Exploits

AVG Internet Security 2011 – Safe Search for IE Denial of Service

Flash Player – ‘Flash6.ocx’ AllowScriptAccess Denial of Service (PoC)

phpMyAdmin – Client-Side Code Injection / Redirect Link Falsification

PhpMyAdmin Client Side 0Day Code Injection and Redirect Link Falsification

MODx REvolution CMS 2.0.4-pl2 – POST injection Cross-Site Scripting

MODx Revolution CMS Cross-Site Scripting (XSS) Proof Of Concept Script

Alguest 1.1 – ‘start’ SQL Injection

source: https://www.securityfocus.com/bid/45214/info

Freefloat FTP Server – Directory Traversal

source: https://www.securityfocus.com/bid/45218/info

WordPress Core 3.0.1 – ‘do_trackbacks()’ SQL Injection

Description: SQL injection vulnerability in do_trackbacks() function of WordPress allows remote attackers to execute ...

PHPKF Forum 1.80 – ‘profil_degistir.php’ Cross-Site Request Forgery

# Exploit Title : phpKF Forum profil_degistir.php CSRF Exploit.

Gatesoft Docusafe 4.1.0 – SQL Injection

# Author: R4dc0re

Ecommercemax Solutions Digital Goods Seller – SQL Injection

# Author: R4dc0re

HotWebScripts HotWeb Rentals – ‘resorts.asp’ SQL Injection

# Author: R4dc0re

Freefloat FTP Server – Remote Buffer Overflow

# Exploit Title: Freefloat FTP Server Buffer Overflow Vulnerability

SOOP Portal 2.0 – Arbitrary File Upload

#################################################################

Pulse CMS Basic – Local File Inclusion

'Pulse CMS Basic' Local File Inclusion Vulnerability (CVE-2010-4330)

UnrealIRCd 3.2.8.1 – Backdoor Command Execution (Metasploit)

##

MediaMonkey 3.2.4.1304 – ‘.mp3’ Buffer Overflow (PoC)

# Exploit Title: Mediamonkey 3.2.4.1304 (mp3) Buffer Overflow Vulnerability PoC

Free Audio Converter 7.1.5 – Denial of Service (PoC)

####

WaveMax Sound Editor 4.5.1 – Denial of Service (PoC)

####

Dejcom Market CMS – ‘showbrand.aspx’ SQL Injection

# Exploit Title: [Dejcom Market Cms SQL injection]

TFTPUtil GUI 1.4.5 – Denial of Service (Metasploit)

# Title: TFTPUtil GUI v1.4.5 Invalid Request DoS

Linksys Routers – Cross-Site Request Forgery

It seems to be fairly well known that there are multiple unpatched

Wireshark – LDSS Dissector Buffer Overflow

source: https://www.securityfocus.com/bid/44987/info

T-Dreams Cars Ads Package 2.0 – SQL Injection

# Author: R4dc0re

T-Dreams Job Seekers Package 3.0 – SQL Injection

# Author: R4dc0re

ASPSiteWare Recipe ORGanizer – SQL Injection

# Author: R4dc0re

ASPSiteWare Project Reporter – SQL Injection

# Author: R4dc0re

ASPSiteWare JobPost 1.0 – SQL Injection

# Author: R4dc0re

ASPSiteWare ASP Gallery 1.0 – SQL Injection

# Author: R4dc0re

ASPSiteWare Contact Directory 1.0 – SQL Injection

# Author: R4dc0re

Techno Dreams Articles & Papers Package 2.0 – ‘ArticlesTablelist.asp’ SQL Injection

source: https://www.securityfocus.com/bid/45201/info

Techno Dreams FAQ Manager Package 1.0 – ‘faqlist.asp’ SQL Injection

source: https://www.securityfocus.com/bid/45202/info

iOS iFTPStorage 1.3 – Directory Traversal

#############################################

Easy Travel Portal 2 – ‘travelbycountry.asp’ SQL Injection

TITLE: Easy Travel Portal "travelbycountry.asp" SQL Injection Vulnerability

D-Link Routers – Authentication Bypass (1)

# Exploit Title: Multiple D-Link Router Authentication Bypass Vulnerabilities

Viscom Image Viewer CP Gold 6 – ActiveX ‘TifMergeMultiFiles()’ Remote Buffer Overflow

ProFTPd-1.3.3c – Backdoor Command Execution (Metasploit)

##

Alguest 1.1 – Multiple Cookie Authentication Bypass Vulnerabilities

source: https://www.securityfocus.com/bid/45175/info

DotNetNuke 5.5.1 – ‘InstallWizard.aspx’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/45180/info

FreeTrim MP3 2.2.3 – Denial of Service

####Exploit Title: FreeTrim MP3 Local Crash PoC

Viscom Image Viewer CP Gold 5.5 – ‘Image2PDF()’ Remote Buffer Overflow (Metasploit)

# Image Viewer CP gold v5.5 Buffer Overflow

Contenido CMS 4.8.12 – Cross-Site Scripting

Vulnerability ID: HTB22635

etomite 1.1 – Multiple Vulnerabilities

Vulnerability ID: HTB22710

Ananda Real Estate 3.4 – ‘list.asp’ Multiple SQL Injections

TITLE: Ananda Real Estate "list.asp" Multiple SQL Injection Vulnerabilities

ProFTPd 1.3.3c – Compromised Source Backdoor Remote Code Execution

== ProFTPD Compromise Report ==

Mediacoder 0.7.5.4797 – ‘.m3u’ Local Buffer Overflow (SEH)

# Exploit Title: MediaCoder-0.7.5.4795.exe 0-days Buffer Overflow (SEH)

Microsoft Windows – (Authenticated) User Code Execution (Metasploit)

##

ProFTPd 1.3.2 rc3 < 1.3.3b (FreeBSD) - Telnet IAC Buffer Overflow (Metasploit)

##

Joomla! Component Annuaire – ‘index.php?id’ SQL Injection

source: https://www.securityfocus.com/bid/45147/info

Contenido CMS 4.8.12 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/45160/info

J-Integra 2.11 – Remote Code Execution