glibc 2.27 #GNU - Local Buffer Overflow Exploit

Exploit for linux platform in category local exploits Exploit Title: GNU glibc Vendor Homepage: http://www.gnu.org/ CVE: CVE-2018-11237 POC: $ cat mempcpy.c define GNUSOURCE 1 include include define N 97699 char aN; char bN+128; int main void memset a, 'x', N; char c = mempcpy b, a, N; assert c =...

School Management System CMS 1.0 - username SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: School Management System CMS 1.0 - Admin Login SQL Injection Exploit Author: Özkan Mustafa Akkuş AkkuS Vendor : Wecodex Solutions Vendor Homepage: https://www.wecodex.com/item/view/school-management-system-in-php-and-mysql/5...

MySQL Blob Uploader 1.7 Cross Site Scripting / SQL Injection Vulnerabilities

MySQL Blob Uploader version 1.7 suffers from cross site scripting and remote SQL injection vulnerabilities. ------------------------- Exploit 1 of 4: Exploit Title: MySQL Blob Uploader 1.7 - 'download.php' SQL Injection / Cross-Site Scripting Dork: N/A Date: 22.05.2018 Exploit Author: Azkan Musta...

Timber 1.1 - Cross-Site Request Forgery Vulnerability

Exploit for php platform in category web applications Exploit Title: Timber - Ultimate Freelancer Platform 1.1 - Cross site request forgery Date: 2018-05-24 Exploit Author: L0RD or email protected Vendor Homepage: https://codecanyon.net/item/timber-ultimate-freelancer-platform/14747284?srank=1717...

EU MRV Regulatory Complete Solution 1 - Authentication Bypass Vulnerability

Exploit for linux platform in category web applications Exploit Title: EU MRV Regulatory Complete Solution 1 - Authentication Bypass Exploit Author: Veyselxan Vendor Homepage: https://codecanyon.net/item/eu-mrv-regulatory-complete-solution/21680923?srank=11 Version: v1 REQUIRED Tested on: Windows...

OpenDaylight - SQL Injection Vulnerability

Exploit for java platform in category web applications Exploit Title: OpenDaylight SQL Injection Exploit Author: JameelNabbo Website: jameelnabbo.com Vendor Homepage: https://www.opendaylight.org CVE: CVE-2018-1132 intro: OpenDaylight ODL is a modular open platform for customizing and automating...

Microsoft Internet Explorer 11 #InternetExplorer #IE - javascript Code Execution Exploit

Exploit for windows platform in category local exploits ARRSIZE = 3248; firstgadgetoffsets = 150104,149432,152680,3202586,214836,3204663,361185,285227,103426,599295,365261,226292,410596,180980,226276,179716,320389,175621,307381,792144,183476; stackpivotgadgetoffsets =...

Mcard Mobile Card Selling Platform 1 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Exploit Title: Mcard Mobile Card Selling Platform 1 - SQL Injection Exploit Author: L0RD Vendor Homepage: https://codecanyon.net/item/mcard-mobile-card-selling-platform/19307193?srank=15 Version: 1 Tested on: Kali linux POC 1 :...

PaulNews 1.0 - keyword SQL Injection / Cross-Site Scripting Vulnerabilities

Exploit for php platform in category web applications Exploit Title: PaulNews 1.0 - 'keyword' SQL Injection / Cross-Site Scripting Exploit Author: Özkan Mustafa Akkuş AkkuS Vendor: MediaSoft Pro Vendor Homepage: https://codecanyon.net/item/paulnews-newspaper-and-magazine-script/19260686 Version:...

eWallet Online Payment Gateway 2 - Cross-Site Request Forgery Vulnerability

Exploit for php platform in category web applications Exploit Title: eWallet - Online Payment Gateway 2 - Cross-Site Request Forgery Exploit Author: L0RD Vendor Homepage: https://codecanyon.net/item/ewallet-online-payment-gateway/19316332?srank=1110 Version: 2 Tested on: Kali linux POC : eWallet ...

WordPress Peugeot Music Plugin - Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: Wordpress Plugin Peugeot Music - Arbitrary File Upload Google Dork: inurl:/wp-content/plugins/peugeot-music-plugin/ Exploit Author: Mr.7z Vendor Homepage: - Software Link: - Version: 1.0 Tested on: Windows 10 64bit Home Edition...

Flash ActiveX 18.0.0.194 - Code Execution Exploit

Exploit for windows platform in category local exploits CVE-2015-5112 Pop up a calculator - Requires Flash ActiveX 18.0.0.194 Download: https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/bin-sploits/44742.swf 0day.today 2018-05-24...

