Exploits

Pixie CMS 1.01 < 1.04 - Blind SQL Injections

Exploit Title: Pixie CMS 1.01 - 1.04 "pixie_user" Blind SQL Injection

Mozilla Firefox 8.0 – Null Pointer Dereference (PoC)

# Firefox GetStatus(&status); // Code execution is here.

Joomla! Component Content – ‘year’ SQL Injection

source: https://www.securityfocus.com/bid/50656/info

Support Incident Tracker 3.65 – Remote Command Execution (Metasploit)

##

Aviosoft Digital TV Player Professional 1.0 – Local Stack Buffer Overflow (Metasploit)

##

Mambo 4.x – ‘Zorder’ SQL Injection

[+] Exploit Title : CMS 4.x.x Zorder (SQL Injection Vul)

WordPress Plugin Zingiri 2.2.3 – ‘ajax_save_name.php’ Remote Code Execution

Search Plugin for Hotaru CMS 1.4.2 – ‘admin_index.php?site_name’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/50657/info

Soda PDF Professional 1.2.155 – ‘.pdf’ / ‘.WWF’ File Handling Denial of Service

#!/usr/bin/perl

Kool Media Converter 2.6.0 – Denial of Service

#!/usr/bin/env python

Infoblox NetMRI 6.2.1 – Admin Login Page Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/50646/info

Kool Media Converter 2.6.0 – ‘.ogg’ File Buffer Overflow

source: https://www.securityfocus.com/bid/50651/info

glibc – ‘LD_AUDIT’ Arbitrary DSO Load Privilege Escalation

#!/bin/sh

Joomla! Component com_alfcontact 1.9.3 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/50637/info

Aviosoft Digital TV Player Professional 1.x – Local Stack Buffer Overflow

# Exploit Title: Aviosoft Digital TV Player Professional 1.x Stack Buffer Overflow

osCSS2 – ‘_ID’ Local file Inclusion

Advisory: osCSS2 "_ID" parameter Local file inclusion

labwiki 1.1 – Multiple Vulnerabilities

------------------------------------------------------------------------

COMTREND CT-5624 Router – Root/Support Password Disclosure/Change

#!/usr/bin/perl

AbsoluteFTP 1.9.6 < 2.2.10 - 'LIST' Remote Buffer Overflow (Metasploit)

# Exploit Title: AbsoluteFTP 1.9.6 - 2.2.10 Remote Buffer Overflow (LIST)

OpenPAM – ‘pam_start()’ Local Privilege Escalation

source: https://www.securityfocus.com/bid/50607/info

AShop – Open Redirection / Cross-Site Scripting

source: https://www.securityfocus.com/bid/50616/info

11in1 CMS 1.0.1 – ‘do.php’ CRLF Injection

11in1 CMS v1.0.1 (do.php) CRLF Injection Vulnerability

Microsoft Windows – TCP/IP Stack Reference Counter Integer Overflow (MS11-083)

// source: https://www.securityfocus.com/bid/50517/info

PBCS Technology – ‘articlenav.php’ SQL Injection

source: https://www.securityfocus.com/bid/50577/info

WHMCompleteSolution 3.x/4.x – Multiple Vulnerabilities

$b0x# WHMCS ( WHMCompleteSolution ) 3.x / 4.x Multiple Vulnerability !

KnFTP 1.0 – Remote Buffer Overflow (DEP Bypass) (Metasploit)

#module for metasploit framework, for more information

LabStoRe 1.5.4 – SQL Injection

------------------------------------------------------------------------

OrderSys 1.6.4 – SQL Injection

------------------------------------------------------------------------

Oracle Hyperion Strategic Finance 12.x – Tidestone Formula One WorkBook OLE Control TTF16.ocx Remote Heap Overflow

Oracle – xdb.xdb_pitrig_pkg.PITRIG_DROPMETADATA procedure

# Exploit Title: New exploit to Oracle CVE-2007-4517 vulnerability

SmartJobBoard – ‘keywords’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/50552/info

Admin Bot – ‘news.php’ SQL Injection

source: https://www.securityfocus.com/bid/50562/info

XAMPP 1.7.7 – ‘PHP_SELF’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/50564/info

Oracle NoSQL 11g 1.1.100 R2 – ‘log’ Directory Traversal

source: https://www.securityfocus.com/bid/50567/info

Linux Kernel 3.0.4 – ‘/proc/interrupts’ Password Length Local Information Disclosure

source: https://www.securityfocus.com/bid/50573/info

ZenPhoto 1.4.1.4 – ‘ajax_create_folder.php’ Remote Code Execution

PHPMyFAQ 2.7.0 – ‘ajax_create_folder.php’ Remote Code Execution

aidiCMS 3.55 – ‘ajax_create_folder.php’ Remote Code Execution

Calibre E-Book Reader – Local Privilege Escalation (3)

#include

Microsoft Excel 2007 – ‘.xlb’ Local Buffer Overflow (MS11-021) (Metasploit)

##

Ajax File and Image Manager 1.0 Final – Remote Code Execution

--------------------------------------------------------------------------

Advanced Poll 2.02 – SQL Injection

##############################################################################################################

HP Data Protector Media Operations 6.20 – Directory Traversal

#######################################################################

Microsoft Excel 2003 11.8335.8333 – Use-After-Free

#######################################################################

DreamBox DM800 1.5rc1 – File Disclosure

#!/usr/bin/perl

Linux Kernel 2.6.37-rc1 – ‘serial_multiport_struct’ Local Information Leak

/* Linux

WHMCompleteSolution (WHMCS) 3.x – ‘clientarea.php’ Local File Disclosure

# Title : WHMCS (clientarea.php) Local File Disclosure

Mini-stream Ripper 3.0.1.1 – Local Buffer Overflow (Metasploit) (3)

##

DreamBox DM800 – ‘file’ Local File Disclosure

source: https://www.securityfocus.com/bid/50520/info

WordPress Theme Bonus 1.0 – ‘s’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/50527/info