Exploits

WordPress Plugin Spellchecker 3.1 – ‘/general.php’ Local/Remote File Inclusion

source: https://www.securityfocus.com/bid/47317/info

WordPress Theme The Gazette Edition 2.9.4 – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/47320/info

Plogger 1.0 RC1 – ‘gallery_name’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/47329/info

Website Baker 2.8.1 – Multiple SQL Injections

source: https://www.securityfocus.com/bid/47332/info

Winamp 5.6.1 – ‘.m3u8’ Remote Buffer Overflow

source: https://www.securityfocus.com/bid/47333/info

Vallen Zipper 2.30 – ‘.zip’ Heap Overflow

#!/usr/bin/perl

K-Links – Link Directory Script SQL Injection

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-{In The Name Of Allah The Mercifull}-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

tmux 1.3/1.4 – ‘-S’ Option Incorrect SetGID Privilege Escalation

---------------------------------------

VeryTools VideoSpirit Pro 1.70 – ‘.visprj’ Local Buffer Overflow (Metasploit)

##

Dimac CMS 1.3 XS – ‘default.asp’ SQL Injection

source: https://www.securityfocus.com/bid/47291/info

Linux Kernel 2.6.x – ‘inotify_init1()’ Double-Free Local Denial of Service

source: https://www.securityfocus.com/bid/47296/info

Etki Video PRO 2.0 – ‘izle.asp?id’ SQL Injection

source: https://www.securityfocus.com/bid/47298/info

Etki Video PRO 2.0 – ‘kategori.asp?cat’ SQL Injection

source: https://www.securityfocus.com/bid/47298/info

WordPress Theme Live Wire 2.3.1 – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/47299/info

MIT Kerberos 5 – kadmind Change Password Feature Remote Code Execution

source: https://www.securityfocus.com/bid/47310/info

Microsoft Host Integration Server 2004-2010 – Remote Denial of Service

source: https://www.securityfocus.com/bid/49997/info

Point Market System 3.1x vBulletin plugin – SQL Injection

#(+)Exploit Title: Point Market System 3.1x vbulletin plugin SQL

IrfanView 4.28 – ‘.ICO’ With Transparent Colour Denial of Service / Remote Denial of Service

# done by BraniX

IrfanView 4.28 – ‘.ICO’ Without Transparent Colour Denial of Service / Remote Denial of Service

# done by BraniX

MikeyZip 1.1 – ‘.zip’ Local Buffer Overflow

#!/usr/bin/perl

Joomla! Component joomlacontenteditor – Blind SQL Injection

===================================================================

Nooms CMS 1.1.1 – Cross-Site Request Forgery

# NooMS CMS version 1.1.1 CSRF

Libmodplug ReadS3M – Stack Overflow

Source:

Real Networks Arcade Games – StubbyUtil.ProcessMgr ActiveX Arbitrary Code Execution (Metasploit)

##

eForum 1.1 – ‘eforum.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/47309/info

Joomla! Component com_virtuemart 1.1.7 – Blind SQL Injection

#!/usr/bin/python

Microsoft Windows XP – ‘afd.sys’ Local Kernel Denial of Service

////////////////////////////////////////////////////////////////////////////

phpcollab 2.5 – Multiple Vulnerabilities

Vulnerability ID: HTB22916

viscacha 0.8.1 – Multiple Vulnerabilities

Vulnerability ID: HTB22921

AOL Desktop 9.6 – RTX Buffer Overflow (Metasploit)

##

ManageEngine Applications Manager – (Authenticated) Code Execution (Metasploit)

##

VideoLAN VLC Media Player 1.1.8 – ModPlug ReadS3M Stack Buffer Overflow (Metasploit)

##

vTiger CRM 5.2.1 – ‘sortfieldsjson.php’ Local File Inclusion

source: https://www.securityfocus.com/bid/47263/info

PrestaShop 1.3.6 – ‘cms.php’ Remote File Inclusion

source: https://www.securityfocus.com/bid/47264/info

FiberHome HG-110 – Cross-Site Scripting / Directory Traversal

source: https://www.securityfocus.com/bid/47277/info

1024 CMS 1.1.0 Beta – Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/47282/info

S40 CMS 0.4.2b – Local File Inclusion

[Security Advisory Details: 07/04/2001]

Omer Portal 3.220060425 – ‘arama_islem.asp’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/47266/info

vTiger CRM 5.2.1 – ‘vtigerservice.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/47267/info

eGroupWare 1.8.1 – ‘test.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/47273/info

MPlayer (r33064 Lite) – Local Buffer Overflow (ROP)

#!/usr/bin/perl

Dream Vision Technologies Web Portal – SQL Injection

#####################################################################################

Graugon Forum 1.3 – SQL Injection

eyeos 2.3 – Multiple Vulnerabilities

------------------------------------------------------------------------

greenpants 0.1.7 – Multiple Vulnerabilities

# Exploit Title: GreenPants 0.1.7 Multiple Vulnerabilities

TextPattern 4.2 – ‘index.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/47182/info

Redmine 1.0.1/1.1.1 – ‘projects/hg-hellowword/news/’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/47193/info

OpenEMR 4.0.0 – Multiple Vulnerabilities

------------------------------------------------------------------------

WordPress Plugin Custom Pages 0.5.0.1 – Local File Inclusion

------------------------------------------------------------------------

Tutorialms 1.4 – ‘show’ SQL Injection

#################################################################################