Exploits

Hot Links SQL 3.2 – ‘report.cgi’ SQL Injection

source: https://www.securityfocus.com/bid/45000/info

Apple iOS 4.0.2 – Networking Packet Filter Rules Privilege Escalation

// source: https://www.securityfocus.com/bid/45010/info

Apache Tomcat 7.0.4 – ‘sort’ / ‘orderBy’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/45015/info

sahitya graphics CMS – Multiple Vulnerabilities

Exploit Title:Sahitya Graphics CMS Multiple Remote Vulnerabilities

cPanel 11.x – Cross-Site Request Forgery (Edit E-mail)

# Exploit Title: Cpanel 11.X Edit E-mail Cross Site Request Forgery exploit

Native Instruments Traktor Pro 1.2.6 – Stack Buffer Overflow (PoC)

#!/usr/local/bin/perl

Native Instruments Reaktor 5 Player 5.5.1 – Heap Memory Corruption

Native Instruments Reaktor 5 Player v5.5.1 Heap Memory Corruption Vulnerability

Native Instruments Kontakt 4 Player – ‘.NKI’ File Syntactic Analysis Buffer Overflow (PoC)

Title: Native Instruments Kontakt 4 Player NKI File Syntactic Analysis Buffer Overflow PoC

Native Instruments Massive 1.1.4 – KSD File Handling Use-After-Free

#!/usr/bin/perl

Native Instruments Service Center 2.2.5 – Local Privilege Escalation

Native Instruments Service Center 2.2.5 Local Privilege Escalation Vulnerability

Joomla! Component Jimtawl 1.0.2 – Local File Inclusion

-----------------------------------------------------------------------

S_CMS 2.5 – Multiple Vulnerabilities

# ============================================================

Microsoft Windows – Task Scheduler Privilege Escalation

# Exploit Title: Windows Task Scheduler Privilege Escalation 0day

vBulletin 4.0.8 PL1 – Cross-Site Scripting Filter Bypass within Profile Customization

# Exploit Title: vBulletin 4.0.8 PL1 - XSS Filter Bypass within Profile

ViArt Shop 4.0.5 – Multiple Vulnerabilities

# Title: [ViArt SHOP multiple vulnerabilities]

PHPGallery 1.1.0 – Cross-Site Request Forgery

-------------------------------------------------------------------------

Arabian YouTube Script – Blind SQL Injection

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-{In The Name Of Allah The Mercifull}-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

MiniShare 1.5.5 – ‘users.txt’ Local Buffer Overflow (Egghunter)

# Exploit Title: Minishare 1.5.5 Buffer Overflow Vulnerability (users.txt) - EggHunter Version

Plogger Gallery 1.0 – Cross-Site Request Forgery (Change Admin Password)

-------------------------------------------------------------------------

DVD Rental Software – SQL Injection

# Exploit Title: DVD Rental Software SQL injection Vulnerability

Native Instruments (Multiple Products) – DLL Loading Arbitrary Code Execution

// source: https://www.securityfocus.com/bid/44989/info

DIZzy 1.12 – Local Stack Overflow

#!/usr/bin/ruby

WebRCSdiff 0.9 – ‘viewver.php’ Remote File Inclusion

========================================================

chCounter 3.1.3 – SQL Injection

#!/usr/bin/python

MP3-Nator – Local Buffer Overflow (SEH) (DEP Bypass)

# Exploit Title: Exploit Buffer Overflow MP3-Nator (SEH - DEP BYPASS)

Joomla! Component com_mtree 2.1.6 – Overwrite Cross-Site Request Forgery

Fozzcom Shopping < 7.94 / < 8.04 - Multiple Vulnerabilities

Exploit Title:FozzCom shopping____ / *

CompactCMS 1.4.1 – Multiple Cross-Site Scripting Vulnerabilities (1)

source: https://www.securityfocus.com/bid/44949/info

WebKit – Insufficient Entropy Random Number Generator (1)

source: https://www.securityfocus.com/bid/44952/info

WebKit – Insufficient Entropy Random Number Generator (2)

source: https://www.securityfocus.com/bid/44952/info

Trend Micro Internet Security 2010 – ‘UfPBCtrl.DLL’ ActiveX Remote Command Execution

####################################################################

Sitefinity CMS – ‘ASP.NET’ Arbitrary File Upload

=============================================================

Front Accounting 2.3RC2 – Multiple Persistent Cross-Site Scripting Vulnerabilities

Advisory Name: Multiple Persistent Cross-Site Scripting (XSS) in Front Accounting

Front Accounting 2.3RC2 – Multiple SQL Injections

Advisory Name: Multiple SQL Injections in Front Accounting

SAP NetWeaver 7.0 – SQL Monitor Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/44904/info

vBulletin 4.0.8 – Persistent Cross-Site Scripting via Profile Customization

Title: vBulletin 4.0.8 - Persistent XSS via Profile Customization

BPAffiliate Affiliate Tracking – Authentication Bypass

) ) ) ( ( ( ( ( ) )

BPDirectory Business Directory – Authentication Bypass

) ) ) ( ( ( ( ( ) )

BPConferenceReporting Web Reporting – Authentication Bypass

) ) ) ( ( ( ( ( ) )

BPRealestate Real Estate – Authentication Bypass

) ) ) ( ( ( ( ( ) )

Joomla! Component com_maianmedia – SQL Injection

) ) ) ( ( ( ( ( ) )

openEngine 2.0 100226 – Local File Inclusion / Cross-Site Scripting

##############################################################################

Apple Safari 5.02 – Stack Overflow Denial of Service

# Exploit Title: Safari 5.02 stack overflow [dos]

IceBB 1.0-rc10 – Multiple Vulnerabilities

Vulnerability ID: HTB22688

ClanSphere 2010.0 Final – Multiple Vulnerabilities

Vulnerability ID: HTB22694

CompactCMS 1.4.1 – SQL Injection

Vulnerability ID: HTB22697

Simea CMS – ‘index.php’ SQL Injection

source: https://www.securityfocus.com/bid/44878/info

Raised Eyebrow CMS – ‘venue.php’ SQL Injection

source: https://www.securityfocus.com/bid/44880/info

DServe – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/44881/info

Eclipse 3.6.1 – Help Server ‘help/index.jsp’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/44883/info