbus Buffer 2.0 - Stack Buffer Overflow Metasploit require 'msf/core' class MetasploitModule 'ZScada Net Buffer Overflow', 'Description' = %q This module exploits a stack based buffer overflow found in Z-Scada Net 2.0. The vulnerability is triggered when parsing the response to a Modbus...

Foodspotting Clone 1.0 - SQL Injection

Foodspotting Clone 1.0 - SQL Injection Exploit Title: Foodspotting Clone v1.0 - SQL Injection/Reflected XSS Date: 2017-09-13 Exploit Author: 8bitsec Vendor Homepage: http://www.phpscriptsmall.com/ Software Link: http://www.phpscriptsmall.com/product/foodspotting-clone/ Version: 1.0 Tested on: Kal...

ICClassifieds 1.1 - SQL Injection

ICClassifieds 1.1 - SQL Injection Exploit Title: Classifieds Software Script Like Craigslist 1.1 - SQL Injection Dork: N/A Date: 13.09.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Link: http://www.icloudcenter.com/craigslist-like-classifieds-script.htm Demo:...

Sielco Sistemi Winlog 2.07.16 - Remote Buffer Overflow (Metasploit)

Sielco Sistemi Winlog 2.07.16 - Remote Buffer Overflow Metasploit require 'msf/core' class MetasploitModule 'Sielco Sistemi Winlog %q This module exploits a stack based buffer overflow found in Sielco Sistemi Winlog 'James Fitts' , 'License' = MSFLICENSE, 'Version' = '$Revision: $', 'References' ...

Astaro Security Gateway 7 - Remote Code Execution

Astaro Security Gateway 7 - Remote Code Execution !/usr/bin/python Astaro Security Gateway v7 - Unauthenticated Remote Code Execution Exploit Authors: Jakub Palaczynski and Maciej Grabiec Tested on versions: 7.500 and 7.506 Date: 13.12.2016 Vendor Homepage: https://www.sophos.com/ CVE:...

Indusoft Web Studio - Directory Traversal Information Disclosure (Metasploit)

Indusoft Web Studio - Directory Traversal Information Disclosure Metasploit require 'msf/core' class MetasploitModule 'Indusoft Web Studio Directory Traversal', 'Description' = %q This module exploits a flaw found in Indusoft Web Studio 'James Fitts' , 'License' = MSFLICENSE, 'Version' =...

ICAutosales 2.2 - SQL Injection

ICAutosales 2.2 - SQL Injection Exploit Title: Auto Dealer Car Sales PHP Script 2.2 - SQL Injection Dork: N/A Date: 13.09.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Link: http://www.icloudcenter.com/auto-dealer-car-sales-script.htm Demo: http://icloudcenter.net/demos/icautosales/...

Fatek Automation PLC WinProladder 3.11 Build 14701 - Stack Buffer Overflow (Metasploit)

Fatek Automation PLC WinProladder 3.11 Build 14701 - Stack Buffer Overflow Metasploit require 'msf/core' class MetasploitModule 'Fatek Automation PLC WinProladder Stack-based Buffer Overflow', 'Description' = %q This module exploits a stack based buffer overflow found in Fatek Automation PLC...

ICTraveling 2.2 - Authentication Bypass

ICTraveling 2.2 - Authentication Bypass Exploit Title: Travel Site Script 2.2 - Authentication Bypass Dork: N/A Date: 13.09.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Link: http://www.icloudcenter.com/traveling-website-script.htm Demo: http://icloudcenter.net/demos/ICPenny/...

Dameware Mini Remote Control 4.0 - Username Stack Buffer Overflow (Metasploit)

Dameware Mini Remote Control 4.0 - Username Stack Buffer Overflow Metasploit require 'msf/core' class MetasploitModule 'Dameware Mini Remote Control Username Stack Buffer Overflow', 'Description' = %q This module exploits a stack based buffer overflow vulnerability found in Dameware Mini Remote...

ICJewelry 1.1 - key SQL Injection

ICJewelry 1.1 - key SQL Injection Exploit Title: Jewelry Store Site Script 1.1 - SQL Injection Dork: N/A Date: 13.09.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Link: http://www.icloudcenter.com/jewelry-site-script.htm Demo: http://icloudcenter.net/demos/icjewelry/ Version: 1.1...

Alienvault OSSIM av-centerd 4.7.0 - get_log_line Command Injection (Metasploit)

Alienvault OSSIM av-centerd 4.7.0 - getlogline Command Injection Metasploit require 'msf/core' require 'rexml/document' class MetasploitModule 'Alienvault OSSIM av-centerd Command Injection getlogline', 'Description' = %q This module exploits a command injection flaw found in the getlogline...

Mako Web Server 2.5 - Multiple Vulnerabilities

Mako Web Server 2.5 - Multiple Vulnerabilities + SSD Beyond Security: https://blogs.securiteam.com/index.php/archives/3391 + Credits: John Page a.k.a hyp3rlinx + Website: hyp3rlinx.altervista.org + Source:...

