Exploits

E-lokaler CMS 2 – Admin Login Multiple SQL Injections

source: https://www.securityfocus.com/bid/45098/info

SmartBox – ‘page_id’ SQL Injection

source: https://www.securityfocus.com/bid/45101/info

Joomla! Component JE Ajax Event Calendar – SQL Injection

# Vendor:

JDownloader Webinterface – Source Code Disclosure

# Exploit Title: JDownloader Webinterface Source Code Disclosure

SiteEngine 7.1 – SQL Injection

#################################################################################

NCH Officeintercom 5.20 – Remote Denial of Service

#!/usr/bin/python

Wolf CMS 0.6.0b – Multiple Vulnerabilities

Vulnerability ID: HTB22681

Frog CMS 0.9.5 – Multiple Vulnerabilities

Vulnerability ID: HTB22685

VMware 2 Web Server – Directory Traversal

# Exploit Title:VMware 2 Web Server Directory Traversal

Getsimple CMS 2.01 < 2.02 - Administrative Credentials Disclosure

Researcher: Michael Brooks

phpvidz 0.9.5 – Administrative Credentials Disclosure

Researcher: Michael Brooks

WSN Links – SQL Injection

'WSN Links' SQL Injection Vulnerability (CVE-2010-4006)

Free Simple Software – SQL Injection

'Free Simple Software' SQL Injection Vulnerability (CVE-2010-4298)

Microsoft Windows Vista/7 – Local Privilege Escalation (UAC Bypass)

A Design Flaw in Windows Kernel API can Lead to privilege escalation.

Wireshark – LWRES Dissector getaddrsbyname_request Buffer Overflow (Loop) (Metasploit)

##

FreeNAS – ‘exec_raw.php’ Arbitrary Command Execution (Metasploit)

##

Motorola Timbuktu Pro – Directory Traversal / Arbitrary File Upload (Metasploit)

##

Oracle 8i – TNS Listener ‘ARGUMENTS’ Remote Buffer Overflow (Metasploit)

##

Oracle 8i – TNS Listener SERVICE_NAME Buffer Overflow (Metasploit)

##

Oracle 10gR2 – TNS Listener AUTH_SESSKEY Buffer Overflow (Metasploit)

##

Novell NetIdentity Agent – XTIERRPCPIPE Named Pipe Buffer Overflow (Metasploit)

##

DATAC RealWin SCADA Server 2.0 (Build 6.1.8.10) – SCPC_TXTEVENT Buffer Overflow (Metasploit)

##

Realtek Media Player Playlist – Remote Buffer Overflow (Metasploit)

##

Microsoft Visual Studio – Msmask32.ocx ActiveX Buffer Overflow (MS08-070) (Metasploit)

##

Symantec AppStream LaunchObj – ActiveX Control Arbitrary File Download and Execute (Metasploit)

##

Zenturi ProgramChecker – ActiveX Control Arbitrary File Download (Metasploit)

##

America Online ICQ – ActiveX Control Arbitrary File Download and Execute (Metasploit)

##

Symantec Altiris Deployment Solution – ActiveX Control Arbitrary File Download and Execute (Metasploit)

##

Cain & Abel 4.9.24 – RDP Buffer Overflow (Metasploit)

##

Zinf Audio Player 2.2.1 – ‘.pls’ Local Stack Buffer Overflow (Metasploit)

##

Hewlett-Packard (HP) Power Manager Administration – Remote Buffer Overflow (Metasploit)

##

ColdFusion 8.0.1 – Arbitrary File Upload / Execution (Metasploit)

##

Adobe RoboHelp Server 8 – Arbitrary File Upload / Execution (Metasploit)

##

BASE – ‘base_qry_common’ Remote File Inclusion (Metasploit)

##

Mambo – Cache_Lite Class MosConfig_absolute_path Remote File Inclusion (Metasploit)

##

Linux Kernel 2.6.x – ‘inotify_init()’ Memory Leak Local Denial of Service

source: https://www.securityfocus.com/bid/45036/info

D-Link DIR-300 – WiFi Key Security Bypass

source: https://www.securityfocus.com/bid/45038/info

SimpLISTic SQL 2.0 – ’email.cgi’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/45040/info

Xion Audio Player 1.0.126 – ‘.m3u8’ Buffer Overflow

===================================================

Xion Audio Player 1.0.127 – ‘.m3u’ Local Buffer Overflow

# Exploit Title: Xion Audio Player 1.0.127 (m3u) Buffer Overflow Vulnerability

Netcraft Toolbar 1.8.1 – Remote Code Execution

ImageShack Toolbar 4.8.3.75 – Remote Code Execution

Sploit #1

PHPmotion 1.62 – ‘FCKeditor’ Arbitrary File Upload

-----------------------------------------------------------------------

PoPToP – Negative Read Overflow (Metasploit)

##

ZYXEL P-660R-T1 V2 – ‘HomeCurrent_Date’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/45027/info

AuraCMS 1.62 – ‘pfd.php’ SQL Injection

-----------------------------------------------------------------------

jSchool Advanced – Blind SQL Injection

-----------------------------------------------------------------------

JCMS 2010 – File Download

#####################################################################################################

Acidcat CMS 3.3 – ‘FCKeditor’ Arbitrary File Upload

==============================================================================

Novell ZENworks Configuration Management 10.2.0 – Remote Execution (Metasploit)

##