Exploits

vTiger CRM 5.0.4 – Local File Inclusion

#!/usr/bin/python

BoutikOne – ‘description.php’ SQL Injection

_____ _________ ________ ____________ _____ ________ ________ _____ ...

Allied Telesyn TFTP (AT-TFTP) Server/Daemon 1.9 – Long Filename Overflow (Metasploit)

##

Apple Mail.app – Image Attachment Command Execution (Metasploit)

##

nostromo nhttpd 1.9.3 – Directory Traversal Remote Command Execution

source: https://www.securityfocus.com/bid/46880/info

Limelight Software – ‘article.php’ SQL Injection

© Limelight Software Ltd (article.php) Sql Injection Vulnerability

WordPress Plugin PHP Speedy 0.5.2 – ‘admin_container.php’ Remote Code Execution

JBoss Application Server 4.2 < 4.2.0.CP09 / 4.3 < 4.3.0.CP08 - Remote Command Execution

#JBoss AS Remote Exploit

COMTREND ADSL Router CT-5367 C01_R12 – Remote Code Execution

=============================================================================

ADAN Neuronlabs – ‘view.php’ SQL Injection

#--------------------------------------------------------

iOS iFileExplorer Free – Directory Traversal

# Exploit Title: iPod Touch/iPhone iFileExplorer Free Directory Traversal

Microsoft Word – ‘.RTF’ pFragments Stack Buffer Overflow (File Format) (MS10-087) (Metasploit)

##

InterPhoto Image Gallery 2.4.2 – ‘IPLANG’ Local File Inclusion

source: https://www.securityfocus.com/bid/46759/info

Lms Web Ensino – Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/46829/info

Microsoft .NET Framework JIT Compiler – Optimization NULL String Remote Code Execution

source: https://www.securityfocus.com/bid/47834/info

iOS TIOD 1.3.3 – Directory Traversal

# Exploit Title: TIOD v1.3.3 for iPhone / iPod touch, Directory Traversal

NetSupport Manager Agent – Remote Buffer Overflow (Metasploit) (2)

##

Citrix Access Gateway – Command Execution (Metasploit)

##

Support Incident Tracker (SiT!) 3.62 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/46671/info

phpWebSite 1.7.1 – ‘local’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46673/info

xtcModified 1.05 – Multiple HTML Injection / Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/46681/info

Pragyan CMS 3.0 Beta – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/46683/info

Interleave 5.5.0.2 – ‘basicstats.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/46771/info

Linux Kernel 2.6.37 – Local Kernel Denial of Service (1)

/* Linux Kernel

Magic Music Editor – Local Buffer Overflow

#!/usr/bin/perl

Readmore Systems Script – SQL Injection

# Exploit Title: [Sql injextion]

Quicktech – SQL Injection

#########################################################################

Bitweaver 2.8.0 – Multiple Vulnerabilities

# exploit title: Path Disclosure bitweaver 2.8

cChatBox for vBulletin 3.6.8/3.7.x – SQL Injection

#!/usr/bin/perl

vsftpd 2.3.2 – Denial of Service

#include

Forritun – Multiple SQL Injections

source: https://www.securityfocus.com/bid/46629/info

Linux Kernel 2.6.x – epoll Nested Structures Local Denial of Service

source: https://www.securityfocus.com/bid/46630/info

Linux Kernel 2.6.x – fs/eventpoll.c epoll Data Structure File Descriptor Local Denial of Service

source: https://www.securityfocus.com/bid/46630/info

VidiScript – ‘vp’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46639/info

Microsoft Windows XP – WmiTraceMessageVa Integer Truncation (PoC) (MS11-011)

# Exploit Title: MS11-011(CVE-2011-0045): MS Windows XP WmiTraceMessageVa Integer Truncation Vulnerability PoC

Wireshark 1.4.3 – NTLMSSP Null Pointer Dereference Denial of Service

source: https://www.securityfocus.com/bid/46796/info

Nitro PDF Reader 1.4.0 – Heap Memory Corruption (PoC)

Nitro PDF Reader 1.4.0 Remote Heap Memory Corruption / DoS PoC

Magic Music Editor – ‘.cda’ Denial of Service

#!/usr/bin/perl

DO-CMS – Multiple SQL Injections

DO-CMS Multiple Sql Injection Vulnerability

SnapProof – ‘page.php’ SQL Injection

SnapProof (page.php) Sql Injection Vulnerability

Home FTP Server 1.12 – Directory Traversal

# Exploit Title:Home FTP SERVER 1.12 Directory Traversal

Quick ‘n Easy FTP Server 3.2 – Denial of Service

# Exploit Title:[DOS LOGIN] Quick 'n Easy FTP Server 3.2

PHP ‘Exif’ Extension – ‘exif_read_data()’ Remote Denial of Service

Source: http://permalink.gmane.org/gmane.comp.security.oss.general/4198

KMPlayer 2.9.3.1214 – ‘.ksf’ Remote Buffer Overflow

source: https://www.securityfocus.com/bid/46608/info

DivX Player 6.x – ‘.dps’ Remote Buffer Overflow

source: https://www.securityfocus.com/bid/46609/info

WordPress Plugin BackWPup 1.4 – Multiple Information Disclosure Vulnerabilities

source: https://www.securityfocus.com/bid/46610/info

SnapProof – ‘retPageID’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/46622/info

Elecard AVC_HD/MPEG Player 5.7 – Local Buffer Overflow

#!/usr/bin/env python

EMC Replication Manager < 5.3 - Command Execution (Metasploit)

##

eXPert PDF Reader 4.0 – Null Pointer Dereference and Heap Corruption

#!/usr/local/bin/perl