SAT CFDI 3.3 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: SAT CFDI 3.3 - SQL Injection Exploit Author: Özkan Mustafa Akkuş AkkuS Vendor Homepage: https://www.wecodex.com/item/view/verification-and-validation-system-sat-cfdi-33/8 Version: 3.3 Category: Webapps Tested on: Kali linux...

Wecodex Hotel CMS 1.0 - Admin Login SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Wecodex Hotel CMS 1.0 - 'Admin Login' SQL Injection Exploit Author: Özkan Mustafa Akkuş AkkuS Vendor : Wecodex Solutions Vendor Homepage: https://www.wecodex.com/item/view/hotel-management-system-in-php-and-mysql/7 Version: 1.0...

ASP.NET jVideo Kit - query SQL Injection Vulnerability

Exploit for asp platform in category web applications Exploit Title: ASP.NET jVideo Kit - 'query' SQL Injection Exploit Author: Özkan Mustafa Akkuş AkkuS Vendor: MediaSoft Pro Vendor Homepage: https://www.mediasoftpro.com/video-sharing-script/mvc/ Version: v1.0 Category: Webapps Tested on: Kali...

Linux/x86 - Reverse (10.10.2.4:4444/TCP) Shell Shellcode (68 bytes)

/ ; Title : Linux/x86 - Reverse TCP Shell Shellcode 68 bytes ; Date : May, 2018 ; Author : Nuno Freitas ; Blog Post : https://bufferoverflowed.wordpress.com ; Twitter : @nunof11 ; SLAE ID : SLAE-1112 ; Size : 68 bytes ; Tested on : i686 GNU/Linux section .text global start start: xor ecx, ecx mul...

Honeywell Scada System - Information Disclosure Vulnerability

Exploit for linux platform in category web applications Exploit Title: Honeywell Scada System - Information Disclosure Exploit Author: t4rkd3vilz Vendor Homepage: https://www.honeywell.com Version: WebVersion : 3.2.1.294365 - DeviceType : IPC-HFW2320R-ZS Tested on: Linux To be written after the...

MySQL Smart Reports 1.0 Cross Site Scripting / SQL Injection Vulnerabilities

MySQL Smart Reports version 1.0 suffers from cross site scripting and remote SQL injection vulnerabilities. Exploit Title: MySQL Smart Reports 1.0 - SQL Injection / Cross-Site Scripting Exploit Author: Azkan Mustafa AkkuA AkkuS Vendor Homepage:...

Flash ActiveX 28.0.0.137 - Code Execution Exploit (2)

Exploit for windows platform in category local exploits CVE-2018-4878 Pop up a calculator - Requires Flash ActiveX 28.0.0.137 Download: https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/bin-sploits/44745.swf 0day.today 2018-05-24...

Wecodex Restaurant CMS 1.0 - Login SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Wecodex Restaurant CMS 1.0 - 'Login' SQL Injection Exploit Author: Özkan Mustafa Akkuş AkkuS Vendor : Wecodex Solutions Vendor Homepage: https://www.wecodex.com/item/view/restaurant-system-in-php-and-mysql/6 Version: 1.0 Categor...

Honeywell XL Web Controller - Cross-Site Scripting Vulnerability

Exploit for linux platform in category web applications Exploit Title: Honeywell XL Web Controller - Cross-Site Scripting Exploit Author: t4rkd3vilz Vendor Homepage: https://www.honeywell.com Version: WebVersion : XL1000C50 EXCEL WEB 52 I/O, XL1000C100 EXCEL WEB 104 I/O, XL1000C500 EXCEL WEB 300...

Microsoft Internet Explorer 11 #InternetExplorer #IE (#Windows7 x64/x86) - vbscript Code Execution E

Exploit for windows platform in category local exploits Dim lIIl Dim IIIlI6,IllII6 Dim IllI Dim IIllI40 Dim lIlIIl,lIIIll Dim IlII Dim llll,IIIIl Dim llllIl,IlIIII Dim NtContinueAddr,VirtualProtectAddr IlII=195948557...

Library CMS 1.0 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Library CMS 1.0 - SQL Injection Exploit Author: Özkan Mustafa Akkuş AkkuS Vendor : Wecodex Solutions Vendor Homepage: https://www.wecodex.com/item/view/library-management-system-in-php-and-mysql/1 Version: 1.0 Category: Webapps...

Microsoft Windows - POP/MOV SS Privilege Escalation Exploit

Exploit for windows platform in category local exploits Demo exploitation of the POP SS vulnerability CVE-2018-8897, leading to unsigned code execution with kernel privilages. - KVA Shadowing should be disabled and the relevant security update should be uninstalled. - This may not work with certa...

Easy File Uploader 1.7 - SQL Injection / Cross-Site Scripting Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Easy File Uploader 1.7 - SQL Injection / Cross-Site Scripting Exploit Author: Özkan Mustafa Akkuş AkkuS Vendor Homepage: https://codecanyon.net/item/easy-file-uploader-php-multiple-uploader-with-file-manager/17222287 Version: 1....

