Exploits

NProtect Anti-Virus 2007 < 2010.5.11.1 - Local Privilege Escalation

NProtect Anti-Virus 2007 with TKRgAc2k.sys FsContext for each process to open the device,and save key/key value /...

ESTsoft ALYac Anti-Virus 1.5 < 5.0.1.2 - Local Privilege Escalation

ESTsoft ALYac Anti-Virus 1.5 with AYDrvNT.sys Module[0].Base , strrchr(pmi->Module[0].ImageName , '\\')+1))

ViRobot Desktop 5.5 and Server 3.5 < 2008.8.1.1 - Local Privilege Escalation

Hauri

CubeCart 3.x – Arbitrary File Upload

==============================================================================

Radius Manager 3.8.0 – Multiple Cross-Site Scripting Vulnerabilities

Check Point Software Technologies - Vulnerability Discovery Team (VDT)

Alt-N WebAdmin 3.3.3 – Remote Source Code Information Disclosure

source: https://www.securityfocus.com/bid/45476/info

Radius Manager 3.6 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/45481/info

Social Share – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/45485/info

Aesop GIF Creator 2.1 – ‘.aep’ Local Buffer Overflow

# !/usr/bin/python

QualDev eCommerce script – SQL Injection

====================================================

Joomla! Component JRadio – Local File Inclusion

#Name :Joomla com_jradio LFI Vulnerability

Solar FTP Server 2.0 – Multiple Denial of Service Vulnerabilities

#!/usr/bin/python

Altarsoft Audio Converter 1.1 – Local Buffer Overflow (SEH)

#

Foxit PDF Reader 4.1.1 – Title Stack Buffer Overflow (Metasploit)

##

Xion Audio Player 1.0.126 – Unicode Stack Buffer Overflow (Metasploit)

##

Altap Salamander 2.5 PE Viewer – Local Buffer Overflow (Metasploit)

##

Adobe PDF – Embedded EXE Social Engineering (Metasploit)

##

Adobe PDF – Escape EXE Social Engineering (No JavaScript) (Metasploit)

##

Exim4 < 4.69 - string_format Function Heap Buffer Overflow (Metasploit)

##

PHPRS – ‘model-kits.php’ SQL Injection

source: https://www.securityfocus.com/bid/45467/info

Mantis Bug Tracker 1.2.3 – ‘db_type’ Cross-Site Scripting / Full Path Disclosure

MantisBT

Mantis Bug Tracker 1.2.3 – ‘db_type’ Local File Inclusion

MantisBT

Google Urchin 5.7.03 – Local File Inclusion

Summary:

Digital Audio Editor 7.6.0.237 – Local Crash (PoC)

####

Easy DVD Creator – Local Crash (PoC)

####

Pointter PHP Content Management System – Unauthorized Privilege Escalation

'Pointter PHP Content Management System' Unauthorized Privilege Escalation (CVE-2010-4332)

Pointter PHP Micro-Blogging Social Network – Unauthorized Privilege Escalation

'Pointter PHP Micro-Blogging Social Network' Unauthorized Privilege Escalation (CVE-2010-4333)

BEdita 3.0.1.2550 – Multiple Vulnerabilities

Vulnerability ID: HTB22729

Blog:CMS 4.2.1e – Multiple Vulnerabilities

Vulnerability ID: HTB22727

gitWeb 1.7.3.3 – Cross-Site Scripting

>-8 Description 8-<

IBM Tivoli Storage Manager (TSM) – Local Privilege Escalation

http://www.kryptoslogic.com/advisories/2010/kryptoslogic-ibm-tivoli-dsmtca.txt

Microsoft Internet Explorer 8 – CSS Parser

#!/usr/bin/env ruby

Java – ‘Statement.invoke()’ Trusted Method Chain (Metasploit)

##

Race River Integard Home/Pro – LoginAdmin Password Stack Buffer Overflow (Metasploit)

##

slickMsg – Cross-Site Scripting / HTML Injection

source: https://www.securityfocus.com/bid/45403/info

HP Insight Diagnostics Online Edition 8.4 – ‘search.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/45420/info

Blog:CMS 4.2.1 e – Multiple HTML Injections / Cross-Site Scripting

source: https://www.securityfocus.com/bid/45432/info

FontForge – ‘.BDF’ Font File Stack Buffer Overflow (PoC)

Source: https://www.securityfocus.com/bid/45162/info

Crystal Reports Viewer 12.0.0.549 – ‘PrintControl.dll’ ActiveX

Axis2 – (Authenticated) Code Execution (via REST) (Metasploit)

##

Axis2 / SAP BusinessObjects – (Authenticated) Code Execution (via SOAP) (Metasploit)

##

Apache Tomcat Manager – Application Deployer (Authenticated) Code Execution (Metasploit)

##

Microsoft Internet Explorer – DHTML Behaviour Use-After-Free (MS10-018) (Metasploit)

##

BlogCFC 5.9.6.001 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/45395/info

Articlems 2.0 – ‘c[]’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/41511/info

Joomla! Component com_redirect 1.5.19 – Local File Inclusion

source: https://www.securityfocus.com/bid/45364/info

Mura CMS – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/45384/info

PHP TopSites 2.1 – ‘/rate.php’ Cross-Site Scripting / SQL Injection

source: https://www.securityfocus.com/bid/45389/info

Clear iSpot/Clearspot 2.0.0.0 – Cross-Site Request Forgery

Trustwave's SpiderLabs Security Advisory TWSL2010-008:

PowerShell XP 3.0.1 – Local Buffer Overflow

#!/usr/bin/python