CORPORATE
SOLUTIONS & PRODUCTS
STORE & SUPPORT
PRODUCTS & SERVICES
© 2005 - 2021 E-SPIN Group of Companies | All rights reserved.
Agora Exploitation Pack for CANVAS
Agora Exploitation Pack for CANVAS. Due to the product continuous update in nature, so we prepare this post for those who interest to know what is include inside. Latest update will be show on the top, while older update will be auto show below. This post will keep update and the post date will follow the latest date, so it will show one post date, rather than multiple post for hassle free reading in one post. This post is about CANVAS Exploitation Pack (CEP) Agora, it need to be use with CANVAS Exploitation Testing Framework. Feel free to contact E-SPIN for product and related matter.
Agora Exploitation Pack for CANVAS Product Overview
The Agora Pack was released by GLEG research team in the beginning of 2008.
The Pack is a successor of Argeniss ultimate 0day pack, which was developed since 2006 and acquired by GLEG in 2008.
More than 50 database modules contained in Argeniss pack were redesigned and included to Agora.
The Pack is continuously enhanced and now contains more than 550 modules.
To keep exploit pack always actual, we provide monthly updates with 3-7 modules for most valuable fresh vulns.
Current updates are focused on Web related software and a value add: defense bypass + database modules.
The Agora Pack features:
- Fresh & unpatched stuff each month – 3-7 modules
- Modules for latest mainstream WEB related software
- Value add: Modules to defeat the defense, hack the database etc.
- New attack techniques
2021-Dec-10 Agora 3.19:
– PHPFusion 9.10.0 User Enumeration [1 Day]
– Webmin 1.973 Cross-Site Request Forgery to RCE. CVE-2021-31761
– ReQuest Serious Play F3 Media Server Remote Denial of Service. pub
– Mini Mouse 9.2.0 RCE. pub
– Mini Mouse 9.2.0 Directory Traversal. pub
2021-Nov-13 Agora 3.18:
– CVE-2021-41773, CVE-2021-42013 Apache HTTP Server 2.4.49, 2.4.50 RCE
– GitLab 12.9.0 DirTrav CVE-2020-10977
– GLPI 9.5 Auth File Delete. [1 Day]
– GLPI 9.5 Unauth Password Change PoC. [1 Day]
– IPS Community Suite <= 4.5.4.2 PHP Code Injection
2021-Oct-9 Agora 3.17:
– Websvn 2.6.0 Remote Code Execution CVE-2021-32305
– osCommerce 2.3.4.1 Remote Code Execution pub
– GLPI 9.5 Unauthenticated User Enumeration [1 day]
– wordpress CVE-2021-29447 vuln
– Citrix XenMobile Server Path Traversal Vulnerability CVE-2020-8209
and more…
2021-Sep-12 Agora 3.16
– AGG Private Business Exchange Data Logger infoleak. [1 day]
– GLPI 9.5 Authenticated Stored CSS Injection [1 day]
– LibreNMS 21.3.0 Persistent Cross-Site Scripting [1 day]
– Node-RED-Dashboard before 2.26.2 Directory Traversal Vulnerability. CVE-2021-3223 and more…
2021-Aug-4 Agora 3.15
– VTENEXT 19 RCE [1day]
– CentOS Web Panel idsession root RCE. CVE-2021-31324
– GravCMS AdminPlugin 1.10.7 UnauthArbitrary YAML Write. RCE. CVE-2021-21425
– Black Ice, Codejock Xtreme Suite and HexaTech ActiveXs exploits [1day]
2021-Jul-13 Agora 3.14:
– Windows IIS Server DoS. CVE-2021-31166
– Apache Airflow 1.10.10 – Remote Code Execution. CVE-2020-11978, CVE-2020-13927
– Chamilo LMS 1.11.14 – RCE CVE-2021-31933
– FOGProject 1.5.9 – File Upload RCE (Auth)
– Hasura GraphQL 1.3.3 – RCE and more…
2021-Jun-10 Agora 3.13:
– MyBB 1.8.25 Poll Vote Count SQLi CVE-2021-27946
– Mantis Bug Tracker 2.24.3 ‘access’ SQLi CVE-2020-28413
– vBulletin 5.0.0 to 5.5.4 RCE CVE-2019-16759
– TestLink 1.9.20 RCE CVE-2020-8639
– VisualWare MyConnection Server 11.x Remote Code Execution CVE-2021-27198
2021-May-27 Agora 3.12:
– Apache 2.4.7 mod_status Denial of Service. pub
– Apache Druid <0.20.1 Remote Code Execution. CVE-2021-25646
– Apache Unomi 1.5.1 Remote code execution CVE-2020-13942
– Batflat CMS 1.3.6 – Remote Code Execution CVE-2020-35734
2021-Apr-5 Agora 3.11:
– Tekla Web Viewer Remote File Create Vulnerability [1day]
– Sonatype Nexus 3.21.1 Remote Code Execution. CVE-2020-10199
– EyesOfNetwork 5.3 Local File Inclusion. pub
– Apache Tomcat DoS. CVE-2020-13935.
