Exploits

ReciPHP 1.1 – SQL Injection

\#'#/

Novell Groupwise Internet Agent – LDAP BIND Request Overflow

#####################################################################################

dotProject 2.1.6 – Remote File Inclusion

:::::::-. ... ::::::. :::.

Narcissus – Remote Command Execution

:::::::-. ... ::::::. :::.

Myrephp Business Directory – Multiple Vulnerabilities

# Exploit Title: Myrephp Business Directory, Multiple Vulnerabilities

friendsinwar FAQ Manager – SQL Injection / Authentication Bypass

# Exploit Title: friendsinwar FAQ Manager SQL Injection (authbypass) Vulnerability

MYREphp Vacation Rental Software – Multiple Vulnerabilities

# Exploit Title: MYREphp Vacation Rental Software Multiple Vulnerabilities

MYRE Realty Manager – Multiple Vulnerabilities

# Exploit Title:MYRE Realty Manager Multiple Vulnerabilities

Java Applet – JAX-WS Remote Code Execution (Metasploit)

##

Microsoft Visio 2010 – Crash (PoC)

Title : Microsoft Visio 2010 memory corruption

Jira Scriptrunner 2.0.7 – Cross-Site Request Forgery / Remote Code Execution (Metasploit)

#[Author] Ben 'highjack' Sheppard

IrfanView – ‘.RLE’ Image Decompression Buffer Overflow

#####################################################################################

IrfanView – ‘.TIF’ Image Decompression Buffer Overflow

#####################################################################################

HT Editor 2.0.20 – Local Buffer Overflow (ROP)

#!/usr/bin/perl

Eventy CMS 1.8 Plus – Multiple Vulnerabilities

Title:

Zoner Photo Studio 15 b3 – Buffer Overflow (PoC)

Title:

Invision Power Board (IP.Board) 3.3.4 – ‘Unserialize()’ PHP Code Execution (Metasploit)

##

Huawei (Multiple Products) – Password Encryption

source: https://www.securityfocus.com/bid/56510/info

Zoner Photo Studio 15 Build 3 – ‘Zps.exe’ Registry Value Parsing

#!/usr/bin/python

Smadav Anti Virus 9.1 – Crash (PoC)

# Exploit Title: Smadav AntiVirus - Crash PoC

Bananadance Wiki b2.2 – Multiple Vulnerabilities

Title:

Microsoft Publisher 2013 – Crash (PoC)

Title : Microsoft Publisher 2013 memory corruption

vBulletin vBay 1.1.9 – Error-Based SQL Injection

#!/usr/bin/env python -W ignore::DeprecationWarning

NetOffice Dwins 1.4p3 – SQL Injection

:::::::-. ... ::::::. :::.

Microsoft Excel 2007 – WriteAV Crash (PoC)

Title : Microsoft Office Excel 2007 WriteAV Vulnerability

ESRI ArcGIS for Server – ‘where’ SQL Injection

source: https://www.securityfocus.com/bid/56474/info

WordPress Theme Kakao – ‘ID’ SQL Injection

source: https://www.securityfocus.com/bid/56477/info

WordPress Plugin PHP Event Calendar – ‘cid’ SQL Injection

source: https://www.securityfocus.com/bid/56478/info

WordPress Plugin Eco-annu – ‘eid’ SQL Injection

source: https://www.securityfocus.com/bid/56479/info

AR Web Content Manager (AWCM) – ‘cookie_gen.php’ Arbitrary Cookie Generation

source: https://www.securityfocus.com/bid/56465/info

EMC NetWorker – Format String (Metasploit)

##

WinRM – VBS Remote Code Execution (Metasploit)

##

Invision Power Board (IP.Board) 3.3.4 – Unserialize Regex Bypass

Xivo 1.2 – Arbitrary File Download

Xivo 1.2 Arbitrary File Download under root privileges

AVerCaster Pro RS3400 Web Server – Directory Traversal

# Exploit Title: AVerCaster Pro RS3400 web server directory traversal

OrangeHRM – ‘sortField’ SQL Injection

source: https://www.securityfocus.com/bid/56417/info

WordPress Plugin FLV Player – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/56418/info

Cryptocat 2.0.21 Chrome Extension – ‘img/keygen.gif’ File Information Disclosure

source: https://www.securityfocus.com/bid/61090/info

Cryptocat 2.0.22 – Arbitrary Script Injection

source: https://www.securityfocus.com/bid/61093/info

ZenPhoto 1.4.3.3 – Multiple Vulnerabilities

[waraxe-2012-SA#096] - Multiple Vulnerabilities in Zenphoto 1.4.3.3

VeriCentre – Multiple SQL Injections

source: https://www.securityfocus.com/bid/56409/info

ZPanel 10.0.1 – Cross-Site Request Forgery / Cross-Site Scripting / SQL Injection / Password Reset

# Exploit Title: ZPanel

CheckPoint/Sofaware Firewall – Multiple Vulnerabilities

ProCheckUp Research

Sophos Products – Multiple Vulnerabilities

List, I've completed the second paper in my series analyzing Sophos

HP Intelligent Management Center UAM – Remote Buffer Overflow (Metasploit)

##

WordPress Plugin Spider Catalog 1.1 – HTML Code Injection / Cross-Site Scripting

1 ######################################### 1

Adobe Reader 11.0.0 – Stack Overflow Crash (PoC)

Title : Adobe Reader 11.0.0 Stack overflow

Sysax FTP Automation Server 5.33 – Local Privilege Escalation

#Title: Sysax FTP Automation Server Local Privilege Escalation

BigAnt Server 2.52 SP5 – Remote Stack Overflow ROP-Based (SEH) (ASLR + DEP Bypass)

# Exploit Title: BigAnt Server 2.52 SP5 SEH Stack Overflow ROP-based exploit (ASLR + DEP bypass)

KMPlayer 3.3.0.33 – Multiple Vulnerabilities

# Exploit Title: The KMPlayer v3.3.0.33 Multiple Vulnerabilities