Exploits

ownCloud 3.0.0 – ‘index.php?redirect_url’ Arbitrary Site Redirect

source: https://www.securityfocus.com/bid/53145/info

TeamPass 2.1.5 – ‘login’ HTML Injection

source: https://www.securityfocus.com/bid/53038/info

Joomla! Component JA T3 Framework – Directory Traversal

source: https://www.securityfocus.com/bid/53039/info

Acuity CMS 2.6.2 – ‘Username’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/53048/info

McAfee Web Gateway 7.1.5.x – ‘Host’ HTTP Header Security Bypass

source: https://www.securityfocus.com/bid/53015/info

Bioly 1.3 – ‘/index.php’ Cross-Site Scripting / SQL Injection

source: https://www.securityfocus.com/bid/53018/info

Joomla! Plugin Beatz 1.1 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/53030/info

WordPress Plugin Yahoo Answer – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/53037/info

Joomla! Component com_ponygallery – SQL Injection

##################################################

NetworX CMS – Cross-Site Request Forgery (Add Admin)

# Exploit Title: NetworX CMS - CSRF Add Admin

MediaXxx Adult Video / Media Script – SQL Injection

# Exploit Title: MediaXxx Adult Video / Media Script SQL Injection

ManageEngine Support Center Plus 7903 – Multiple Vulnerabilities

_______ _______ _______ __

Seditio CMS 165 – ‘plug.php’ SQL Injection

source: https://www.securityfocus.com/bid/53036/info

V-CMS – Arbitrary ‘.PHP’ File Upload / Execution (Metasploit)

##

IrfanView FlashPix PlugIn – Decompression Heap Overflow

#####################################################################################

Quest InTrust – Annotation Objects Uninitialized Pointer (Metasploit)

###

Invision Power Board 3.3.0 – Local File Inclusion

[waraxe-2012-SA#086] - Local File Inclusion in Invision Power Board 3.3.0

Ushahidi 2.2 – Multiple Vulnerabilities

# Exploit Title: Ushahidi 2.2 Multiple Vulnerabilites

Munin 2.0~rc4-1 – Remote Command Injection

source: https://www.securityfocus.com/bid/53032/info

SoftwareDEP Classified Script 2.5 – SQL Injection (2)

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

WICD 1.7.1 – Local Privilege Escalation

#!/usr/bin/python

EMC IRM License Server 4.6.1.1995 – Denial of Service

#######################################################################

BGS CMS 2.2.1 – Multiple Cross-Site Scripting / HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/52983/info

WordPress Plugin All-in-One Event Calendar 1.4 – ‘agenda-widget-form.php?title’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/52986/info

WordPress Plugin All-in-One Event Calendar 1.4 – ‘box_publish_button.php?button_value’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/52986/info

WordPress Plugin All-in-One Event Calendar 1.4 – ‘save_successful.php?msg’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/52986/info

WordPress Plugin All-in-One Event Calendar 1.4 – ‘agenda-widget.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/52986/info

IBM Tivoli Provisioning Manager Express for Software Distribution Isig.isigCtl.1 – ActiveX RunAndUploadFile() Method Overflow (Metasploit)

##

Joomla! Component Estate Agent – SQL Injection

##################################################

Joomla! Component com_bearleague – SQL Injection

##################################################

Matterdaddy Market 1.1 – ‘cat_name’ Multiple SQL Injections

source: https://www.securityfocus.com/bid/52970/info

Snort 2 – DCE/RPC Preprocessor Buffer Overflow (Metasploit)

##

Dolibarr ERP/CRM 3 – (Authenticated) OS Command Injection (Metasploit)

##

Dolibarr ERP/CRM < 3.2.0 / < 3.1.1 - OS Command Injection

Dolibarr ERP & CRM OS Command Injection

Mini-stream RM-MP3 Converter 3.1.2.2 – Local Buffer Overflow

# Exploit Title : Mini-stream RM-MP3 Converter� V 3.1.2.2 Local Buffer

CitrusDB 2.4.1 – Local File Inclusion / SQL Injection

source: https://www.securityfocus.com/bid/52946/info

LANDesk Lenovo ThinkManagement Console – Remote Command Execution (Metasploit)

##

Liferay XSL – Command Execution (Metasploit)

##

BulletProof FTP Client 2010 – Buffer Overflow (PoC)

Title:

AnvSoft Any Video Converter 4.3.6 – Multiple Buffer Overflows

Title:

Distinct TFTP Server 3.01 – Directory Traversal

# Exploit Title: Distinct TFTP Server get ../../../../../../../../../../../../../boot.ini

Play [EX] 2.1 – ‘.M3U’/’.PLS’/’.LST’ Playlist File Denial of Service

#!/usr/bin/perl

Utopia News Pro 1.4.0 – Cross-Site Request Forgery (Add Admin)

# Exploit Title: Utopia News Pro 1.4.0

ZTE – Change Admin Password

# Exploit Title: ZTE Change admin password

Distinct TFTP 3.10 – Writable Directory Traversal Execution (Metasploit)

##

TRENDnet SecurView Internet Camera – UltraMJCam OpenFileDlg Buffer Overflow (Metasploit)

##

Csound – ‘.hetro’ File Handling Stack Buffer Overflow (Metasploit)

##

w-CMS 2.0.1 – Multiple Vulnerabilities

+----------------------------------------------------------------------+

WordPress Plugin Uploadify Integration 0.9.6 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/52944/info

Quest Toad for Oracle Explain Plan Display ActiveX Control – ‘QExplain2.dll 6.6.1.1115’ Remote File Creation / Overwrite