Cisco 7937G All-In-One Exploiter
Category: Exploits
BarcodeOCR 19.3.6 – ‘BarcodeOCR’ Unquoted Service Path
# Exploit Title: BarcodeOCR 19.3.6 – ‘BarcodeOCR’ Unquoted Service Path # Discovery Date: 2020-07-31 # Response from BarcodeOCR Support: 08/03/2020 # Exploit Author: Daniel Bertoni # Vendor Homepage: https://www.barcode-ocr.com/ # Version: 19.3.6 # Tested on: […]
Docker Privileged Container Escape
## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-framework ## # POC modified from https://blog.trailofbits.com/2019/07/19/understanding-docker-container-escapes/ class MetasploitModule < Msf::Exploit::Local Rank = NormalRanking prepend Msf::Exploit::Remote::AutoCheck include Msf::Post::File include Msf::Post::Linux::Priv include Msf::Post::Linux::System include Msf::Exploit::EXE include […]
Daily Expenses Management System 1.0 SQL Injection
# Exploit Title: Daily Expenses Management System 1.0 – Multiple SQL Injection Vulnerabilty # Date: 2020-8-5 # Exploit Author: Edo Maland # Vendor Homepage: https://www.sourcecodester.com/php/14372/daily-tracker-system-phpmysql.html # Software Link: https://www.sourcecodester.com/php/14372/daily-tracker-system-phpmysql.html # Version: 1.0 # Tested on: […]
Ruby on Rails 5.0.1 – Remote Code Execution
# Exploit Title: Rails 5.0.1 – Remote Code Execution # Date: 2020-07-19 # Exploit Author: Lucas Amorim # Vendor Homepage: www.rubyonrails.org # Software Link: www.rubyonrails.org # Version: Rails < 5.0.1 # Tested on: Linux/OSx # […]
pfSense 2.4.4-p3 – Cross-Site Request Forgery
# Exploit Title: pfSense 2.4.4-p3 – Cross-Site Request Forgery # Date: 2019-09-27 # Exploit Author: ghost_fh # Vendor Homepage: https://www.pfsense.org/ # Software Link: https://www.pfsense.org/download/index.html?section=downloads # Version: Till 2.4.4-p3 # Tested on: freebsd # CVE : […]
FTPDummy! 4.80 Local Buffer Overflow
# Exploit Title: FTPDummy! 4.80 – Local Buffer Overflow (SEH) # Date: 2020-07-22 # Author: Felipe Winsnes # Software Link: http://www.dummysoftware.com/ftpdummy.html # Version: 4.80 # Tested on: Windows 7 (x86) # Blog: https://whitecr0wz.github.io/ # Proof […]
WordPress NexosReal Estate Theme 1.7 Cross Site Scripting / SQL Injection
# Exploit Title: WordPress Theme NexosReal Estate 1.7 – ‘search_order’ SQL Injection # Google Dork: inurl:/wp-content/themes/nexos/ # Date: 2020-06-17 # Exploit Author: Vlad Vector # Vendor: Sanljiljan [ https://themeforest.net/user/sanljiljan ] # Software Version: 1.7 # […]
Sophos VPN Web Panel 2020 Denial Of Service
# Exploit Title: Sophos VPN Web Panel 2020 – Denial of Service (Poc) # Date: 2020-06-17 # Exploit Author: Berk KIRAS # Vendor Homepage: https://www.sophos.com/ # Version:2020 Web Panel # Tested on: Apache # Berk […]
Plex Unpickle Dict Windows Remote Code Execution
This Metasploit module exploits an authenticated Python unsafe pickle.load of a Dict file. An authenticated attacker can create a photo library and add arbitrary files to it. After setting the Windows only Plex variable LocalAppDataPath […]
