Exploits

JamWiki 1.1.5 – ‘num’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/52829/info

EasyPHP – ‘main.php’ SQL Injection

source: https://www.securityfocus.com/bid/52781/info

EZ Publish 4.x ‘ezjscore’ Module – Cross-Site Scripting

source: https://www.securityfocus.com/bid/52807/info

Simple Machines Forum (SMF) 2.0.2 – ‘scheduled’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/52822/info

PicoPublisher 2.0 – SQL Injection

# Exploit Title : PicoPublisher v2.0 Remote SQL injection

KnFTPd 1.0.0 – ‘FEAT’ Denial of Service (PoC)

#!/usr/bin/perl

Quest InTrust 10.4.x – ReportTree / SimpleTree Classes

Quest InTrust 10.4.x ReportTree and SimpleTree Classes

D-Link DCS-5605 Network Surveillance – ActiveX Control ‘DcsCliCtrl.dll’ lstrcpyW Remote Buffer Overflow

D-Link SecuriCam DCS-5605 Network Surveillance ActiveX Control

Quest InTrust 10.4.x – Annotation Objects ActiveX Control ‘AnnotateX.dll’ Uninitialized Pointer Remote Code Execution

Quest InTrust 10.4.x Annotation Objects ActiveX Control

TRENDnet SecurView TV-IP121WN Wireless Internet Camera – UltraMJCam ActiveX Control OpenFileDlg WideCharToMultiByte Remote Stack Buffer Overflow

TRENDnet SecurView TV-IP121WN Wireless Internet Camera UltraMJCam ActiveX

BoastMachine 3.1 – Cross-Site Request Forgery (Add Admin)

# Exploit Title: boastMachine v3.1

WordPress Plugin Integrator 1.32 – ‘redirect_to’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/52739/info

Invision Power Board (IP.Board) 4.2.1 – ‘searchText’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/52740/info

Apple Safari 5.1.5 For Windows – ‘window.open()’ URI Spoofing

source: https://www.securityfocus.com/bid/52746/info

TomatoCart 1.2.0 Alpha 2 – ‘json.php’ Local File Inclusion

source: https://www.securityfocus.com/bid/52766/info

ocPortal 7.1.5 – ‘code_editor.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/52768/info

Geeklog 1.8.1 – ‘index.php’ SQL Injection

source: https://www.securityfocus.com/bid/52725/info

NextBBS 0.6 – ‘ajaxserver.php’ Multiple SQL Injections

source: https://www.securityfocus.com/bid/52728/info

NextBBS 0.6 – ‘index.php?do’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/52728/info

Matthew1471 BlogX – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/52730/info

UltraVNC 1.0.2 Client – ‘vncviewer.exe’ Remote Buffer Overflow (Metasploit)

##

Family CMS 2.9 – Multiple Vulnerabilities

Family CMS 2.9 and earlier multiple Vulnerabilities

vBshop – Multiple Persistent Cross-Site Scripting Vulnerabilities

# Exploit Title: vBshop persistent XSS 0day

PHP 5.4.0 Built-in Web Server – Denial of Service (PoC)

#!/usr/bin/python

Zumset.com FbiLike 1.00 – ‘id’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/52720/info

Ricoh DC Software DL-10 SR10 FTP Server (SR10.exe) – FTP USER Command Buffer Overflow (Metasploit)

##

FreePBX 2.9.0/2.10.0 – ‘callmenum’ Remote Code Execution (Metasploit)

##

RIPS 0.53 – Multiple Local File Inclusions

# RIPS

RealPlayer – ‘.mp4’ file handling memory Corruption

###########################################################################################################

Event Calendar PHP – ‘cal_year’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/52701/info

FreePBX 2.10.0 / Elastix 2.2.0 – Remote Code Execution

#!/usr/bin/python

Sitecom WLM-2501 – Multiple Cross-Site Request Forgery Vulnerabilities

+--------------------------------------------------------------------------------------------------------------------...

Wolfcms 0.75 – Cross-Site Request Forgery / Cross-Site Scripting

+--------------------------------------------------------------------------------------------------------------------...

Spotify 0.8.2.610 – search func Memory Exhaustion

#!/usr/local/bin/perl

PHPFox 3.0.1 – ‘ajax.php’ Remote Command Execution

mmPlayer 2.2 – ‘.m3u’ Local Buffer Overflow (SEH)

#!/usr/bin/perl

mmPlayer 2.2 – ‘.ppl’ Local Buffer Overflow (SEH)

#!/usr/bin/perl

Apache Struts 2.0 – ‘XSLTResult.java’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/52702/info

Google Talk – ‘gtalk://’ Deprecated URI Handler Injection

Google Talk gtalk:// Deprecated Uri Handler /gaiaserver Parameter Injection Vulnerability

Cisco Linksys WVC200 Wireless-G PTZ Internet Video Camera PlayerPT – ActiveX Control PlayerPT.ocx sprintf Buffer Overflow (PoC)

Microsoft Internet Explorer – Object Memory Use-After-Free (MS10-002) (Metasploit)

##

Ricoh DC Software DL-10 SR10 FTP Server (SR10.exe) 1.1.0.6 – Remote Buffer Overflow

#!/usr/bin/python

vBShout – Persistent Cross-Site Scripting

# Exploit Title: vBShout persistent XSS 0day

Cyberoam UTM – Multiple Vulnerabilities

SECURITY ADVISORY: cyberoam-utm-command-executaion

PHP Grade Book 1.9.4 – SQL Database Export

'PHP Grade Book' Unauthenticated SQL Database Export (CVE-2012-1670)

phpMoneyBooks 1.0.2 – Local File Inclusion

'phpMoneyBooks' Local File Inclusion (CVE-2012-1669)

FreePBX 2.9.0/2.10.0 – Multiple Vulnerabilities

Product: FreePBX

AtMail 1.04 – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/52684/info

Dell Webcam CrazyTalk – ActiveX BackImage (Metasploit)

##

Oreans Themida 2.1.8.0 – ‘.TMD’ File Handling Buffer Overflow

Oreans Themida v2.1.8.0 TMD File Handling Buffer Overflow Vulnerability