Exploits

IBM System Storage DS Storage Manager Profiler – Multiple Vulnerabilities

IBM System Storage DS Storage Manager Profiler Multiple Vulnerabilities

URL Hunter – Local Buffer Overflow (DEP Bypass)

Exploit Title: URL Hunter buffer overflow DEP Bypass

traq 2.3.5 – Multiple Vulnerabilities

====================================================================

Commentics 2.0 – Multiple Vulnerabilities

#################################################

Adiscan LogAnalyzer 3.4.3 – Cross-Site Scripting

source: https://www.securityfocus.com/bid/54117/info

Joomla! Component com_szallasok – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/54140/info

Sysax 5.62 – Admin Interface Local Buffer Overflow

#!/usr/bin/python

WordPress Plugin Schreikasten 0.14.13 – Cross-Site Scripting

# Title: WordPress Schreikasten 0.14.13 XSS

Adobe Flash Player – AVM Verification Logic Array Indexing Code Execution (Metasploit)

##

web@all – Cross-Site Scripting

source: https://www.securityfocus.com/bid/54109/info

Commentics – ‘index.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/54111/info

Coppermine Photo Gallery – ‘index.php’ Script SQL Injection

source: https://www.securityfocus.com/bid/54115/info

HP Data Protector Client – EXEC_CMD Remote Code Execution

#!/usr/bin/env python

Airlock WAF 4.2.4 – Overlong UTF-8 Sequence Bypass

SEC Consult Vulnerability Lab Security Advisory < 20120618-1 >

Samsung AllShare 2.1.1.0 – Null Pointer Dereference

#######################################################################

EZHomeTech EzServer 6.4.017 – Remote Stack Buffer Overflow (Metasploit)

##

iBoutique eCommerce 4.0 – Multiple Web Vulnerabilities

Title:

CMS Balitbang – Multiple HTML Injection / Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/54084/info

e107 Hupsi_fancybox Plugin – ‘Uploadify.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/54091/info

e107 Image Gallery Plugin – ‘name’ Remote File Disclosure

source: https://www.securityfocus.com/bid/54096/info

AdaptCMS 2.0.2 – ‘index.php’ Script Cross-Site Scripting

source: https://www.securityfocus.com/bid/54097/info

e107 Filedownload Plugin – Arbitrary File Upload / Remote File Disclosure

source: https://www.securityfocus.com/bid/54098/info

QNAP Turbo NAS 3.6.1 Build 0302T – Multiple Vulnerabilities

Sense of Security - Security Advisory - SOS-12-006

MyTickets 1.x < 2.0.8 - Blind SQL Injection

Total Video Player 1.31 – ‘.m3u’ Crash (PoC)

# Exploit Title: Total Video Player 1.31 .m3u Crash Poc

EZHomeTech Ezserver 6.4 – Remote Stack Overflow

# Exploit Title: Ezhometech EzServer

Multiple WordPress Themes – ‘upload.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/54052/info

WordPress Plugin LB Mixed Slideshow – ‘upload.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/54057/info

WordPress Plugin Wp-ImageZoom – ‘file’ Remote File Disclosure

source: https://www.securityfocus.com/bid/54058/info

VANA CMS – ‘index.php’ Script SQL Injection

source: https://www.securityfocus.com/bid/54066/info

Lattice Semiconductor PAC-Designer 6.21 – Symbol Value Buffer Overflow (Metasploit)

##

PHP 5.4.3 – apache_request_headers Function Buffer Overflow (Metasploit)

##

MediaWiki 1.x – ‘uselang’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/53998/info

Joomla! Component hwdVideoShare – ‘flash_upload.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/54037/info

Funeral Script PHP – Cross-Site Scripting / SQL Injection

source: https://www.securityfocus.com/bid/54402/info

webo site speedup 1.6.1 – Multiple Vulnerabilities

:::::::-. ... ::::::. :::.

PHP Decoda 3.3.1 – Local File Inclusion

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

News Script PHP 1.2 – Multiple Vulnerabilities

Title:

XnView – ‘.RAS’ Image Processing Heap Overflow

#####################################################################################

XnView – ‘.ECW’ Image Processing Heap Overflow

#####################################################################################

XnView – ‘.FlashPix’ Image Processing Heap Overflow

#####################################################################################

Karafun Player 1.20.86 – ‘.m3u’ Crash (PoC)

#

Huawei HG866 – Authentication Bypass

# Exploit Title: Huawei HG866 Authentication Bypass

Microsoft XML Core Services – MSXML Uninitialized Memory Corruption (MS12-043) (Metasploit)

##

WordPress Plugin Automatic 2.0.3 – SQL Injection

Title:

Nuked Klan SP CMS 4.5 – SQL Injection

Title:

iScripts EasyCreate 2.0 – Multiple Vulnerabilities

Title:

Joomla! Component Maian Media – ‘uploadhandler.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/54041/info

Simple Document Management System 1.1.5 – Multiple SQL Injections

source: https://www.securityfocus.com/bid/54043/info

Webify (Multiple Products) – Multiple HTML Injection / Local File Inclusions

source: https://www.securityfocus.com/bid/54045/info