>> TAG: #0day

Linux/ARM64 – execve(“/bin/sh”, NULL, NULL) Shellcode (40 Bytes)

PowerPanel Business Edition – Cross-Site Scripting

CiuisCRM 1.6 – ‘eventType’ SQL Injection

Varient 1.6.1 – SQL Injection

WorkSuite PRM 2.4 – ‘password’ SQL Injection

Windows/x86 – Start iexplore.exe (http://192.168.10.10/) Shellcode (191 Bytes)

Linux/x86 – Chmod + Execute (/usr/bin/wget http://192.168.1.93//x) + Hide Output Shellcode (129 bytes)

LibreNMS 1.46 – ‘addhost’ Remote Code Execution

Windows/x86 – bitsadmin Download and Execute (http://192.168.10.10/evil.exe “c:evil.exe”) Shellcode (210 Bytes)

Linux/x86 – ASCII AND, SUB, PUSH, POPAD Encoder Shellcode