Exploits

MeshCMS 3.5 – Remote Code Execution

#!/usr/bin/python

Kingsoft AntiVirus 2011 SP5.2 ‘KisKrnl.sys’ 2011.1.13.89 – Local Kernel Mode Denial of Service

# Kingsoft AntiVirus 2011 SP5.2 KisKrnl.sys

BetMore Site Suite 4 – ‘bid’ Blind SQL Injection

==

Seo Panel 2.2.0 – Cookie-Rendered Persistent Cross-Site Scripting

'Seo Panel' Cookie-Rendered Persistent XSS Vulnerability (CVE-2010-4331)

Joomla! Component com_people 1.0.0 – Local File Inclusion

####################################################################

ActiveX UserManager 2.03 – Buffer Overflow

AWBS 2.9.2 – ‘cart.php’ Blind SQL Injection

AWBS 2.9.2 Blind SQL Injection 0day

Advanced Webhost Billing System (AWBS) 2.9.2 – ‘oid’ SQL Injection

source: https://www.securityfocus.com/bid/45827/info

ViArt Shop 4.0.5 – Cross-Site Request Forgery

+-------------------------------------------------------------------------+

eXtremeMP3 Player – Local Buffer Overflow (SEH)

#

glfusion CMS 1.2.1 – ‘img’ Persistent Cross-Site Scripting

# Exploit Title: glfusion CMS 1.2.1 stored XSS via img tag

CompactCMS 1.4.1 – Multiple Vulnerabilities

# Exploit Title: CompactCMS 1.4.1 Multiple Vulnerabilities

CompactCMS 1.4.1 – Multiple Cross-Site Scripting Vulnerabilities (2)

source: https://www.securityfocus.com/bid/45819/info

Objectivity/DB – Lack of Authentication

#!/usr/bin/python

Joomla! Component People 1.0.0 – SQL Injection

People Joomla Component 1.0.0 SQL Injection Vulnerability

Real Networks RealPlayer SP – ‘RecordClip’ Method Remote Code Execution

Sources: https://www.securityfocus.com/bid/44443/info

Sielco Sistemi Winlog 2.07.00 – Stack Overflow

Source: http://aluigi.org/adv/winlog_1-adv.txt

Microsoft WMI Administration Tools – ActiveX Buffer Overflow (Metasploit)

##

CakePHP 1.3.5/1.2.8 – Cache Corruption (Metasploit)

##

Avira AntiVir Personal – Multiple Code Execution Vulnerabilities (1)

// source: https://www.securityfocus.com/bid/45807/info

Avira AntiVir Personal – Multiple Code Execution Vulnerabilities (2)

source: https://www.securityfocus.com/bid/45807/info

Alguest 1.1c-patched – ‘elimina’ SQL Injection

source: https://www.securityfocus.com/bid/45812/info

Microsoft Win32k – Keyboard Layout (MS10-073)

// My koala is staring at you CºgºD

Blackmoon FTP 3.1 Build 1735/1736 – Denial of Service

#!/usr/bin/python

SiteScape Enterprise Forum 7 – TCL Injection

#!/usr/bin/env python

Joomla! 1.5.22 / 1.6.0 – ‘com_mailto’ Spam Mail Relay

# Exploit Title: Joomla! Spam Mail Relay

LifeType 1.2.10 – HTTP Referer Persistent Cross-Site Scripting

# Exploit Title: lifetype 1.2.10 http referer XSS

Microsoft Data Access Components – Remote Overflow (MS11-002)

value1

Extcalendar 2 – ‘calendar.php’ SQL Injection

# Title : ExtCalendar 2 (calendar.php) SQL Injection Vulnerability

energine 2.3.8 – Multiple Vulnerabilities

Vulnerability ID: HTB22783

vam shop 1.6 – Multiple Vulnerabilities

Vulnerability ID: HTB22780

diafan.cms 4.3 – Multiple Vulnerabilities

Vulnerability ID: HTB22777

Cambio 0.5a – Cross-Site Request Forgery

Vulnerability ID: HTB22768

whCMS 0.115 – Cross-Site Request Forgery

Vulnerability ID: HTB22767

DriveCrypt 5.3 – Local Kernel Ring0 SYSTEM

pModuleBase = &pModuleInfo->Module[0];

Wireshark – ZigBee ZCL Dissector Infinite Loop Denial of Service

Source: https://www.securityfocus.com/bid/44986/info

Mono/Moonlight Generic Type Argument – Privilege Escalation

Sources: https://www.chrishowie.com/2010/11/24/mutable-strings-in-mono/

Nokia MultiMedia Player 1.0 – Local Overflow (SEH Unicode)

# Exploit Title: Nokia Multimedia player SEH Unicode

Microsoft RPC DCOM Interface – Remote Overflow (MS03-026) (Metasploit)

##

CMS Tovar – ‘tovar.php’ SQL Injection

source: https://www.securityfocus.com/bid/45772/info

Macro Express Pro 4.2.2.1 – ‘.MXE’ File Syntactic Analysis Buffer Overflow (PoC)

#!/usr/local/bin/perl

Maximus CMS 1.1.2 – ‘FCKeditor’ Arbitrary File Upload

| |

TinyBB 1.2 – SQL Injection

+-------------------------------+

Linux Kernel (Solaris 10 / < 5.10 138888-01) - Local Privilege Escalation

#define _STRUCTURED_PROC 1

Microsoft Windows – Common Control Library ‘Comctl32’ Heap Overflow (MS10-081)

#!/usr/bin/env ruby

Lotus CMS Fraise 3.0 – Local File Inclusion / Remote Code Execution

#!/usr/bin/python

JBoss JMX – Console Beanshell Deployer WAR Upload and Deployment (Metasploit)

##

WikLink 0.1.3 – Multiple SQL Injections

source: https://www.securityfocus.com/bid/45731/info

Solar FTP Server 2.1.1 – ‘PASV’ Remote Buffer Overflow

source: https://www.securityfocus.com/bid/45748/info

Newv SmartClient 1.1.0 – ‘NewvCommon.ocx’ ActiveX Control Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/45751/info