Exploits

PHP Address Book – ‘/addressbook/register/user_add_save.php?email’ SQL Injection

source: https://www.securityfocus.com/bid/58911/info

PHP Address Book – ‘/addressbook/register/checklogin.php?Username’ SQL Injection

source: https://www.securityfocus.com/bid/58911/info

PHP Address Book – ‘/addressbook/register/admin_index.php?q’ SQL Injection

source: https://www.securityfocus.com/bid/58911/info

Zimbra – ‘aspell.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/58913/info

Google Chrome – Cookie Verification Denial of Service

source: https://www.securityfocus.com/bid/58857/info

Mozilla Firefox – Cookie Verification Denial of Service

source: https://www.securityfocus.com/bid/62969/info

Google Chrome 26.0.1410.43 (Webkit) – OBJECT Element Use-After-Free (PoC)

#---object-beforeload-chrome.html------------------------------------------------------------------------------------...

C2 WebResource – ‘File’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/58838/info

e107 – ‘content_preset.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/58841/info

Symphony – ‘sort’ SQL Injection

source: https://www.securityfocus.com/bid/58843/info

FUDforum – Multiple Remote PHP Code Injection Vulnerabilities

source: https://www.securityfocus.com/bid/58845/info

SmallFTPd – Denial of Service

source: https://www.securityfocus.com/bid/58856/info

VirtualDJ Pro/Home 7.3 – Local Buffer Overflow

# Exploit Title: VirtualDJ Pro/Home

Pollen CMS 0.6 – ‘index.php?p’ Paramete’ Local File Disclosure

# Title: Pollen CMS

Network Weathermap 0.97a – ‘editor.php’ Persistent Cross-Site Scripting

Network Weathermap 0.97a - Persistent XSS

WordPress Plugin FuneralPress 1.1.6 – Persistent Cross-Site Scripting

#

Aspen 0.8 – Directory Traversal

Aspen 0.8 - Directory Traversal

Netgear WNR1000 – Authentication Bypass

Authentication bypass on Netgear WNR1000

WordPress Plugin Feedweb – ‘wp_post_id’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/58771/info

Konftel 300IP SIP-based Conference Phone 2.1.2 – Remote Bypass Reboot

#!/bin/bash

KNet Web Server 1.04b – Remote Buffer Overflow (SEH)

#!/usr/bin/ruby

SynConnect Pms – ‘index.php?loginid’ SQL Injection

Title:

Draytek Vigor 3900 1.06 – Local Privilege Escalation

# Exploit Title: Previlege escalation

MailOrderWorks 5.907 – Multiple Vulnerabilities

Title:

STUNSHELL (Web Shell) – PHP Remote Code Execution (Metasploit)

##

STUNSHELL (Web Shell) – Remote Code Execution (Metasploit)

##

Java CMM – Remote Code Execution (Metasploit)

##

v0pCr3w (Web Shell) – Remote Code Execution (Metasploit)

##

AWS Xms 2.5 – ‘importer.php?what’ Directory Traversal

Advisory ID: HTB23147

McAfee Virtual Technician (MVT) 6.5.0.2101 – Insecure ActiveX Method

Advisory ID: HTB23128

jPlayer – ‘Jplayer.swf’ Script Cross-Site Scripting

source: https://www.securityfocus.com/bid/59030/info

PsychoStats 3.2.2b – ‘awards.php’ Blind SQL Injection

Exploit Title : PsychoStats awards.php blind SQL Injection

ClipShare 4.1.1 – Multiples Vulnerabilities

# Exploit Title: ClipShare 4.1.1 - Multiples Vulnerabilites

MyBB 1.6.6 – ‘index.php?conditions[usergroup][]’ SQL Injection

source: https://www.securityfocus.com/bid/52743/info

MyBB 1.6.6 – ‘index.php?conditions[usergroup][]’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/52743/info

OrionDB Web Directory – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/58720/info

WordPress Plugin Mathjax Latex 1.1 – Cross-Site Request Forgery

# Title: Wordpress Mathjax Latex 1.1 Cross-Site Request Forgery Vulnerability

ActFax 5.01 – RAW Server Buffer Overflow (Metasploit)

##

HP Intelligent Management Center – Arbitrary File Upload (Metasploit)

##

Rosewill RSVA11001 – Remote Command Injection

I have been hacking on a Rosewill RSVA11001 for a while now, something to

IBM Lotus Domino 8.5.x – ‘x.nsf’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/58715/info

Free Hosting Manager 2.0.2 – Multiple SQL Injections

-------------------------------------------------------------------------

IconCool MP3 WAV Converter 3.00 Build 120518 – Stack Buffer Overflow

# Exploit Title: IconCool MP3 WAV Converter Stack Buffer Overflow Vulnerability

ClipShare 4.1.1 – ‘gid’ Blind SQL Injection

# Exploit Title: ClipShare 4.1.1 (gmembers.php) Blind SQL Injection Vulnerability

vBulletin 5.0.0 Beta 11 < 5.0.0 Beta 28 - SQL Injection

# Exploit Title: vBulletin 5 Beta XX SQLi 0day

Ra1NX PHP Bot – pubcall Authentication Bypass Remote Code Execution (Metasploit)

# Exploit Title: "Ra1NX" PHP Bot pubcall Authentication Bypass Remote Code Execution

LiquidXML Studio 2012 – ActiveX Insecure Method Executable File Creation

LiquidXML Studio 2012 ActiveX Insecure Method Executable File Creation 0-day

LiquidXML Studio 2010 – ActiveX Code Execution

LiquidXML Studio 2010 ActiveX Insecure Method Executable File Creation 0-day

Mitsubishi MX ActiveX Component 3 – ‘ActUWzd.dll’ ‘WzTitle’ Remote Heap Spray

KingView – Log File Parsing Buffer Overflow (Metasploit)

##