Exploits

WordPress Plugin bSuite 4.0.7 – Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/48714/info

Gilnet News – ‘read_more.php’ SQL Injection

source: https://www.securityfocus.com/bid/48966/info

Tugux CMS 1.2 – ‘pid’ Arbitrary File Deletion

Tugux CMS 1.2 (pid) Remote Arbitrary File Deletion Vulnerability

Freefloat FTP Server – ‘LIST’ Remote Buffer Overflow

#!/usr/bin/python

Mozilla Firefox – ‘nsTreeRange’ Dangling Pointer (Metasploit) (1)

##

Blue Coat Authentication and Authorization Agent (BCAAA) 5 – Remote Buffer Overflow (Metasploit)

##

phpMyAdmin 3.x – Swekey Remote Code Injection

.

Portix-CMS 1.5.0. rc5 – Local File Inclusion

-==================== in The Name Of aLLah ====================-

Symantec Backup Exec 12.5 – Man In The Middle

Exploit Title: Symantec Backup Exec MiTM Attack

Avaya IP Office Manager TFTP Server 8.1 – Directory Traversal

#!/usr/bin/python

appRain Quick Start Edition Core Edition Multiple 0.1.4-Alpha – Cross-Site Scripting

##############################################################################

ZipWiz 2005 5.0 – ‘.zip’ Buffer Corruption

#!/usr/bin/perl

phpMyAdmin3 (pma3) – Remote Code Execution

#!/usr/bin/env python

ZipGenius 6.3.2.3000 – ‘.zip’ Local Buffer Overflow

#!/usr/bin/perl

ZipItFast 3.0 – ‘.zip’ Heap Overflow

#!/usr/bin/perl

Joomla! Component com_voj – SQL Injection

source: https://www.securityfocus.com/bid/48621/info

Freefloat FTP Server – Remote Buffer Overflow (Metasploit)

##

CoolPlayer Portable 2.19.2 – Local Buffer Overflow (Metasploit)

##

LuxCal Web Calendar 2.4.2/2.5.0 – SQL Injection

#############################################################################################################

D-Link DSL-2650U – Denial of Service (PoC)

# Exploit Title: Dlink DSL-2650U DoS/PoC

MicroP 0.1.1.1600 – ‘.mppl’ Local Stack Buffer Overflow (Metasploit)

##

ManageEngine ServiceDesk 8.0.0.12 – Database Disclosure

# Exploit Title: ManageEngine ServiceDesk 0) {

BbZL.php – Remote File Inclusion

_________________________________________________________________________________________

Joomla! 1.6.3 – Cross-Site Request Forgery

This vulnerability takes advantage of the recent Joomla 1.6.3 XSS vulnerability ( http://seclists.org/fulldisclosure/...

ESTsoft ALPlayer 2.0 – ASX Playlist File Handling Buffer Overflow

ESTsoft ALPlayer 2.0 ASX Playlist File Handling Buffer Overflow Vulnerability

Pro Softnet IDrive Online Backup 3.4.0 – ActiveX ‘SaveToFile()’ Arbitrary File Overwrite

source: https://www.securityfocus.com/bid/48582/info

vsftpd 2.3.4 – Backdoor Command Execution (Metasploit)

##

Wordtrainer 3.0 – ‘.ord’ Local Buffer Overflow (Metasploit)

##

DmxReady Secure Document Library 1.2 – SQL Injection

Exploit Title: DmxReady Secure Document Library v1.2 SQL Injection

Joomla! Component com_jr_tfb – ‘Controller’ Local File Inclusion

source: https://www.securityfocus.com/bid/48558/info

Portech MV-372 VoIP Gateway – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/48560/info

Classified Script – c-BrowseClassified Cross-Site Scripting

source: https://www.securityfocus.com/bid/48564/info

DMXReady Account List Manager 1.2 – SQL Injection

# Exploit Title: DMXReady Account List Manager v1.2 SQL Injection

DmxReady Links Manager 1.2 – SQL Injection

# Exploit Title: DmxReady Links Manager v1.2 SQL Injection Vulnerability

PhpFood CMS 2.00 – SQL Injection

#############################################################################################################

PHP 5.3.6 – Local Buffer Overflow (ROP)

WeBid 1.0.2 – ‘converter.php’ Remote Code Execution

Adobe Reader 5.1 – XFDF Buffer Overflow (SEH)

# Exploit Title: Adobe Reader 5.1 XFDF Buffer Overflow Vulnerability (SEH)

Word List Builder 1.0 – Local Buffer Overflow (Metasploit)

##

HP OmniInet.exe Opcode 20 – Remote Buffer Overflow (Metasploit)

##

iMesh 10.0 – ‘IMWebControl.dll’ ActiveX Control Buffer Overflow

source: https://www.securityfocus.com/bid/48550/info

Donar Player 2.8.0 – Denial of Service

# ########################################

DmxReady Catalog Manager 1.2 – SQL Injection

# Exploit Title: DmxReady Catalog Manager v1.2 SQL Injection Vulneratbility

Adobe Reader X 10.0.0 < 10.0.1 - Atom Type Confusion

# Exploit Title: Adobe Reader X Atom Type Confusion Vulnerability Exploit

Microsoft Office 2010 – ‘.RTF’ Header Stack Overflow

# Exploit Title: MS Office 2010 RTF Header Stack Overflow Vulnerability

DmxReady News Manager 1.2 – SQL Injection

# Exploit Title: DmxReady News Manager v1.2 SQL Injection Vulnerability

Microsoft IIS 7.0 FTP Server – Stack Exhaustion Denial of Service (MS09-053) (Metasploit)

# Exploit Title: [MS09-053] Microsoft IIS FTP Server 'Microsoft IIS FTP Server

phpDealerLocator – Multiple SQL Injections

# Exploit Title: phpDealerLocator - Multiple SQL Injection vulnerabilities

DMXReady Registration Manager 1.2 – SQL Injection

# Exploit Title: DMXReady Registration Manager v1.2 SQL Injection

DmxReady Contact Us Manager 1.2 – SQL Injection

# Exploit Title:DmxReady Contact Us Manager v1.2 SQL Injection Vulnerability