ICGrocery 1.1 - key SQL Injection

ICGrocery 1.1 - key SQL Injection Exploit Title: Grocery Store Supermarket Script 1.1 - SQL Injection Dork: N/A Date: 13.09.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Link: http://www.icloudcenter.com/grocery-store-supermarket-script.htm Demo:...

ICDutchAuction 1.2 - SQL Injection

ICDutchAuction 1.2 - SQL Injection Exploit Title: Dutch Auction Script 1.2 - SQL Injection Dork: N/A Date: 13.09.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Link: http://www.icloudcenter.com/dutch-auction-script.htm Demo: http://icloudcenter.net/demos/icdutchauction/ Version: 1.2...

ICAuction 2.2 - id SQL Injection

ICAuction 2.2 - id SQL Injection Exploit Title: eBay like Auction PHP Script 2.2 - SQL Injection Dork: N/A Date: 13.09.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Link: http://www.icloudcenter.com/ebay-like-auction-script.htm Demo: http://icloudcenter.net/demos/icauction/ Version:...

Consumer Review Script 1.0 - SQL Injection

Consumer Review Script 1.0 - SQL Injection Exploit Title: Consumer Review Script v1.0 - SQL Injection Date: 2017-09-12 Exploit Author: 8bitsec Vendor Homepage: http://www.phpscriptsmall.com/product/consumer-review-script/ Software Link: http://www.phpscriptsmall.com/product/consumer-review-script...

D-Link DIR-8xx Routers - Root Remote Code Execution

D-Link DIR-8xx Routers - Root Remote Code Execution Due to error in hnap protocol implementation we can overflow stack and execute any sh commands under root priviliges. E-DB Note: https://embedi.com/blog/enlarge-your-botnet-top-d-link-routers-dir8xx-d-link-routers-cruisin-bruisin E-DB Note:...

inClick Cloud Server 5.0 - SQL Injection

inClick Cloud Server 5.0 - SQL Injection Exploit Title: inClick Cloud Server 5.0 - SQL Injection Dork: N/A Date: 12.09.2017 Vendor Homepage: http://www.inclick.net/ Software Link: http://www.inclick.net/pageid/demo.html Demo: http://www.inclick.net/pageid/demo.html Version: 5.0 Category: Webapps...

XYZ Auto Classifieds 1.0 - SQL Injection

XYZ Auto Classifieds 1.0 - SQL Injection Exploit Title: XYZ Auto Classifieds v1.0 - SQL Injection Date: 2017-09-12 Exploit Author: 8bitsec Vendor Homepage: http://xyzscripts.com/ Software Link: https://xyzscripts.com/php-scripts/xyz-auto-classifieds/details Version: 1.0 Tested on: Kali Linux 2.0 ...

Jungo DriverWizard WinDriver 12.4.0 - Kernel Pool Overflow Local Privilege Escalation (2)

Jungo DriverWizard WinDriver 12.4.0 - Kernel Pool Overflow Local Privilege Escalation 2 -- coding: utf-8 -- """ Jungo DriverWizard WinDriver Kernel Pool Overflow Vulnerability Download: http://www.jungo.com/st/products/windriver/ File: WD1240.EXE Sha1: 3527cc974ec885166f0d96f6aedc8e542bb66cba...

D-Link DIR-8xx Routers - Local Firmware Upload

D-Link DIR-8xx Routers - Local Firmware Upload !/bin/bash If you have access to an ethernet port you can upload custom firmware to a device because system recovery service is started and available for a few seconds after restart. E-DB Note:...

WebKit JSC - BytecodeGenerator::emitGetByVal Incorrect Optimization (1)

WebKit JSC - BytecodeGenerator::emitGetByVal Incorrect Optimization 1 Let's start with JS code. let o = ; for let i in xx: 0 oi; 0; i-- ForInContext& context = mforInContextStacki - 1.get; if context.local != property continue; if !context.isValid break; if context.type ==...

osTicket 1.10 - SQL Injection (PoC)

osTicket 1.10 - SQL Injection PoC 1. ADVISORY INFORMATION ======================================== Title: osTicket v1.10 Unauthenticated SQL Injection Application: osTicket Bugs: SQL Injection Class: Sensitive Information disclosure Remotely Exploitable: Yes Authentication Required: NO Versions...

Gr8 Multiple Search Engine Script 1.0 - SQL Injection

Gr8 Multiple Search Engine Script 1.0 - SQL Injection Exploit Title: Gr8 Multiple Search Engine Script 1.0 - SQL Injection Dork: N/A Date: 12.09.2017 Vendor Homepage: http://www.gr8script.com/ Software Link: http://www.gr8script.com/multiplesearchscript.php Demo:...

D-Link DIR-8xx Routers - Leak Credentials

D-Link DIR-8xx Routers - Leak Credentials phpcgi is responsible for processing requests to .php, .asp and .txt pages. Also, it checks whether a user is authorized or not. Nevertheless, if a request is crafted in a proper way, an attacker can easily bypass authorization and execute a script that...

