>> TAG: #remote exploit

Apache OFBiz 16.11.05 – Cross-Site Scripting

HotelDruid 2.3.0 – ‘id_utente_mod’ SQL Injection

WordPress Plugin AutoSuggest 0.24 – ‘wpas_keys’ SQL Injection

ThinkPHP 5.0.23/5.1.31 – Remote Code Execution

Adobe ColdFusion 2018 – Arbitrary File Upload

PrinterOn Enterprise 4.1.4 – Arbitrary File Deletion

Linux/x86 – execve(/usr/bin/ncat -lvp 1337 -e /bin/bash)+Null-Free Shellcode (95 bytes)

DomainMOD 4.11.01 – Cross-Site Scripting

SmartFTP Client 9.0.2623.0 – Denial of Service (PoC)

Textpad 8.1.2 – Denial Of Service (PoC)