Exploits

WebSVN 2.3.2 – Unproper Metacharacters Escaping ‘exec()’ Remote Command Injection

WebSVN 2.3.2 Unproper Metacharacters Escaping exec() Remote

Xitami Web Server 2.5b4 – Remote Buffer Overflow (Egghunter)

# Exploit Title: Xitami Web Server 2.5 Remote Buffer Overflow (Egghunter)

OpenDrive 1.3.141 – Local Password Disclosure

Title: OpenDrive 83F9 02 /CMP ECX,2

Xitami Web Server 2.5b4 – Remote Buffer Overflow

#!/usr/bin/perl

Golden FTP Server 4.70 – PASS Stack Buffer Overflow (Metasploit)

#

MODACOM URoad-5000 1450 – Remote Command Execution / Backdoor Access

================================================

Ushahidi 2.0.1 – ‘range’ SQL Injection

source: https://www.securityfocus.com/bid/48100/info

Linux Kernel 2.6.x – KSM Local Denial of Service

source: https://www.securityfocus.com/bid/48101/info

EasyFTP Server 1.7.0.2 – (Authenticated) Buffer Overflow (2)

#!/usr/bin/python

TEDE Simplificado 1.01/S2.04 – Multiple SQL Injections

source: https://www.securityfocus.com/bid/48067/info

PikaCMS – Multiple Local File Disclosure Vulnerabilities

source: https://www.securityfocus.com/bid/48068/info

ARSC Really Simple Chat 3.3-rc2 – Cross-Site Scripting / Multiple SQL Injections

source: https://www.securityfocus.com/bid/48083/info

Netgear WNDAP350 Wireless Access Point – Multiple Information Disclosure Vulnerabilities

source: https://www.securityfocus.com/bid/48085/info

Nagios 3.2.3 – ‘expand’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/48087/info

iPhone4 FTP Server 1.0 – Empty CWD-RETR Remote Crash

# Exploit Title: iPhone4 FTP Server V1.0 - Empty CWD-RETR Remote Crash

Brother HL-5370DW – series Authentication Bypass printer flooder

# Exploit Title: Brother HL-5370DW series auth bypass printer flooder

Kentico CMS 5.5R2.23 – ‘userContextMenu_Parameter’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/48051/info

S9Y Serendipity Freetag-plugin 3.21 – ‘index.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/48054/info

Microsoft Windows Live Messenger 14 – ‘dwmapi.dll’ DLL Loading Arbitrary Code Execution

// source: https://www.securityfocus.com/bid/48055/info

libxmlInvalid 2.7.x – XPath Multiple Memory Corruption Vulnerabilities

source: https://www.securityfocus.com/bid/48056/info

w-Agora Forum 4.2.1 – Arbitrary File Upload

-----------------------------76401208715012

Easy Media Script – SQL Injection

Belkin F5D7234-4 v5 G Wireless Router – Remote Hash Exposed

+-----------------------------------------+

Guru JustAnswer Professional 1.25 – Multiple SQL Injections

) ) ) ( ( ( ( ( ) )

7-Technologies IGSS 9 – Data Server/Collector Packet Handling (Metasploit)

##

Cotonti 0.9.2 – Multiple SQL Injections

source: https://www.securityfocus.com/bid/48028/info

Joomla! Component com_joomnik – SQL Injection

#############################################################

Puzzle Apps CMS 3.2 – Local File Inclusion

# ------------------------------------------------------------------------

Invisionix Roaming System Remote metasys 0.2 – Local File Inclusion

nvisionix Roaming System Remote metasys 0.2 LFI Vulnerability

HP Data Protector Client 6.11 – ‘EXEC_SETUP’ Remote Code Execution

# Exploit Title: HP Data Protector Cliet EXEC_SETUP Remote Code Execution Vulnerability PoC (ZDI-11-056)

Duhok Forum 1.1 – SQL Injection

===================================================================

Guru Penny Auction Pro 3.0 – Blind SQL Injection

) ) ) ( ( ( ( ( ) )

Joomla! Component com_jmsfileseller – Local File Inclusion

# Exploit Title: Joomla Component com_jmsfileseller Local File Inclusion Vulnerability

HP Data Protector Client 6.11 – ‘EXEC_CMD’ Remote Code Execution

# Exploit Title: HP Data Protector Client EXEC_CMD Remote Code Execution Vulnerability PoC (ZDI-11-055)

NetVault: SmartDisk 1.2 – ‘libnvbasics.dll’ Remote Denial of Service

source: https://www.securityfocus.com/bid/48029/info

Gadu-Gadu 10.5 – Remote Code Execution

source: https://www.securityfocus.com/bid/48030/info

HB eCommerce – SQL Injection

-------------[ HB ECOMMERCE SQL Injection Vulnerability ]---------------

Magneto ICMP ActiveX 4.0.0.20 – ICMPSendEchoRequest Remote Code Execute

Magneto ICMP ActiveX v4.0.0.20 ICMPSendEchoRequest Remote Code Execute

Magix Musik Maker 16 – ‘.mmm’ Local Stack Buffer Overflow (Without EggHunter) (Metasploit)

---

cPanel < 11.25 - Cross-Site Request Forgery (Add User PHP Script)

# Exploit Title: cPanel < 11.25 CSRF - Add php script

Poison Ivy 2.3.2 – Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/48039/info

Clipbucket 2.4 RC2 645 – SQL Injection

# ------------------------------------------------------------------------

Asterisk 1.8.4.1 – SIP ‘REGISTER’ Request User Enumeration

source: https://www.securityfocus.com/bid/48008/info

PHP 5.3.5 – ‘socket_connect()’ Local Buffer Overflow

Tickets 2.13 – SQL Injection

i-doIT 0.9.9-4 – Local File Inclusion

# ------------------------------------------------------------------------

Extcalendar 2.0b2 – ‘cal_search.php’ SQL Injection

Vulnerability ID: HTB22986

eGroupWare 1.8.001.20110421 – Multiple Vulnerabilities

------------------------------------------------------------------------

AWStats Totals 1.14 multisort – Remote Command Execution (Metasploit)

##

MidiCMS Website Builder – Local File Inclusion / Arbitrary File Upload

source: https://www.securityfocus.com/bid/47970/info