FoodStar 1.0 - SQL Injection

FoodStar 1.0 - SQL Injection Exploit Title: FoodStar Swiggy Clone Script 1.0 - SQL Injection Dork: N/A Date: 12.09.2017 Vendor Homepage: https://www.abservetech.com/ Software Link: https://www.abservetech.com/foodstar-swiggy-clone/ Demo: http://abservetechdemo.com/products/foodstar/ Version: 1.0...

Hanbanggaoke IP Camera - Arbitrary Password Change

Hanbanggaoke IP Camera - Arbitrary Password Change Vulnerability summary The following advisory describes an arbitrary password change vulnerability found in Hanbanggaoke webcams. Beijing Hanbang Technology, “one of the first enterprises entering into digital video surveillance industry, has been...

PHP Dashboards NEW 4.4 - SQL Injection

PHP Dashboards NEW 4.4 - SQL Injection Exploit Title: PHP Dashboards NEW 4.4 - SQL Injection Dork: N/A Date: 11.09.2017 Vendor Homepage: http://dataninja.biz/ Software Link: https://codecanyon.net/item/php-dashboards-v40-collaborative-social-dashboards/19314871 Demo:...

EduStar Udemy Clone Script 1.0 - SQL Injection

EduStar Udemy Clone Script 1.0 - SQL Injection Exploit Title: EduStar Udemy Clone Script v1.0 - SQL Injection Date: 2017-09-11 Exploit Author: 8bitsec Vendor Homepage: https://www.abservetech.com/ Software Link: https://www.abservetech.com/edustar-udemy-clone/ Version: 1.0 Tested on: Kali Linux 2...

Nimble Professional 1.0 - Cross-Site Request Forgery (Update Admin)

Nimble Professional 1.0 - Cross-Site Request Forgery Update Admin Edit Profile: Admin Name: Admin Email: Admin Password: Save Profile...

iTech StockPhoto Script 2.02 - SQL Injection

iTech StockPhoto Script 2.02 - SQL Injection Exploit Title: iTech StockPhoto Script v2.02 - SQL Injection Date: 2017-09-11 Exploit Author: 8bitsec Vendor Homepage: http://itechscripts.com/ Software Link: http://itechscripts.com/stockphoto-script Version: 2.02 Tested on: Kali Linux 2.0 | Mac OS...

PHP Dashboards NEW 4.4 - Arbitrary File Read

PHP Dashboards NEW 4.4 - Arbitrary File Read Exploit Title: PHP Dashboards NEW 4.4 - Arbitrary File Read Dork: N/A Date: 11.09.2017 Vendor Homepage: http://dataninja.biz/ Software Link: https://codecanyon.net/item/php-dashboards-v40-collaborative-social-dashboards/19314871 Demo:...

tcprewrite - Heap Buffer Overflow

tcprewrite - Heap Buffer Overflow Title: tcprewrite Heap-Based Buffer Overflow CVE: CVE-2017-14266 CWE: CWE-122 Exploit Author: Hosein AskariFarazPajohan Vendor HomePage: http://tcpreplay.synfin.net/ Product Description: When you want to give a PCAP file to someone, it gives away certain sensitiv...

AirStar Airbnb Clone Script 1.0 - SQL Injection

AirStar Airbnb Clone Script 1.0 - SQL Injection Exploit Title: AirStar Airbnb Clone Script v1.0 - SQL Injection Date: 2017-09-11 Exploit Author: 8bitsec Vendor Homepage: https://www.abservetech.com/ Software Link: https://www.abservetech.com/airstar-airbnb-clone/ Version: 1.0 Tested on: Kali Linu...

JobStar Monster Clone Script 1.0 - SQL Injection

JobStar Monster Clone Script 1.0 - SQL Injection Exploit Title: JobStar Monster Clone Script v1.0 - SQL Injection Date: 2017-09-11 Exploit Author: 8bitsec Vendor Homepage: https://www.abservetech.com/ Software Link: https://www.abservetech.com/jobstar-monster-clone/ Version: 1.0 Tested on: Kali...

WiseGiga NAS - Multiple Vulnerabilities

WiseGiga NAS - Multiple Vulnerabilities Source: https://blogs.securiteam.com/index.php/archives/3402 Vulnerabilities summary The following advisory describes five 5 vulnerabilities and default accounts / passwords found in WiseGiga NAS devices. WiseGiga is a Korean company selling NAS products. T...

iTech Book Store Script 2.02 - SQL Injection

iTech Book Store Script 2.02 - SQL Injection Exploit Title: iTech Book Store Script v2.02 - SQL Injection / Reflected XSS Date: 2017-09-11 Exploit Author: 8bitsec Vendor Homepage: http://itechscripts.com/ Software Link: http://itechscripts.com/book-store-script Version: 2.02 Tested on: Kali Linux...

Online Print Business 1.0 - SQL Injection

Online Print Business 1.0 - SQL Injection Exploit Title: Online Print Business Software 1.0 - SQL Injection Dork: N/A Date: 09.09.2017 Vendor Homepage: http://scriptzee.com/ Software Link: http://scriptzee.com/best-softwares/online-print-business Demo: http://onlineprintbssiness.scriptzee.com/...