Exploits

AM4SS 1.2 – Cross-Site Request Forgery (Add Admin)

#Title : AM4SS Version 1.2 - CSRF add Admin

WordPress Plugin 1 Flash Gallery 1.30 < 1.5.7a - Arbitrary File Upload (Metasploit)

# Exploit Title: 1 Flash Gallery Wordpress Plugin Arbitrary File Upload Exploit

DVD X Player 5.5 Pro – Local Overflow (SEH + ASLR + DEP Bypass)

FTP Client (Ubuntu 11.04) – Local Buffer Overflow Crash (PoC)

Ubuntu 11 (and below) ftp client seems to crash when passing large arguments to the "account" command, while a connec...

OpenCart 1.5.1.2 – Blind SQL Injection

====================================================

SkaDate – ‘blogs.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/49502/info

In-link 2.3.4/5.1.3 RC1 – ‘cat’ SQL Injection

source: https://www.securityfocus.com/bid/49508/info

Wireshark 1.6.1 – Malformed Packet Trace File Remote Denial of Service

source: https://www.securityfocus.com/bid/49521/info

Pluck CMS 4.7 – Multiple Local File Inclusion / File Disclosure Vulnerabilities

source: https://www.securityfocus.com/bid/49525/info

WordPress Plugin SCORM Cloud 1.0.6.6 – SQL Injection

# Exploit Title: WordPress SCORM Cloud plugin 1,BENCHMARK(5000000,MD5(CHAR(115,113,108,109,97,112))),0)-- " http://ww...

WordPress Plugin Eventify – Simple Events 1.7.f SQL Injection

# Exploit Title: WordPress Eventify - Simple Events plugin

Crush FTP 5 – ‘APPE’ Remote JVM Blue Screen of Death (PoC)

#

Microsoft Windows Server 2008 R1 – Local Denial of Service

Hi all.

DVD X Player 5.5 Pro – Overwrite (SEH)

# DVD X Player 5.5 Pro

WordPress Plugin Tweet Old Post 3.2.5 – SQL Injection

# Exploit Title: WordPress Tweet Old Post plugin

WordPress Plugin post highlights 2.2 – SQL Injection

# Exploit Title: WordPress post highlights plugin

WordPress Plugin KNR Author List Widget 2.0.0 – SQL Injection

# Exploit Title: WordPress KNR Author List Widget plugin 1,BENCHMARK(5000000,MD5(CHAR(115,113,108,109,97,112))),0)

PlaySms 0.9.5.2 – Remote File Inclusion

=============================================================================================================

Apple QuickTime 7.6.9 – ‘QuickTimePlayer.dll’ ActiveX Buffer Overflow

source: https://www.securityfocus.com/bid/49465/info

Kisanji – ‘gr’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/49468/info

GeoClassifieds Lite 2.0.x – Multiple Cross-Site Scripting / SQL Injections

source: https://www.securityfocus.com/bid/49475/info

Free Help Desk 1.1b – Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/49721/info

WordPress Plugin oQey Gallery 0.4.8 – SQL Injection

# Exploit Title: WordPress oQey Gallery plugin

CoolPlayer Portable 2.19.2 – Local Buffer Overflow (ASLR Bypass) (1)

# Buffer overflow that bypasses ASLR by using a non-aslr module

World Of Warcraft – ‘chat-cache.txt’ Local Stack Overflow Denial of Service

#!/usr/bin/perl

Elite Gaming Ladders 3.6 – SQL Injection

# Exploit Title: Elite Gaming Ladders v3.6 SQL Injection Vulnerability

ZipX 1.71 – ‘.ZIP’ File Buffer Overflow

#!/usr/bin/perl

TOWeb 3.0 – Local Format String Denial of Service ‘TOWeb.MO’ File Corruption

#

Webmobo WB News System – Blind SQL Injection

# Exploit Title: Webmobo News System Blind SQL Injection

Linux Kernel < 2.6.36.2 (Ubuntu 10.04) - 'Half-Nelson.c' Econet Privilege Escalation

#include

Cerberus FTP Server 4.0.9.8 – Remote Buffer Overflow

source: https://www.securityfocus.com/bid/49444/info

Advanced Image Hosting Script 2.3 – ‘report.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/49457/info

EasyGallery 5 – ‘index.php’ Multiple SQL Injections

source: https://www.securityfocus.com/bid/49458/info

Zikula Application Framework 1.2.7/1.3 – ‘themename’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/49491/info

WordPress Plugin Zotpress 4.4 – SQL Injection

# Exploit Title: WordPress Zotpress plugin

WordPress Plugin Facebook Opengraph Meta 1.0 – SQL Injection

# Exploit Title: WordPress Facebook Opengraph Meta Plugin plugin

openads-2.0.11 – Remote File Inclusion

# Exploit Title: Openads-2.0.11 Remote File inclusion Vulnerability

Apple QuickTime – PICT PnSize Buffer Overflow (Metasploit)

##

WordPress Plugin VideoWhisper Video Presentation 1.1 – SQL Injection

# Exploit Title: WordPress VideoWhisper Video Presentation plugin 1,BENCHMARK(5000000,MD5(CHAR(115,113,108,109,97,112...

BroadWin Webaccess Client – Multiple Vulnerabilities

Application: BroadWin WebAccess Client

Mambo Component N-Skyrslur – Cross-Site Scripting

source: https://www.securityfocus.com/bid/49415/info

Mambo Component N-Gallery – SQL Injection

source: https://www.securityfocus.com/bid/49418/info

Mambo Component Ahsshop – SQL Injection

source: https://www.securityfocus.com/bid/49419/info

Mambo Component N-Press – SQL Injection

source: https://www.securityfocus.com/bid/49420/info

KaiBB 2.0.1 – SQL Injection / Arbitrary File Upload

source: https://www.securityfocus.com/bid/49421/info

Mambo Component N-Frettir – SQL Injection

source: https://www.securityfocus.com/bid/49422/info

Mambo Component N-Myndir – SQL Injection

source: https://www.securityfocus.com/bid/49424/info

ACal 2.2.6 – ‘calendar.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/49442/info

WordPress Plugin Donation 1.0 – SQL Injection

# Exploit Title: WordPress Donation plugin 1,BENCHMARK(5000000,MD5(CHAR(115,113,108,109,97,112))),0)--%20

WordPress Plugin Bannerize 2.8.6 – SQL Injection

# Exploit Title: WordPress WP Bannerize plugin prefix ."bannerize_b` SET `clickcount` = `clickcount`+1 WHERE id = " ....