– Apache Flink 1.11.x Unauth File Read. 2020-17519
2021-Mar-12 Agora 3.10:
– WordPress W3 Total Cache 0.9.3 Directory Traversal. pub
– WordPress Duplicator 1.3.26 Directory Traversal. pub
– Sentrifugo 3.2 – File Upload Restriction Bypass. pub
– Jenkins 2.235.3 – Stored XSS. CVE-2020-2230
– Apache Tomcat – CVE-2020-1938 (Ghostcat)
2021-Jan-30 Agora 3.09:
– Apache Flink 1.9.1 File Upload RCE (Unauthenticated). pub
– EmbedThis GoAhead Web Server 5.1.1 Digest Authentication Capture. CVE-2020-15688
– GOautodial 4.0 Remote Code Execution. pub
– TextPattern CMS 4.8.3 Remote Code Execution. pub
2021-Jan-15 Agora 3.08:
– aaPanel 6.6.6 Remote Code Execution. CVE-2020-14421
– DynPG 4.9.1 Persistent Cross-Site Scripting. public
– Oracle WebLogic Server Unauthenticated RCE via GET request. CVE-2020-14882
– SEO Panel 4.6.0 Remote Code Execution. public
2020-Dec-4 Agora 3.07:
– Oracle Business Intelligence Enterprise Edition getPreviewImage Directory Traversal. public
– Easy Transfer 1.7 Directory Traversal. public
– GOautodial 4.0 – Persistent Cross-Site Scripting. public
– Mantis Bug Tracker 2.3.0 RCE. CVE-2019-15715
2020-Nov-14 Agora 3.06 new public exploits:
– CiscoKits CertificationKits TFTP Server DirTrav
– Grafana 7.0.1 – Denial of Service. CVE-2020-13379
– Wing FTP Server 6.3.8 – Remote Code Execution.
– Joomla Plugin XCloner Backup 3.5.3 – DirTrav
– ZenTao Pro 8.8.2 – Remote Code Execution.
2020-Oct-5 Agora 3.05 :
– Bludit 3.9.2 – Remote Code Execution. CVE-2019-16113
– Filetto 1.0 – ‘FEAT’ Denial of Service. public
– Konica Minolta FTP Utility 1.0 – ‘LIST’ Denial of Service. public
– Virtual Airlines Manager 2.6.2 – ‘notam’ SQL Injection. public
2020-Sep-4 Agora 3.04 ver:
– Shopping Website 1.11.1 ‘bilingstate’ – SQL Injection. 1day
– School ERP System 1.0 Arbitrary File Upload. 1day
– Rukovoditel Project Management CRM 2.6 Directory Traversal. 1day
– CHMBAC Student Management System Arbitrary File Upload. 1day
2020-Aug-3 Agora 3.03:
– CuteNews 2.1.2 – Arbitrary File Deletion
– I-DoIt 1.14.1 – Arbitrary File Deletion
– Webtateas 2.0p6 – Directory Traversal
– ChopSlider3 WordPress Plugin3.4 – ‘id’ SQL Injection. CVE-2020-11530
2020-Jun-3 Agora 3.01:
– LabCollector 6.0 Arbitrary File Upload. [1Day]
– LabCollector 6.0 Local File Inclusion. [1Day]
– Sysaid 20.1.11 b26 – Directory Traversal. [1Day]
– Quick N Easy Web Server 3.3.8 – Denial of Service. public
2020-Feb-29 Agora 2.98:
– Voyager 1.3.0 – Directory Traversal. public
– Online Book Store 1.0 – SQL Injection. public
– Online Book Store 1.0 – Unauthenticated Remote Code Execution. public
– Crystal Live HTTP Server 6.01 Directory Traversal. public
2019-Aug-10 2.82 ver. of Agora contains following addition:
– ag_cisco_small_business_sa500_
– ag_Firefox_68_DoS – Firefox 68.0.1 – funny DoS. public
– ag_Oracle_Business_
– ag_sysgauge_server_dos – SysGauge Server 3.6.18 – Denial of Service. CVE listed
2020-Jan-28 2.97 Agora updates:
– Roxy Fileman 1.4.5 For PHP Arbitrary file delete. public
– Roxy Fileman 1.4.5 For PHP Local File Inclusion. public
– Integard Pro NoJs 2.2.0.9026 – Remote Buffer Overflow. CVE-2019-16702
– rimbalinux AhadPOS 1.11 – SQL Injection. public
2019-Dec-31 Agora 2.96 :
