Exploits

SnackAmp 3.1.3 – SMP Buffer Overflow (SEH)

# Exploit Title: SnackAmp 3.1.3 Malicious SMP Buffer Overflow Vulnerability (SEH)

MyBB 1.4.10 – ‘tags.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/45388/info

Exim 4.63 – Remote Command Execution

#Exim 4.63 (RedHat/Centos/Debian) Remote Root Exploit by Kingcope

FreeAmp 2.0.7 – ‘.m3u’ Local Buffer Overflow

# Exploit Title: FreeAmp 2.0.7 .m3u Buffer Overflow - Egghunter

Cetera eCommerce – ‘banner.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/45374/info

Sulata iSoft – ‘stream.php’ Local File Disclosure

=========================================================

Joomla! Component com_billyportfolio 1.1.2 – Blind SQL Injection

# Exploit Title: Joomla Component Billy Portfolio 1.1.2 Blind SQL Injection

PHP 5.3.3 – NumberFormatter::getSymbol Integer Overflow

From: Maksymilian Arciemowicz

Litespeed Web Server 4.0.17 with PHP (FreeBSD) – Remote Overflow

# LiteSpeed Web Server 4.0.17 w/ PHP Remote Exploit for FreeBSD

Joomla! Component JExtensions Property Finder – ‘sf_id’ SQL Injection

source: https://www.securityfocus.com/bid/45333/info

ManageEngine EventLog Analyzer 6.1 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/45334/info

Helix Server 14.0.1.571 – Administration Interface Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/45340/info

BizDir 05.10 – ‘f_srch’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/45342/info

slickMsg 0.7-alpha – ‘top.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/45343/info

Joomla! Component com_mailto – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/45356/info

Social Share – ‘vote.php’ HTTP Response Splitting

source: https://www.securityfocus.com/bid/45550/info

Apache Archiva 1.0 < 1.3.1 - Cross-Site Request Forgery

ANATOLIA SECURITY ADVISORY

Abtp Portal Project 0.1.0 – Local File Inclusion

#!/usr/bin/perl

Joomla! Component JE Auto 1.0 – SQL Injection

JE Auto 1.0 SQL Injection Vulnerability

CMScout 2.09 – Cross-Site Request Forgery

Vulnerability ID: HTB22719

VMware Tools – Update OS Command Injection

VMware Tools update OS Command Injection

AJ Matrix DNA – SQL Injection

#!/usr/bin/perl

Joomla! Component JE Messenger 1.0 – Arbitrary File Upload

JE Messenger 1.0 Arbitrary File Upload Vulnerability

WWWThread 5.0.8 Pro – ‘showflat.pl’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/45303/info

net2ftp 0.98 (stable) – ‘/admin1.template.php’ Local/Remote File Inclusion

source: https://www.securityfocus.com/bid/45312/info

PHP State – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/45328/info

Joomla! Component Jeformcr – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/45329/info

Mozilla Firefox/Thunderbird/SeaMonkey – Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/45353/info

Winamp 5.6 – ‘MIDI Parser’ Arbitrary Code Execution

http://www.kryptoslogic.com/advisories/2010/kryptoslogic-winamp-midi.txt

WonderWare InBatch 9.0sp1 – Buffer Overflow

Source: http://aluigi.org/adv/inbatch_1-adv.txt

Microsoft Internet Explorer 8 – CSS Parser Denial of Service

color:red;

WordPress Plugin Processing Embed 0.5 – ‘pluginurl’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/45266/info

WordPress Plugin Safe Search – ‘v1’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/45267/info

Drupal Module Embedded Media Field/Media 6.x : Video Flotsam/Media: Audio Flotsam – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/45276/info

Allegro RomPager 4.07 – UPnP HTTP Request Remote Denial of Service

source: https://www.securityfocus.com/bid/45309/info

SOOP Portal Raven 1.0b – Arbitrary File Upload

# Exploit Title: SOOP Portal Raven 1.0b Remote Upload Shell Vulnerability

Linux Kernel 2.6.37 (RedHat / Ubuntu 10.04) – ‘Full-Nelson.c’ Local Privilege Escalation

p = p - 4;

GNU InetUtils 1.8-1 – FTP Client Heap Overflow

-----BEGIN PGP SIGNED MESSAGE-----

Aigaion 1.3.4 – ‘ID’ SQL Injection

source: https://www.securityfocus.com/bid/45232/info

GNU glibc – ‘regcomp()’ Stack Exhaustion Denial of Service

// source: https://www.securityfocus.com/bid/45233/info

RDM Embedded Lock Manager < 9.x - 'lm_tcp' Service Buffer Overflow

source: https://www.securityfocus.com/bid/45245/info

Zimplit CMS – ‘zimplit.php?File’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/45252/info

Zimplit CMS – ‘English_manual_version_2.php?client’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/45252/info

SolarWinds Orion Network Performance Monitor (NPM) 10.1 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/45257/info

WordPress Plugin Twitter Feed – ‘url’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/45294/info

Video Charge Studio 2.9.5.643 – ‘.vsc’ Local Buffer Overflow (SEH)

#!/usr/bin/python

Viscom VideoEdit Gold ActiveX 8.0 – Code Execution

WinZip 15.0 – WZFLDVW.OCX Text Property Denial of Service

# Exploit Title: Winzip WZFLDVW.OCX text property access violation

WinZip 15.0 – WZFLDVW.OCX IconIndex Property Denial of Service

# Exploit Title: Winzip WZFLDVW.OCX IconIndex property access violation

Alice 2.2 – Arbitrary Code Execution

-----BEGIN PGP SIGNED MESSAGE-----