Exploits

iManager Plugin 1.2.8 – ‘d’ Arbitrary File Deletion

iManager Plugin v1.2.8 (d) Remote Arbitrary File Deletion Vulnerability

MY MP3 Player 3.0 – ‘.m3u’ DEP Bypass

# written to bypass OptIn/OptOut DEP policy

Ay Computer (Multiple Products) – Multiple SQL Injections

source: https://www.securityfocus.com/bid/49668/info

Mini-stream Ripper 2.9.7 – DEP Bypass

# written to bypass OptIn/OptOut DEP policy

Measuresoft ScadaPro 4.0.0 – Remote Command Execution (Metasploit)

##

PunBB 1.3.5 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/49660/info

Nortel Contact Recording Centralized Archive 6.5.1 – SQL Injection

StarDevelop LiveHelp 2.0 – ‘index.php’ Local File Inclusion

source: https://www.securityfocus.com/bid/49650/info

WordPress Plugin E-Commerce 3.8.6 – SQL Injection

# Exploit Title: WordPress WP e-Commerce plugin

Beckhoff TwinCAT 2.11.0.2004 – Denial of Service

#######################################################################

Equis MetaStock 11 – Use-After-Free

#######################################################################

eSignal and eSignal Pro 10.6.2425.1208 – Multiple Vulnerabilities

#######################################################################

Cogent DataHub 7.1.1.63 – Stack Overflow

#######################################################################

Cogent DataHub 7.1.1.63 – Integer Overflow

#######################################################################

Cogent DataHub 7.1.1.63 – Source Disclosure

#######################################################################

DaqFactory 5.85 build 1853 – Stack Overflow

#######################################################################

progea movicon / powerhmi 11.2.1085 – Multiple Vulnerabilities

#######################################################################

Rockwell RSLogix 19 – Denial of Service

#######################################################################

Measuresoft ScadaPro 4.0.0 – Multiple Vulnerabilities

#######################################################################

Microsoft SharePoint 2007/2010 – ‘Source’ Multiple Open Redirections

source: https://www.securityfocus.com/bid/49620/info

WordPress Plugin Auctions 1.8.8 – ‘wpa_id’ SQL Injection

source: https://www.securityfocus.com/bid/49625/info

WordPress Plugin Forum Server 1.7 – SQL Injection

# Exploit Title: WordPress WP Forum Server plugin 1,BENCHMARK(5000000,MD5(CHAR(115,113,108,109,97,112))),0)--%20&edit...

dotProject 2.1.5 – SQL Injection

# Exploit Title: dotProject 2.1.5 SQL Injection Vulnerability

Microsoft WINS Service 5.2.3790.4520 – Memory Corruption (MS11-035)

#######################################################################

Microsoft WINS – ECommEndDlg Input Validation Error (MS11-035/MS11-070)

Core Security - Corelabs Advisory

ScadaTEC ScadaPhone 5.3.11.1230 – Local Stack Buffer Overflow (Metasploit)

##

Carel PlantVisor 2.4.4 – Directory Traversal

#######################################################################

ScadaTEC ModbusTagServer & ScadaPhone – ‘.zip’ Local Buffer Overflow

TomatoCart 1.1 – (Authenticated) Local File Inclusion

# Exploit Title: TomatoCart 1.1 PostAuth Local File Include

KnFTP Server – Remote Buffer Overflow

#!/usr/bin/python

Aika 0.2 – colladaconverter Xml Parsing Buffer Overflow

//////////////////////////////////////////////////////////////////////////////////////////////////////////////////////

Wav Player 1.1.3.6 – ‘.pll’ Local Buffer Overflow

# Exploit Title: wav player 1.1.3.6 .pll Buffer Overflow

PHP Support Tickets 2.2 – Code Execution

# Exploit Title: PHP Support Tickets v2.2 Code Exec

NetCat CMS – Multiple Vulnerabilities

# Exploit Title: NetCat CMS Code exec, SQL-injection

Slaed CMS – Code Execution

# Exploit Title: Slaed CMS Code exec

AstroCMS – Multiple Vulnerabilities

# Exploit Title: AstroCMS Multiple Remote Vulnerabilities

Procyon Core Server HMI 1.13 – ‘Coreservice.exe’ Remote Stack Buffer Overflow (Metasploit)

##

Papoo CMS Light 4.0 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/49587/info

Orion Network Performance Monitor 10.1.3 – ‘CustomChart.aspx’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/49614/info

WordPress Plugin Tune Library 2.17 – SQL Injection

# Exploit Title: WordPress Tune Library plugin

WordPress Plugin WP-Filebase Download Manager 0.2.9 – SQL Injection

# Exploit Title: WordPress WP-Filebase Download Manager plugin 1,BENCHMARK(5000000,MD5(CHAR(115,113,108,109,97,112)))...

WordPress Plugin A to Z Category Listing 1.3 – SQL Injection

# Exploit Title: WordPress A to Z Category Listing plugin

BisonWare BisonFTP Server 3.5 – Remote Buffer Overflow (Metasploit)

##############################################################################

MYRE Real Estate Software – Multiple Vulnerabilities

##############################################################################

Xataface WebAuction and Xataface Librarian DB – Multiple Vulnerabilities

##############################################################################

WordPress Plugin Event Registration 5.44 – SQL Injection

# Exploit Title: Wordpress Event Registration plugin

MelOn Player 1.0.11.x – Denial of Service (PoC)

# Exploit Title: MelOn Player 1.0.11.x Denial of Service POC

Spring Security – HTTP Header Injection

source: https://www.securityfocus.com/bid/49535/info

WordPress Plugin Paid Downloads 2.01 – SQL Injection

# Exploit Title: WordPress Paid Downloads plugin

WordPress Plugin Community Events 1.2.1 – SQL Injection

# Exploit Title: WordPress Community Events plugin get_blog_prefix() . "ce_events where event_id = " . $event_id;