– Freefloat FTP Server Denial of Service. public
– Image Viewer CP Gold SDK ActiveX Remote File Create Vulnerability. 1Day
– Jobberbase 2.0 CMS SQL injections. public
– MOVISTAR BHS_RTA ADSL Router Remote File Disclosure. public
2019-Sep-29 2.93 Agora:
– jc21 Nginx Proxy Manager. CVE-2019-15517
– Karenderia Multiple Restaurant System 5.3 – Local File Inclusion. public
– Sahi pro 8.x CVE-2019-13063
– pretty often used NCTAudioEditor ActiveX sploit
2019-Sep-1 2.92 Agora:
– Apache Tika 1.15 – 1.17 – Header Command Injection. [public]
– Apache Tomcat 9 – Remote Code Execution. [public]
– Flightpath – Local File Inclusion. [public]
– Ahsay Backup 7.x – 8.1.1.50 – Authenticated Arbitrary File Upload / Remote Code Execution. [public]
2019-Jul-29 July updates: Agora 2.92
ag_cisco_small_business_sa500_lfi – Cisco Small Business SA500 Series – Local File Inclusion. public
ag_Firefox_68_DoS – Firefox 68.0.1 – funny DoS. public
+
ag_Oracle_Business_Intelligence_DirTrav
and DoS for SysGauge Server 3.6.18
2019-Jul-23 2.90 ver. of Agora contains 2 modules. List:
– KONE elevator groups controlling software Directory Traversal. CVE-2018-15486
– most of windows platforms Remote Desktop Denial of Service. public.
– most of windows platforms Remote Desktop Denial of Service. public.
2019-Jun-3 2.89 ver. of Agora contains 3 modules. List:
– KKMServer 2.1.26.16 XSS. [1day]
– KKMServer 2.1.26.16 Denial of Service. [1day]
– KKMServer 2.1.26.16 Directory Traversal. [1day]
2019-May-21 2.88 ver. of Agora contains 4 modules. List:
– Nice registry editor weakness. edbid46533
– Microsoft Windows 10 scrrun.dll file creation weakness
– Mongoose Web Server 6.9 Denial Of Service. [1day]
– KKMServer 2.1.26.16 XSS
2019-Apr-2 2.87 ver. of Agora contains following update:
– Core FTP 2.0 build 653 Denial of Service [1day]
– Embarcadero CodeGear Socket Server Denial Of Service [1day]
– Ebrigade ERP 4.5 Error-based SQL Injection. CVE-2019-5893
– MarcomCentral FusionPro VDP Creator 9.x Directory Traversal. CVE-2019-7751
– MarcomCentral FusionPro VDP Creator 9.x Directory Traversal. CVE-2019-7751
2019-Feb-28 2.86 ver. of Agora contains 3 modules. List:- SAS GRAPH Control Remote Arbitrary File Overwrite. [1day]
– Blueimp’s JQuery Fileupload AFU. [CVE-2018-9206]
– Adobe ColdFusion 2018. [CVE-2018-15961]
2019-Jan-27 2.85 ver. of Agora contains 4 modules. List:
– Conaito VoIP SIP Client SDK ActiveX RCE. [1day]
– Conaito VoIP Video SIP SDK ActiveX RCE. [1day]
– IceHRM Privilege Escalation. [public]
– PCViewer vt1000 Directory Traversal. [public]
2018-Dec-26 2.84 ver. of Agora contains 4 modules. List:
– AGG Software GPS Tracker Monitor Info Disclosure [1day]
– IceHRM Info Disclosure [1day]
– weonlydo ActiveX Remote Code Execution Vulnerability [1day]
– weonlydo wodSSH ActiveX Remote File Overwrite Vulnerability [1day]
2018-Nov-26 2.83 Agora:
– ServersCheck MonitoringDoS [1day]
– Easewe FTP, Touch22 Software ActiveX Controls – 3 modules [1day]
2018-Oct-25 2.82 Agora:
– Navigate CMS 8.2 RCE. CVE 2018-17552, CVE 2018-17553
– Traq 3.7.1 SQL Injection. public
– Cybrotech CyBroHttpServer Directory Traversal. [1day]
– Argus Surveillance DVR 4.0.0.0 devices info leak. CVE-2018-15745.
