Exploits

Apple Safari Webkit – libxslt Arbitrary File Creation (Metasploit)

##

Dolphin 7.0.7 – ‘member_menu_queries.php’ Remote PHP Code Injection

Joomla! Plugin NoNumber Framework – Multiple Vulnerabilities

# Exploit Title: NoNumber Framework Joomla! Plugin Multiple Vulnerabilities

Check Point UTM-1 Edge and Safe 8.2.43 – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/50189/info

Site@School 2.4.10 – ‘/index.php’ Cross-Site Scripting / SQL Injection

source: https://www.securityfocus.com/bid/50195/info

Apple Safari – ‘file://’ Arbitrary Code Execution (Metasploit)

##

WordPress Plugin BackWPUp 2.1.4 – Code Execution

Sense of Security - Security Advisory - SOS-11-012

Dominant Creature BBG/RPG Browser Game – Persistent Cross-Site Scripting

===================================================================================

GNUBoard 4.33.02 – ‘tp.php?PATH_INFO’ SQL Injection

# Exploit Title: Gnuboard

asgbookPHP 1.9 – ‘index.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/50167/info

Toshiba e-Studio (Multiple Devices) – Security Bypass

source: https://www.securityfocus.com/bid/50168/info

Ruubikcms 1.1.0 – ‘/extra/image.php’ Local File Inclusion

# Exploit Title: [Ruubikcms v 1.1.0 (/extra/image.php) Local File Inclusion Vulnerability]

Real Networks Netzip Classic 7.5.1 86 – File Parsing Buffer Overflow (Metasploit)

##

Microsoft Windows – TCP/IP Stack Denial of Service (MS11-064)

# Exploit Title: MS11-064 : Vulnerabilities in TCP/IP Stack Could

BlueZone Desktop – ‘.zap’ file Local Denial of Service

# Exploit Title: BlueZone Desktop Malformed .zap file Local Denial of Service

WordPress Plugin Photo Album Plus 4.1.1 – SQL Injection

# Exploit Title: WP Photo Album Plus 1,BENCHMARK(500000000,MD5(CHAR(115,113,108,109,97,112))),0)&wppa-cover=0&wppa-oc...

vTiger CRM 5.2 – ‘onlyforuser’ SQL Injection

source: https://www.securityfocus.com/bid/49948/info

WordPress Plugin Contact Form 2.7.5 – SQL Injection

# Exploit Title: WordPress Contact Form plugin 1,BENCHMARK(500000000,MD5(CHAR(115,113,108,109,97,112))),0)

PROMOTIC 8.1.3 – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/50133/info

Xenon – ‘id’ Multiple SQL Injections

source: https://www.securityfocus.com/bid/50141/info

Mozilla Firefox – ‘Array.reduceRight()’ Integer Overflow (Metasploit) (2)

##

Microsoft Windows – ‘.fon’ Kernel-Mode Buffer Overrun (PoC) (MS11-077)

# Exploit Title: MS11-077 .fon buffer overrun kernel-mode drivers exploit

Microsys PROMOTIC 8.1.4 – ActiveX GetPromoticSite Unitialized Pointer

#######################################################################

WordPress Plugin Pretty Link 1.4.56 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/50096/info

G-WAN 2.10.6 – Buffer Overflow (Denial of Service) (PoC)

source: https://www.securityfocus.com/bid/50108/info

MyBB MyStatus 3.1 – SQL Injection

---------------------------------------------------------------------

WordPress Plugin GD Star Rating 1.9.10 – SQL Injection

# Exploit Title: WordPress GD Star Rating plugin

Mozilla Firefox – ‘Array.reduceRight()’ Integer Overflow (1)

# Title: Mozilla Firefox Array.reduceRight() Integer Overflow Exploit

PcVue 10.0 SV.UIGrdCtrl.1 – ‘LoadObject()’/’SaveObject()’ Trusted DWORD (Metasploit)

##

Joomla! Component com_sgicatalog 1.0 – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/50072/info

BugFree 2.1.3 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/50083/info

TugZip 3.5 Archiver – ‘.ZIP’ File Parsing Buffer Overflow (Metasploit)

##

Apache mod_proxy – Reverse Proxy Exposure

#!/usr/bin/env python

WordPress Plugin WP-SpamFree Spam Plugin – SQL Injection

#Exploit Title:[ WordPress wpsf-js plugin, SQL Injection]

JBoss AS 2.0 – Remote Command Execution

THE FULL DAYTONA PACKAGE -- BY KINGCOPE, YEAR 2011

Microsoft Internet Explorer 8 – Select Element Memory Corruption

source: https://www.securityfocus.com/bid/49964/info

Joomla! Component com_tree – ‘key’ SQL Injection

source: https://www.securityfocus.com/bid/50041/info

Joomla! Component com_br – ‘state_id’ SQL Injection

source: https://www.securityfocus.com/bid/50042/info

Joomla! Component com_shop – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/50043/info

2Moons 1.4 – Multiple Remote File Inclusions

source: https://www.securityfocus.com/bid/50046/info

SilverStripe CMS 2.4.5 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/50063/info

openEngine 2.0 – Multiple Blind SQL Injection Vulnerabilities

Advisory: openEngine 2.0 'key' Blind SQL Injection vulnerability

KaiBB 2.0.1 – SQL Injection

Advisory: KaiBB 2.0.1 XSS and SQL Injection vulnerabilities

Filmis 0.2 Beta – Multiple Vulnerabilities

===================================================================================

6kbbs – Multiple Vulnerabilities

# Exploit Title: 6kbbs Multiple Vulnerabilities

Roundcube Webmail 0.3.1 – Cross-Site Request Forgery / SQL Injection

# Exploit Title: RoundCube 0.3.1 SQL injection

cotonti CMS 0.9.4 – Multiple Vulnerabilities

Cotonti CMS v0.9.4 Multiple Remote Vulnerabilities

POSH – Multiple Vulnerabilities

# Exploit Title: POSH

Opera Browser 10/11/12 – ‘SVG Layout’ Memory Corruption (Metasploit)

###############################################################################################################

MyBB Advanced Forum Signatures – ‘afsignatures-2.0.4’ SQL Injection

---------------------------------------------------------------------