Exploits

WordPress Plugin Mac Photo Gallery 2.7 – Arbitrary File Upload

###########################################################

WordPress Plugin drag and drop file upload 0.1 – Arbitrary File Upload

###########################################################

WordPress Plugin Custom Content Type Manager 0.9.5.13-pl – Arbitrary File Upload

###########################################################

Agora-Project 2.12.11 – Arbitrary File Upload

# Exploit Title: agora-project_2.12.11_12-2011 Remote Shell Upload

TheBlog 2.0 – Multiple Vulnerabilities

F5 BIG-IP – Authentication Bypass (PoC)

Matta Consulting - Matta Advisory

BMC Identity Management – Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/53924/info

Joomla! Component Joomsport – SQL Injection / Arbitrary File Upload

source: https://www.securityfocus.com/bid/53944/info

Tom Sawyer Software GET Extension Factory – Remote Code Execution (Metasploit)

##

Webspell dailyinput Movie Addon 4.2.x – SQL Injection

========================================================================================

Microsoft IIS 6.0/7.5 (+ PHP) – Multiple Vulnerabilities

THIS IS A GENUINE ISOWAREZ RELEASE

PEamp – ‘.mp3’ Memory Corruption (PoC)

Author: Ayrbyte

freepost 0.1 r1 – Multiple Vulnerabilities

#####################################################################################################

WordPress Plugin Content Flow 3D 1.0.0 – Arbitrary File Upload

# Exploit Title: Wordpress content-flow3d Arbitrary File Upload

Symantec Web Gateway 5.0.2.8 – Arbitrary ‘.PHP’ File Upload (Metasploit)

##

Joomla! Component com_alphacontent – ‘limitstart’ SQL Injection

source: https://www.securityfocus.com/bid/53942/info

Webspell FIRSTBORN Movie-Addon – Blind SQL Injection

========================================================================================

WordPress Plugin Front File Manager 0.1 – Arbitrary File Upload

# Exploit Title: Wordpress front file manager 0.1 Arbitrary File Upload

WordPress Plugin Easy Contact Forms Export 1.1.0 – Information Disclosure

##################################################

WordPress Plugin PICA Photo Gallery 1.0 – Remote File Disclosure

##################################################

WordPress Plugin NewsLetter 1.5 – Remote File Disclosure

##################################################

WordPress Plugin RBX Gallery 2.1 – Arbitrary File Upload

##################################################

WordPress Plugin Simple Download Button ShortCode 1.0 – Remote File Disclosure

##################################################

WordPress Plugin Thinkun Remind 1.1.3 – Remote File Disclosure

##################################################

WordPress Plugin TinyMCE Thumbnail Gallery 1.0.7 – Remote File Disclosure

##################################################

WordPress Plugin wpStoreCart 2.5.27-2.5.29 – Arbitrary File Upload

##################################################

ComSndFTP Server 1.3.7 Beta – Remote Format String Overflow

Title: ComSndFTP Server Remote Format String Overflow Vulnerability

Sielco Sistemi Winlog 2.07.14 – Remote Buffer Overflow (Metasploit)

##

Microsoft IIS – MDAC ‘msadcs.dll’ RDS DataStub Content-Type Overflow (MS02-065) (Metasploit)

##

Samsung NET-i viewer – Multiple ActiveX ‘BackupToAvi()’ Remote Overflows (Metasploit)

##

phpAcounts 0.5.3 – SQL Injection

######################################################################################

SN News 1.2 – ‘/admin/loger.php’ Authentication Bypass

##############################################################################

Lattice Semiconductor PAC-Designer 6.21 – ‘.PAC’ Local Overflow

#!/usr/bin/python -w

PHPNet 1.8 – ‘ler.php’ SQL Injection

WordPress Plugin Front End Upload 0.5.3 – Arbitrary File Upload

# Exploit Title: Wordpress front-end-upload 0.5.3 Arbitrary File Upload

WordPress Plugin Omni Secure Files 0.1.13 – Arbitrary File Upload

# Exploit Title: Wordpress Omni-secure-files 0.1.13 Arbitrary File Upload

WordPress Plugin Email NewsLetter 8.0 – ‘option’ Information Disclosure

source: https://www.securityfocus.com/bid/53850/info

WordPress Plugin VideoWhisper Video Presentation 3.17 – ‘vw_upload.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/53851/info

WordPress Plugin FCChat Widget 2.2.x – ‘upload.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/53855/info

WordPress Plugin Font Uploader 1.2.4 – Arbitrary File Upload

##################################################

WordPress Plugin MM Forms Community 2.2.6 – Arbitrary File Upload

##################################################

WordPress Plugin Gallery 3.06 – Arbitrary File Upload

##################################################

SN News 1.2 – ‘visualiza.php’ SQL Injection

Audio Editor Master 5.4.1.217 – Denial of Service

#!/usr/bin/python

Microsoft Windows – OLE Object File Handling Remote Code Execution (Metasploit)

##

vanilla kpoll plugin 1.2 – Persistent Cross-Site Scripting

# Title: Vanilla kPoll 1.2 Stored XSS

MyBB 1.6.8 – ‘member.php’ SQL Injection

source: https://www.securityfocus.com/bid/53814/info

Apache Struts 2.2.1.1 – Remote Command Execution (Metasploit)

##

pyrocms 2.1.1 – Multiple Vulnerabilities

PyroCMS 2.1.1 CRLF Injection And Stored XSS Vulnerability

Sielco Sistemi Winlog 2.07.16 – Remote Buffer Overflow

#!/usr/bin/ruby