2018-Sep-26 2.81 Agora :
– Socomec UPS and low voltage monitoring software. LocalView Info Disclosure +
RemoteView PRO AFU RCE. two [1day] modules
– Solarwinds Kiwi Syslog Server Denial of Service [1day]
– Dotclear 2.9.1 Shell Upload Vulnerability. [public]
2018-Aug-29 2.80 Agora contains 4 [1day] modules:
– Antamedia HotSpot WiFi management infoleak. [1day]
– Antamedia Internet Cafe Denial of Service. [1day]
– GrapeCity spreadcom ActiveX Control Remote Code Execution Vulnerability. [1day]
– MiniWeb HTTP server Directory Traversal. [1day]
2018-Jul-30 2.79 Agora new 5 modules:
– Typesetter CMS File Upload & RCE [1day]
– App Builder info leak [1day] – Coredy CX-E120 Repeater
– RCE. [public] – PHP development server crashes. [public]
– Tiki Wiki 15.1 Unauthenticated File Upload Vulnerability. [public]
2018-Jun-25 2.78 Agora:
– Seagate Media Server in Seagate Personal Cloud has Path traversal vulnerability. public
– TerraMaster TOS 3.0.33 – Unauthenticated Remote Command Execution. public
– Typesetter CMS Arbitrary File Disclosure. [1day]
– Typesetter CMS Directory Listing. [1day]
2018-May-28 2.77 Agora new modules:
Drupal < 7.58 / < 8.3.9 / < 8.4.6 / < 8.5.1 – Remote Code Execution [CVE-2018-7600] CloudMe Sync <= v1.10.9 Remote Buffer Overflow [CVE-2018-6892] AxxonSoft Axxon Next – DirTrav [CVE-2018-7467] Wordpress Fastest Cache <= 0.8.7.4 Blind SQL Injection
Drupal < 7.58 / < 8.3.9 / < 8.4.6 / < 8.5.1 – Remote Code Execution [CVE-2018-7600] CloudMe Sync <= v1.10.9 Remote Buffer Overflow [CVE-2018-6892] AxxonSoft Axxon Next – DirTrav [CVE-2018-7467] Wordpress Fastest Cache <= 0.8.7.4 Blind SQL Injection
2018-Apr-25 2.76 Agora:
– ManageEngine Applications Manager – Remote Command Execution
– Oracle Hospitality Simphony (MICROS) 2.7 < 2.9 – Directory Traversal
– Softros Network Time System Server 2.3.4 – Denial of Service
– ManageEngine Applications Manager – Remote Command Execution
– Oracle Hospitality Simphony (MICROS) 2.7 < 2.9 – Directory Traversal
– Softros Network Time System Server 2.3.4 – Denial of Service
2018-Mar-27 2.75 Agora:
– Trustwave Secure Web Gateway v.11.8.0.27 – Unauthorized Access [CVE-2017-18001] – Microsoft Word .RTF RCE [CVE-2017-0199] – phpCollab 2.5.1 – Unauthenticated File Upload / Remote Code Execution [CVE-2017-6090] – VideoIQ Camera – Local File Disclosure
– Trustwave Secure Web Gateway v.11.8.0.27 – Unauthorized Access [CVE-2017-18001] – Microsoft Word .RTF RCE [CVE-2017-0199] – phpCollab 2.5.1 – Unauthenticated File Upload / Remote Code Execution [CVE-2017-6090] – VideoIQ Camera – Local File Disclosure
2018-Feb-28 Agora 2.74 new modules:
– WordPress Core DoS CVE-2018-6389 + Smart Google Code plugin SQLi
– phpMyFAQ 2.9.9 RCE
– Netgear ReadyNAS Surveillance Unauth RCE
– Cisco Prime Collaboration Provisioning Auth Bypass / Remote Code Execution
– WordPress Core DoS CVE-2018-6389 + Smart Google Code plugin SQLi
– phpMyFAQ 2.9.9 RCE
– Netgear ReadyNAS Surveillance Unauth RCE
– Cisco Prime Collaboration Provisioning Auth Bypass / Remote Code Execution
2018-Jan-27 2.73 Agora:
– Apache Tomcat CVE-2017-12617
– Zoho ManageEngine Applications Manager 13 SQL Injection [CVE-2017-16543] – Unitrends UEB 9.1 – Unauthenticated Remote Code Execution [CVE-2017-12477] – Belkin NetCam F7D7601 – Remote Command Execution
– Apache Tomcat CVE-2017-12617
– Zoho ManageEngine Applications Manager 13 SQL Injection [CVE-2017-16543] – Unitrends UEB 9.1 – Unauthenticated Remote Code Execution [CVE-2017-12477] – Belkin NetCam F7D7601 – Remote Command Execution