The Latest Infosec News, Tools, and Exploits – Got Root?
# Exploit Title: LG SuperSign EZ CMS 2.5 – Local File Inclusion # Date: 2018-09-13 # Exploit Author: Alejandro Fanjul # Vendor Homepage: https://www.lg.com/ar/software-lg-supersign # Version: SuperSign EZ (CMS) # Tested on: Web OS 4.0 […]
# Exploit Title: Ubisoft Uplay Desktop Client 63.0.5699.0 – Remote Code Execution # Date: 2018-09-01 # Exploit Author: Che-Chun Kuo # Vulnerability Type: URI Parsing Command Injection # Vendor Homepage: https://www.ubisoft.com/en-us/ # Software Link: https://uplay.ubi.com/ […]
# Exploit Title: LG Smart IP Camera 1508190 – Backup File Download # Exploit Author: Ege Balci # Vendor Homepage: https://www.lg.com # Software version: 1310250 <= 1508190 # Model: LNB*/LND*/LNU*/LNV* # CVE: CVE-2018-16946 # Description: […]
# Title: Joomla Component JCK Editor 6.4.4 – ‘parent’ SQL Injection # Date: 2018-09-14 # Exploit Author: Hamza Megahed # Vendor Homepage:https://www.joomla.org/ # Download: https://arkextensions.com/products/jck-editor # Version: 6.4.4 # Tested on: Ubuntu, FireFox, # CVE: […]
# Exploit Title: MyBB 1.8.17 – Cross-Site Scripting # Date: 2018-08-11 # Author: 0xB9 # Twitter: @0xB9Sec # Contact: 0xB9[at]pm.me # Software Link: https://mybb.com/download/ # Version: 1.8.17 # Tested on: Ubuntu 18.04 # CVE: CVE-2018-15596 […]
# Exploit Title: FUJI XEROX DocuCentre-V 3065 Printer – Remote Command Execution # Date: 2018-09-05 # Exploit Author: vr_system # Vendor Homepage: https://www.fujixerox.com.cn/ # Software Link: https://www.fujixerox.com.cn/ # Version: DocuCentre-IV,DocuCentre-VI,DocuCentre-V,ApeosPort-VI,ApeosPort-V # Tested on: DocuCentre-V 3065,ApeosPort-VI […]
# Exploit Title: FTPShell Server 6.80 – ‘Add Account Name’ Buffer Overflow (SEH) # Discovery by: Luis Martinez # Discovery Date: 2018-09-04 # Vendor Homepage: http://www.ftpshell.com/ # Software Link: http://www.ftpshell.com/downloadserver.htm # Tested Version: 6.80 # […]
# Exploit Title: Wikipedia 12.0 – Denial of Service (PoC) # Date: 9/2/2018 # Author: 0xB9 # Twitter: @0xB9Sec # Contact: 0xB9[at]pm.me # Software Link: https://www.microsoft.com/en-us/p/wikipedia/9wzdncrfhwm4?activetab=pivot%3aoverviewtab # Version: 12.0 # Tested on: Windows 10 # […]
# Exploit Title: Eaton Xpert Meter 13.4.0.10 – SSH Private Key Disclosure # Date: 2018-07-16 # WebPage: https://CTRLu.net/ # Vendor Homepage: http://www.eaton.com/ # Vendor Advisory: http://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/PXM-Advisory.pdf # Software Link: http://www.eaton.com/Eaton/ProductsServices/Electrical/ProductsandServices/PowerQualityandMonitoring/PowerandEnergyMeters/PowerXpertMeter400060008000/index.htm#tabs-2 # Version: Firmware <= 12.x […]
# Exploit Title: WordPress Plugin Export Users to CSV 1.1.1 – CSV Injection # Exploit Author: Javier Olmedo # Website: https://hackpuntes.com # Date: 2018-08-14 # Google Dork: N/A # Vendor: Matt Cromwell # Software Link: […]
