Exploits

Open Handset Alliance Android 2.3.4/3.1 – Browser Sandbox Security Bypass

source: https://www.securityfocus.com/bid/48954/info

CMSPro! 2.08 – Cross-Site Request Forgery

CMSPro! 2.08 CSRF Vulnerability

ZoneMinder 1.24.3 – Remote File Inclusion

# Exploit Title: Zoneminder 1.24.3 Remote File Inclusion Vulnerability

CA Arcserve D2D GWT RPC – Credential Information Disclosure (Metasploit)

##

Curverider Elgg 1.7.9 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/48946/info

Skype 5.3 – ‘Mobile Phone’ HTML Injection

source: https://www.securityfocus.com/bid/48951/info

Actfax FTP Server 4.27 – ‘USER’ Stack Buffer Overflow (Metasploit)

##

Digital Scribe 1.5 – register_form()’ Multiple POST Cross-Site Scripting Vulnerabilities

Digital Scribe 1.5 (register_form()) Multiple POST XSS Vulnerabilities

Joomla! Component obSuggest – Local File Inclusion

) ) ) ( ( ( ( ( ) )

Link Station Pro – Multiple Vulnerabilities

%+

cFTP 0.1 – ‘r80’ Arbitrary File Upload

ManageEngine ServiceDesk Plus 8.0 Build 8013 – Multiple Cross-Site Scripting Vulnerabilities

=======================================================================

Chyrp 2.x – ‘action’ Traversal Local File Inclusion

source: https://www.securityfocus.com/bid/48672/info

Chyrp 2.x – ‘/includes/lib/gz.php?File’ Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/48672/info

Chyrp 2.x swfupload Extension – ‘upload_handler.php’ Arbitrary File Upload / Arbitrary PHP Code Execution

source: https://www.securityfocus.com/bid/48672/info

Joomla! Component com_virtuemart 1.1.7/1.5 – Blind SQL Injection (Metasploit)

# Exploit Title: Joomla 1.5 com_virtuemart %q{

MyWebServer 1.0.3 – Denial of Service

# #########################################################################

MyWebServer 1.0.3 – Arbitrary File Download

# Exploit Title : MyWebServer v1.0.3 File Download

Citrix XenApp / XenDesktop – Stack Buffer Overflow

n.runs AG

Citrix XenApp / XenDesktop XML Service – Heap Corruption

n.runs AG

HP Network Automation 9.10 – SQL Injection

source: https://www.securityfocus.com/bid/48924/info

Sitecore CMS 6.4.1 – ‘url’ Open Redirection

source: https://www.securityfocus.com/bid/48930/info

SWAT Samba Web Administration Tool – Cross-Site Request Forgery

Thanks & Regards,

MinaliC WebServer 2.0 – Remote Source Disclosure

# Exploit Title : MinaliC Webserver v2.0 Remote Source Disclosure

MBoard 1.3 – ‘url’ Open Redirection

source: https://www.securityfocus.com/bid/48902/info

PHPJunkYard GBook 1.6/1.7 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/48905/info

Sagem F@st 3304 Routers – PPPoE Credentials Information Disclosure

source: https://www.securityfocus.com/bid/48908/info

OpenX Ad Server 2.8.7 – Cross-Site Request Forgery

Secur-I Research Group Security Advisory

ManageEngine ServiceDesk Plus 8.0.0 Build 8013 – Improper User Privileges

================================================================================

PHP-Barcode 0.3pl1 – Remote Code Execution

PHP-Barcode 0.3pl1 Remote Code Execution

CA ARCserve D2D r15 GWT RPC – Multiple Vulnerabilities

# Exploit Title:CA ARCserve D2D r15 GWT RPC Request Auth Bypass / Credentials Disclosure and Commands Execution

Apple Safari 5.0.5 – SVG Remote Code Execution (DEP Bypass)

Abysssec Public Advisory

Support Incident Tracker (SiT!) 3.63 p1 – ‘report_marketing.php?exc[]’ SQL Injection

source: https://www.securityfocus.com/bid/48896/info

Support Incident Tracker (SiT!) 3.63 p1 – ‘billable_incidents.php?sites[]’ SQL Injection

source: https://www.securityfocus.com/bid/48896/info

Support Incident Tracker (SiT!) 3.63 p1 – ‘search.php?search_string’ SQL Injection

source: https://www.securityfocus.com/bid/48896/info

Support Incident Tracker (SiT!) 3.63 p1 – ‘tasks.php?selected[]’ SQL Injection

source: https://www.securityfocus.com/bid/48896/info

Apple Safari 5.0.6/5.1 – SVG DOM Processing (PoC)

# Exploit Title: CVE-2011-0222 Safari SVG DOM processing PoC

MusicBox 3.7 – Multiple Vulnerabilities

============================================================

Ciscokits 1.0 – TFTP Server File Name Denial of Service

#!/usr/bin/python

Godly Forums – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/48872/info

Online Grades 3.2.5 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/48875/info

Willscript Recipes Website Script Silver Edition – ‘viewRecipe.php’ SQL Injection

source: https://www.securityfocus.com/bid/48878/info

Joomla! Component com_virtualmoney 1.5 – SQL Injection

source: https://www.securityfocus.com/bid/48883/info

CobraScripts Trading Marketplace Script – ‘cid’ SQL Injection

source: https://www.securityfocus.com/bid/48914/info

CA Arcserve D2D – GWT RPC Credential Information Disclosure (Metasploit)

##

MPlayer Lite r33064 – ‘.m3u’ Local Buffer Overflow (DEP Bypass)

#!/usr/bin/perl

ExtCalendar2 – Cookie Authentication Bypass / Backdoor Upload

Download Accelerator Plus (DAP) 9.7 – ‘.M3U’ File Buffer Overflow (SEH Unicode)

#!/usr/bin/python

Kingsoft AntiVirus 2012 ‘KisKrnl.sys’ 2011.7.8.913 – Kernel Mode Privilege Escalation

# Kingsoft AntiVirus 2012 KisKrnl.sys

Mevin Basic PHP Events Lister 2.03 – Cross-Site Request Forgery

#######################################################