Exploits

HP Data Protector Manager A.06.11 MMD – Null Pointer Dereference Denial of Service

#!/usr/bin/perl

Alibaba Clone B2B 3.4 – SQL Injection

Exploit Title:Alibaba v3.4 clone b2b(countrydetails.php) SQL Injection Vulnerability

OsCSS 1.2 – Arbitrary File Upload

# Exploit Title: OsCSS Remote File Upload Exploit

BugTracker.NET 3.4.4 – Multiple Vulnerabilities

Core Security Technologies - CoreLabs Advisory

Digitalus 1.10.0 Alpha2 – Arbitrary File Upload

########################################################

J-Integra 2.11 – ActiveX SetIdentity() Buffer Overflow

LittlePhpGallery 1.0.2 – Local File Inclusion

# Exploit Title: local file include / File Disclosure

EnjoySAP SAP GUI – ActiveX Control Arbitrary File Download (Metasploit)

##

Provj 5.1.5.5 – ‘.m3u’ Buffer Overflow (PoC)

# Exploit Title: Provj 5.1.5.5 (m3u) Buffer Overflow Vulnerability PoC

Orbis CMS 1.0.2 – Arbitrary File Upload

'Orbis CMS' Arbitrary Script Execution Vulnerability (CVE-2010-4313)

Link Protect 1.2 – Persistent Cross-Site Scripting

# Exploit Title: Link Protect 1.2 XSS Vulnerabilities

Duhok Forum 1.1 – Arbitrary File Upload

==============================================

Pandora FMS 3.1 – Authentication Bypass

[+] Introduction

Pandora Fms 3.1 – OS Command Injection

[+] Introduction

Pandora Fms 3.1 – SQL Injection

[+] Introduction

Pandora Fms 3.1 – Blind SQL Injection

[+] Introduction

Pandora Fms 3.1 – Directory Traversal / Local File Inclusion

[+] Introduction

Eclime 1.1.2b – Multiple Vulnerabilities

Vulnerability ID: HTB22705

enano CMS 1.1.7pl1 – Multiple Vulnerabilities

Vulnerability ID: HTB22709

DynPG 4.2.0 – Multiple Vulnerabilities

Vulnerability ID: HTB22703

Elxis CMS 2009.2 – SQL Injection

Vulnerability ID: HTB22700

WU-FTPD – Site EXEC/INDEX Format String (Metasploit)

##

DATAC RealWin SCADA Server 2.0 (Build 6.1.8.10) – SCPC_INITIALIZE Buffer Overflow (Metasploit)

##

DATAC RealWin SCADA Server 2.0 (Build 6.1.8.10) – SCPC_INITIALIZE_RF Buffer Overflow (Metasploit)

##

SAP Business One License Manager 2005 – Remote Buffer Overflow (Metasploit)

##

POP Peeper 3.4 – UIDL Buffer Overflow (Metasploit)

##

Joomla! Component Catalogue – SQL Injection / Local File Inclusion

source: https://www.securityfocus.com/bid/45090/info

Joomla! Component com_storedirectory – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/45094/info

BugTracker.NET 3.4.4 – SQL Injection / Cross-Site Scripting

source: https://www.securityfocus.com/bid/45121/info

AWStats 6.x – Apache Tomcat Configuration File Arbitrary Command Execution

source: https://www.securityfocus.com/bid/45123/info

MicroNetSoft RV Dealer Website – ‘search.asp’ / showAlllistings.asp’ SQL Injection

TITLE: MicroNetSoft RV Dealer Website Two SQL Injection Vulnerabilities

Mediacoder 0.7.5.4792 – Local Buffer Overflow (SEH)

# Exploit Title: Mediacoder 0.7.5.4792 SEH Buffer Overflow Exploit

HP LaserJet – Directory Traversal in PJL Interface

n.runs AG

FoxPlayer 2.4.0 – Denial of Service

# Exploit Title: FoxPlayer 2.4.0 (.m3u) Denial of Service

Diferior 8.03 – Multiple Cross-Site Scripting Vulnerabilities

Vulnerability ID: HTB22721

4homepages 4Images 1.7.x – ‘categories.php’ SQL Injection

source: https://www.securityfocus.com/bid/45079/info

Wernhart Guestbook 2001.03.28 – Multiple SQL Injections

source: https://www.securityfocus.com/bid/45084/info

Car Portal 2.0 – ‘car_make’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/45092/info

CA Internet Security Suite 2010 – ‘KmxSbx.sys’ Kernel Pool Overflow

# Exploit Title: CA Internet Security Suite 2010 KmxSbx.sys Kernel Pool

Skeletonz CMS – Persistent Cross-Site Scripting

# Exploit Title: Xss on skeletonz-simple dynamic cms in the section comments

OtsTurntables 1.00.048 – ‘.m3u’/’.ofl’ Local Buffer Overflow (SEH)

# Exploit Title: OTSTurntables 1.00.028 (m3u/ofl) Local BOF Exploit (SEH)

Site2Nite Big Truck Broker – ‘txtSiteId’ SQL Injection

Hanso Player 1.4.0 – ‘.m3u’ Denial of Service

===================================================

Jurpopage 0.2.0 – SQL Injection

=========================================================

Linux Kernel 2.6.37 – Unix Sockets Local Denial of Service

Simple kernel attack using socketpair. easy, 100% reproductiblle, works

MemHT Portal 4.0.1 – ‘User Agent’ Persistent Cross-Site Scripting

#!/usr/bin/perl

Linux Kernel 2.6.37 – ‘setup_arg_pages()’ Denial of Service

// source: https://www.securityfocus.com/bid/44301/info

SystemTap – Local Privilege Escalation

CVE-2010-4170

Easy Banner 2009.05.18 – ‘/member.php’ Multiple SQL Injection / Authentication Bypass

source: https://www.securityfocus.com/bid/45066/info

Easy Banner 2009.05.18 – ‘index.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/45066/info