Exploits

ProQuiz 2.0.2 – Cross-Site Request Forgery

##########################################

E-Mail Security Virtual Appliance (ESVA) – Remote Execution

# Exploit Title: E-Mail Security Virtual Appliance (ESVA) Remote Execution.

TestLink 1.9.3 – Arbitrary File Upload (Metasploit)

##

Cyclope Employee Surveillance Solution 6.0 – SQL Injection (Metasploit)

##

Novell ZENworks Asset Management – Remote Execution (Metasploit)

##

MaxForum 1.0.0 – Local File Inclusion

+---------------------------------------+

MobileCartly 1.0 – Arbitrary File Upload

# Exploit Title: MobileCartly 1.0 Remote File Upload Vulnerability

GlobalScape CuteZIP – Local Stack Buffer Overflow (Metasploit)

##

Microsoft Windows – Service Trusted Path Privilege Escalation (Metasploit)

##

xt:Commerce 3.04 SP2.1 – Blind SQL Injection

+---------------------------------+

Cyclope Employee Surveillance Solution 6.0 6.1.0 6.2.0 – Multiple Vulnerabilities

# Author: loneferret of Offensive Security

sphpforum 0.4 – Multiple Vulnerabilities

# Author: loneferret of Offensive Security

WordPress Plugin RSVPMaker 2.5.4 – Persistent Cross-Site Scripting

# Exploit Title: WordPress RSVPMaker v2.5.4 Persistent XSS

Hotel Booking Portal 0.1 – Multiple Vulnerabilities

# -----------------------------------------------------------

IBM Websphere MQ File Transfer Edition Web Gateway – Cross-Site Request Forgery

on existing userspace and add MQMD (MQ Message Descriptor) user IDs. All of

IBM Websphere MQ File Transfer Edition Web Gateway – Insufficient Access Control

WebSphereMQ File Transfer

Pure-FTPd 1.0.21 (CentOS 6.2 / Ubuntu 8.04) – Null Pointer Dereference Crash (PoC)

#Pure-FTPd Crash PoC (Null Pointer Dereference), tested with pure-ftpd v1.0.21 (centos 6.2, ubuntu 8.04)

Viscosity – Local Privilege Escalation

#!/bin/sh

GNU glibc – Multiple Local Stack Buffer Overflow Vulnerabilities

// source: https://www.securityfocus.com/bid/54982/info

Total Shop UK eCommerce CodeIgniter – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/54985/info

Spytech NetVizor 6.1 – ‘services.exe’ Denial of Service

# Author: loneferret of Offensive Security

Tunnelblick – Local Privilege Escalation (1)

#include

Solaris 10 Patch 137097-01 – Symlink Privilege Escalation

source: https://www.securityfocus.com/bid/54919/info

Flynax General Classifieds CMS 4.0 – Multiple Vulnerabilities

Title:

ProQuiz 2.0.2 – Multiple Vulnerabilities

####################################################

Tunnelblick – Local Privilege Escalation (2)

#!/bin/sh

MindTouch DekiWiki – Multiple Local/Remote File Inclusions

source: https://www.securityfocus.com/bid/54991/info

FileContral – Local File Inclusion / Local File Disclosure

source: https://www.securityfocus.com/bid/55891/info

NetDecision 4.2 – TFTP Writable Directory Traversal Execution (Metasploit)

##

MobileCartly 1.0 – Arbitrary File Deletion

# Exploit Title: MobileCartly 1.0

WordPress Plugin Mz-jajak 2.1 – SQL Injection

# Exploit Title: WordPress Mz-jajak plugin query("UPDATE " . $table_name . " SET ".$answert."=".$answert."+1 WHERE id...

MobileCartly 1.0 – Arbitrary File Write

# -----------------------------------------------------------

mIRC – ‘projects.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/54989/info

GalaxyScripts Mini File Host and DaddyScripts Daddy’s File Host – Local File Inclusion

source: https://www.securityfocus.com/bid/54992/info

Joomla! Component com_fireboard – SQL Injection

Title:

Kamads Classifieds 2.0 – Admin Hash Disclosure

Cyclope Employee Surveillance Solution 6.0/6.1.0/6.2.0/6.2.1/6.3.0 – SQL Injection

# Author: loneferret of Offensive Security

Hotel Booking Portal 0.1 – Multiple SQL Injections / Cross-Site Scripting

source: https://www.securityfocus.com/bid/54980/info

Ubisoft uplay 2.0.3 – ActiveX Control Arbitrary Code Execution (Metasploit)

##

WespaJuris 3.0 – Multiple Vulnerabilities

Joomla! Component com_enmasse 1.2.0.4 – SQL Injection

# Exploit Title: Joomla com_enmasse Remote Exploit

AraDown – Blind SQL Injection

iauto mobile Application 2012 – Multiple Vulnerabilities

Title:

Inout Mobile Webmail APP – Persistent Cross-Site Scripting

Title:

Openconstructor CMS 3.12.0 – ‘id’ Multiple SQL Injections

###Title###:

Axigen Mail Server 8.0.1 – Persistent Cross-Site Scripting

#!/usr/bin/python

emailarchitect enterprise email server 10.0 – Persistent Cross-Site Scripting

#!/usr/bin/python

escon supportportal pro 3.0 – Persistent Cross-Site Scripting

#!/usr/bin/python

mailenable enterprise 6.5 – Persistent Cross-Site Scripting

#!/usr/bin/python

afterlogic mailsuite pro (VMware Appliance) 6.3 – Persistent Cross-Site Scripting

#!/usr/bin/python