Exploits

MySQLDumper 1.24.4 – ‘main.php’ Multiple Cross-Site Request Forgery Vulnerabilities

source: https://www.securityfocus.com/bid/53306/info

MySQLDumper 1.24.4 – ‘index.php?page’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/53306/info

MySQLDumper 1.24.4 – ‘menu.php’ PHP Remote Code Execution

source: https://www.securityfocus.com/bid/53310/info

Parallels PLESK 9.x – Insecure Permissions

# Exploit Title: PLESK 9.x insecure directory permission ( admin password

WordPress Plugin Zingiri Web Shop 2.4.0 – Multiple Cross-Site Scripting Vulnerabilities

##############################################################################

PHP Volunteer management 1.0.2 – Multiple Vulnerabilities

# Exploit Title: PHP Volunteer Management 'id' 1.0.2 Multiple Vulnerabilities

Concrete5 CMS 5.5.2.1 – Information Disclosure / SQL Injection / Cross-Site Scripting

source: https://www.securityfocus.com/bid/53268/info

gpEasy 2.3.3 – ‘jsoncallback’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/53269/info

Quick.CMS 4.0 – ‘p’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/53273/info

Microsoft Windows – MSCOMCTL ActiveX Buffer Overflow (MS12-027) (Metasploit)

##

Shadow Stream Recorder 3.0.1.7 – Local Buffer Overflow (Metasploit)

##

piwigo 2.3.3 – Multiple Vulnerabilities

Advisory ID: HTB23085

mount.cifs – ‘chdir()’ Arbitrary Root File Identification

########## Blueliv Advisory 2012-004 ##########

BeyondCHM 1.1 – Buffer Overflow

-----BEGIN PGP SIGNED MESSAGE-----

Microsoft .NET Framework EncoderParameter – Integer Overflow (MS12-025)

------------------------------------------------------------------------

PHP Ticket System Beta 1 – ‘index.php?p’ SQL Injection

# Exploit Title: PHP Ticket System Beta 1 'p' SQL Injection

RuggedCom Devices – Backdoor Access

Title: Undocumented Backdoor Access to RuggedCom Devices

Joomla! Component com_videogallery – Local File Inclusion / SQL Injection

source: https://www.securityfocus.com/bid/53237/info

SumatraPDF 2.0.1 – ‘.chm’ / ‘.mobi’ Memory Corruption

-----BEGIN PGP SIGNED MESSAGE-----

Havalite CMS 1.0.4 – Multiple Vulnerabilities

Title:

exponentcms 2.0.5 – Multiple Vulnerabilities

Information

Mobipocket Reader 6.2 Build 608 – Buffer Overflow

-----BEGIN PGP SIGNED MESSAGE-----

WebCalendar 1.2.4 – Remote Code Execution

Joomla! Component CCNewsLetter 1.0.7 – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/53208/info

Liferay 6.0.x – WebDAV File Reading

Specially crafted webdav request allows reading of local files on liferay 6.0.x

Oracle GlassFish Server 3.1.1 (build 12) – Multiple Cross-Site Scripting Vulnerabilities

Details

Samsung NET-i ware 1.37 – Multiple Vulnerabilities

#######################################################################

Oracle GlassFish Server – REST Cross-Site Request Forgery

Details

Mega File Manager – File Download

# Exploit Title: [MegaFileManager FileDownload Vulnerability

vTiger CRM 5.1.0 – Local File Inclusion

# Exploit Title: VTiger CRM

TFTP Server 1.4 – ST WRQ Buffer Overflow (Metasploit)

##

xRadio 0.95b – Local Buffer Overflow (Metasploit)

##

Adobe Flash Player – ActionScript Launch Command Execution (Metasploit)

##

Pendulab ChatBlazer 8.5 – ‘Username’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/53168/info

Anchor CMS 0.6-14-ga85d0a0 – ‘id’ Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/53181/info

Waylu CMS – ‘/products_xx.php’ SQL Injection / HTML Injection

source: https://www.securityfocus.com/bid/53202/info

Scrutinizer NetFlow & sFlow Analyzer – Multiple Vulnerabilities

Trustwave SpiderLabs Security Advisory TWSL2012-008:

Samsung D6000 TV – Multiple Vulnerabilities

#######################################################################

newscoop 3.5.3 – Multiple Vulnerabilities

Advisory ID: HTB23084

XOOPS 2.5.4 – Multiple Cross-Site Scripting Vulnerabilities

Advisory ID: HTB23062

LibreOffice 3.5.2.2 – Memory Corruption

-----BEGIN PGP SIGNED MESSAGE-----

Microsoft Windows – ‘afd.sys’ Local Kernel (PoC) (MS11-046)

MS11-046 Was a Zero day found in the wild , reported to MS by

OpenSSL – ASN1 BIO Memory Corruption

Incorrect integer conversions in OpenSSL can result in memory corruption.

VideoLAN VLC Media Player 2.0.1 – ‘.mp4’ Crash (PoC)

###########################################################################################################

Wireshark – ‘call_dissector()’ Null Pointer Dereference Denial of Service

source: https://www.securityfocus.com/bid/52735/info

CyberLink Power2Go – name Attribute (p2g) Stack Buffer Overflow (Metasploit)

##

GSM SIM Editor 5.15 – Local Buffer Overflow (Metasploit)

##

Microsoft Office 2008 SP0 (Mac) – RTF pFragments

#RTF Pfragments exploit for MAC office 2008

XOOPS 2.5.4 – ‘/modules/pm/pmlite.php?to_userid’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/53143/info

XOOPS 2.5.4 – ‘/tiny_mce/plugins/xoopsimagemanager/xoopsimagebrowser.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/53143/info