Exploits

Huawei Technologies Internet Mobile – Unicode (SEH)

#!/usr/bin/perl

Cartweaver 3 – Local File Inclusion

# Exploit Title: Cartweaver 3 LFI exploit

airVisionNVR 1.1.13 – ‘readfile()’ Disclosure / SQL Injection

Exploit Title: airVisionNVR readfile() disclosure and sql injection

QQPlayer 3.7.892 – m2p ‘quartz.dll’ Heap Pointer Overwrite (PoC)

# Exploit Title: QQPlayer 3.7.892 m2p quartz.dll heap pointer overwrite PoC

BigPond 3G21WB – Multiple Vulnerabilities

Hard-coded credentials and command-injection vulnerabilities on BigPond 3G21WB

SilverStripe CMS 2.4.x – ‘BackURL’ Open Redirection

source: https://www.securityfocus.com/bid/55915/info

WordPress Plugin Crayon Syntax Highlighter – ‘wp_load’ Remote File Inclusion

source: https://www.securityfocus.com/bid/55919/info

Metasploit < 4.4 - pcap_log Plugin Privilege Escalation (Metasploit)

##

PHP 5.3.4 Win Com Module – Com_sink

# Exploit Title: PHP 5.3.4 Win Com Module Com_sink Local Exploit

VideoLAN VLC Media Player 2.0.3 – ‘.png’ ReadAV Crash (PoC)

#!/usr/bin/perl

KeyHelp – ActiveX LaunchTriPane Remote Code Execution (Metasploit)

##

Omnistar Document Manager 8.0 – Multiple Vulnerabilities

Title:

vOlk Botnet Framework 4.0 – Multiple Vulnerabilities

Title:

FileBound 6.2 – Local Privilege Escalation

Sense of Security - Security Advisory - SOS-12-010

Microsoft Excel – Denial of Service

source: https://www.securityfocus.com/bid/56309/info

PhpTax – ‘pfilez’ Execution Remote Code Injection (Metasploit)

##

phpMyAdmin 3.5.2.2 – ‘server_sync.php’ Backdoor (Metasploit)

##

qdPM 7.0 – Arbitrary ‘.PHP’ File Upload (Metasploit)

##

Auxilium RateMyPet – Arbitrary File Upload (Metasploit)

##

InduSoft Web Studio – Arbitrary File Upload / Remote Code Execution (Metasploit)

##

Avaya WinPMD UniteHostRouter – Remote Buffer Overflow (Metasploit)

##

NTR – ActiveX Control ‘StopModule()’ Remote Code Execution (Metasploit)

##

Microsoft Internet Explorer – execCommand Use-After-Free (MS12-063) (Metasploit)

##

NTR – ActiveX Control ‘Check()’ Method Buffer Overflow (Metasploit)

##

HP Application Lifecycle Management – ‘XGO.ocx’ ActiveX ‘SetShapeNodeType()’ Remote Code Execution (Metasploit)

##

Microsoft Windows – Escalate UAC Execute RunAs (Metasploit)

##

Microsoft Windows – ‘AfdJoinLeaf’ Local Privilege Escalation (MS11-080) (Metasploit)

##

Microsoft Windows – Escalate UAC Protection Bypass (Metasploit)

##

Oracle Business Transaction Management FlashTunnelService – Remote Code Execution (Metasploit)

##

Avaya IP Office Customer Call Reporter – ‘ImageUpload.ashx’ Remote Command Execution (Metasploit)

##

Linux Kernel UDEV < 1.4.1 - 'Netlink' Local Privilege Escalation (Metasploit)

##

ZEN Load Balancer Filelog – Command Execution (Metasploit)

##

Samba 3.4.16/3.5.14/3.6.4 – SetInformationPolicy AuditEventsInfo Heap Overflow (Metasploit)

##

Webmin 1.580 – ‘/file/show.cgi’ Remote Command Execution (Metasploit)

##

QNX QCONN – Remote Command Execution (Metasploit)

##

ServersCheck Monitoring Software 9.0.12/9.0.14 – Persistent Cross-Site Scripting

# Author: loneferret of Offensive Security

OpenX 2.8.10 – ‘plugin-index.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/55860/info

Endpoint Protector 4.0.4.0 – Multiple Vulnerabilities

Title:

Arctic Torrent 1.2.3 – Memory Corruption (Denial of Service)

#!/usr/bin/perl

FL Studio 10 Producer Edition – Buffer Overflow (SEH) (PoC)

# Title : FL Studio 10 Producer Edition - SEH Based Buffer Overflow PoC

Gom Player 2.1.44.5123 – ‘UNICODE’ Null Pointer Dereference

# Exploit Title: gom player 2.1.44.5123 (Unicode) NULL pointer dereference =

PLIB 1.8.5 – ‘ssg/ssgParser.cxx’ Local Buffer Overflow

# Exploit Title: Plib + flightgear 3dconvert exploit

Apple iOS Mobile Safari – LibTIFF Buffer Overflow (Metasploit)

##

Apple iOS Mobile Mail – LibTIFF Buffer Overflow (Metasploit)

##

Linux Kernel 3.2.x – ‘uname()’ System Call Local Information Disclosure

source: https://www.securityfocus.com/bid/55855/info

Web Help Desk by SolarWinds – Persistent Cross-Site Scripting

# Author: loneferret of Offensive Security

Interspire Email Marketer – Cross-Site Scripting / HTML Injection / SQL Injection

source: https://www.securityfocus.com/bid/55829/info

HCView – WriteAV Crash (PoC)

#!/usr/bin/perl

Blog Mod 0.1.9 – ‘index.php?month’ SQL Injection

MyAuth3 – Blind SQL Injection

# Exploit Title: MyAuth3 Blind SQL Injection / Root Shell Access 0day exploit