Siemens SIMATIC S7-1500 CPU - Remote Denial of Service Exploit

Exploit for linux platform in category dos / poc Exploit Title: Siemens SIMATIC S7-1500 CPU - Remote Denial of Service Google Dork: inurl:/Portal/Portal.mwsl Exploit Author: t4rkd3vilz, Jameel Nabbo Vendor Homepage: https://www.siemens.com/ Version: SIMATIC S7-1500 CPU all versions before V1.6...

ILIAS 5.3.2 / 5.2.14 / 5.1.25 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications ILIAS 5.3.2 / 5.2.14 / 5.1.25 Cross Site Scripting Vulnerability Product: ILIAS Affected Versions: 5.3.2, 5.2.14, 5.1.25 Tested Versions: 5.3.2, 5.2.12 Vulnerability Type: Reflected Cross-Site-Scripting Risk Level: MEDIUM Solution Status: Fixe...

iSocial 1.2.0 - Cross-Site Scripting / Cross-Site Request Forgery Vulnerabilities

Exploit for php platform in category web applications Exploit Title: iSocial 1.2.0 - Cross-Site Scripting / Cross-Site Request Forgery Exploit Author: Borna nematzadeh L0RD Vendor Homepage: https://codecanyon.net/item/isocial-social-network-platform/21164041?srank=2 Version: 1.2.0 Tested on: Kali...

AMD / ARM / Intel - Speculative Execution Variant 4 Speculative Store Bypass Exploit

Exploit for hardware platform in category dos / poc / ======== Intro / Overview ======== After Michael Schwarz made some interesting observations, we started looking into variants other than the three already-known ones. I noticed that Intel's Optimization Manual says in section 2.4.4.5 "Memory...

Linux 4.4.0 < 4.4.0-53 - AF_PACKET chocobo_root Privilege Escalation Exploit

This Metasploit module exploits a race condition and use-after-free in the packetsetring function in net/packet/afpacket.c AFPACKET in the Linux kernel to execute code as root CVE-2016-8655. The bug was initially introduced in 2011 and patched in 2016 in version 4.4.0-53.74, potentially affecting...

Microsoft Edge Chakra JIT - Magic Value Type Confusion Exploit

Exploit for windows platform in category dos / poc / BOOL JavascriptNativeFloatArray::SetItemuint32 index, double dValue if uint64&dValue == uint64&JavascriptNativeFloatArray::MissingItem JavascriptArray varArr = JavascriptNativeFloatArray::ToVarArraythis; varArr-DirectSetItemAtindex,...

NewsBee CMS 1.4 - home-text-edit.php SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: NewsBee CMS 1.4 - 'home-text-edit.php' SQL Injection Exploit Author: Özkan Mustafa Akkuş AkkuS Vendor Homepage: https://codecanyon.net/item/newsbee-fully-featured-news-cms-with-bootstrasp-php-mysql/19404937 Version: 1.4 / fourth...

Feedy RSS News Ticker 2.0 - cat SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Feedy RSS News Ticker 2.0 - 'cat' SQL Injection Exploit Author: Özkan Mustafa Akkuş AkkuS Vendor Homepage: https://codecanyon.net/item/feedy-rss-news-ticker/5818277 Version: 2.0 Category: Webapps Tested on: Kali linux PoC: SQLi:...

NewsBee CMS 1.4 - download.php SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: NewsBee CMS 1.4 - 'download.php' SQL Injection Exploit Author: Özkan Mustafa Akkuş AkkuS Vendor Homepage: https://codecanyon.net/item/newsbee-fully-featured-news-cms-with-bootstrasp-php-mysql/19404937 Version: 1.4 / fourth updat...

Auto Car 1.2 - car_title SQL Injection / Cross-Site Scripting Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Auto car 1.2 - 'cartitle' SQL Injection / Cross-Site Scripting Exploit Author: Borna nematzadeh L0RD Vendor Homepage: https://codecanyon.net/item/auto-car-car-listing-script/19221368?srank=1159 Version: 1.2 Tested on: Win 10 POC...

WebSocket Live Chat - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: WebSocket Live Chat - Cross-Site Scripting Exploit Author: Alireza Norkazemi Vendor Homepage: https://codecanyon.net/item/websocket-live-chat-instant-messaging-php/16545798?srank=1 POC : 1 Create your account and click setting...

PaulPrinting CMS Printing 1.0 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: PaulPrinting CMS Printing 1.0 - SQL Injection Software Link: https://codecanyon.net/item/paulprinting-cms-printing-solutions/19546365 Author: Mehmet Onder Key Version: 1.0 Tested On: Linux 1. Description Any visitor can run code...

Wchat PHP AJAX Chat Script 1.5 - Persistent Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Wchat - Fully Responsive PHP AJAX Chat Script 1.5 - Persistent cross site scripting Exploit Author: Borna nematzadeh L0RD Vendor Homepage: https://codecanyon.net/item/wchat-fully-responsive-phpajax-chat/18047319?srank=1327...

Teradek VidiU Pro 3.0.3 - Server-Side Request Forgery Vulnerability

Exploit for hardware platform in category web applications Teradek VidiU Pro 3.0.3 SSRF Vulnerability Vendor: Teradek, LLC Product web page: https://www.teradek.com Affected version: VidiU, VidiU Mini, VidiU Pro 3.0.3r32136 3.0.2r31225 2.4.10 Summary: The Teradek VidiU gives you the freedom to...

Schneider Electric PLCs - Cross-Site Request Forgery Vulnerability

Exploit for windows platform in category web applications Exploit Title: Schneider Electric PLCs - Cross-Site Request Forgery Exploit Author: t4rkd3vilz Vendor Homepage: http://www.schneider-electric.com/ Tested on: Windows CVE: CVE-2013-0663 Version: Schneider Electric Quantum PLC: 140NOE77111,...

Zechat 1.5 - SQL Injection / Cross-Site Request Forgery Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Zechat 1.5 - 'hashtag' / 'v' SQL Injection / Cross site request forgery Exploit Author: Borna nematzadeh L0RD or email protected Vendor Homepage: https://bylancer.com Version: 1.5 Tested on: Kali linux...

Nordex N149/4.0-4.5 - SQL Injection Vulnerability

Exploit for hardware platform in category web applications Exploit Title: Nordex N149/4.0-4.5 Wind Turbine Web Server - SQL Injection Exploit Author: t4rkd3vilz Vendor Homepage: http://www.nordex-online.com Tested on: Windows Version: N149/4.0-4.5 Wind Turbine Category: webapps --- Proof Of Conce...

Teradek VidiU Pro 3.0.3 - Cross-Site Request Forgery Vulnerability

Exploit for hardware platform in category web applications input type="hidden" name="pw...

Teradek Cube 7.3.6 - Cross-Site Request Forgery Vulnerability

Exploit for hardware platform in category web applications i...

Merge PACS 7.0 - Cross-Site Request Forgery Vulnerability

Exploit for linux platform in category web applications Exploit Title: Merge PACS 7.0 - Cross-Site Request Forgery Exploit Author: Safak Aslan Vendor Homepage: http://www.merge.com/ Version: Merge PACS 7.0 Tested on: Windows CVE: - 1. Proof of Concept history.pushState'', '', '/' Post Data: POST...

Auto Dealership & Vehicle Showroom WebSys 1.0 - XSS / CSRF / Authentication Bypass Vulnerabiliti

Exploit for php platform in category web applications Exploit Title: Auto Dealership & Vehicle Showroom WebSys 1.0 - Persistent Cross-Site Scripting / Cross-Site Request Forgery / Admin panel Authentication bypass Exploit Author: Borna nematzadeh L0RD or email protected Vendor Homepage:...

Model Agency Media House & Model Gallery 1.0 - XSS / CSRF / Authentication Bypass Vulnerabilitie

Exploit for php platform in category web applications Exploit Title: Model Agency Media House & Model Gallery 1.0 - Persistent Cross-Site Scripting / Cross-Site Request Forgery / Authentication bypass Exploit Author: Borna nematzadeh L0RD or email protected Vendor Homepage:...

MakeMyTrip 7.2.4 - Information Disclosure Vulnerability

Exploit for Android platform in category local exploits Exploit Title: Android Application MakeMyTrip 7.2.4 - Unencrypted Database Files Software Link: MakeMyTrip v7.2.4 Android Application Exploit Author: Divya Jain Version: 7.2.4 Android App CVE: CVE-2018-11242 Category: Mobileapps Tested on:...

ERPnext 11 - Cross-Site Scripting Vulnerability

Exploit for java platform in category web applications Exploit Title: ERPnext 11.x.x - Cross-Site Scripting Exploit Author: Veerababu Penugonda Vendor Homepage: https://erpnext.com/ Software Link: https://demo.erpnext.com/ Version: Frappe ERPNext v11.x.x-develop Tested on: Mozilla Firefox quantum...

Dell EMC RecoverPoint boxmgmt CLI < 5.1.2 - Arbitrary File Read Vulnerability

Exploit for linux platform in category local exploits Exploit Title: Dell EMC RecoverPoint boxmgmt CLI /etc/passwd: terminating, 34 bad configuration options Command "ssh -F /etc/passwd 127.0.0.1" exit...