Exploits

mygamingladder MGL Combo System 7.5 – ‘game.php’ SQL Injection

----------------------------Information------------------------------------------------

Mozilla Firefox 3.6.8 < 3.6.11 - Interleaving 'document.write' / 'appendChild' Remote Overflow

Mozilla Firefox – Interleaving ‘document.write’ / ‘appendChild’ Denial of Service

Source: https://bugzilla.mozilla.org/show_bug.cgi?id=607222

Mozilla Firefox – Simplified Memory Corruption (PoC)

Hi there,

RoSPORA 1.5.0 – Remote PHP Code Injection

Linux Kernel 2.6.36 – VIDIOCSMICROCODE IOCTL Local Memory Overwrite

// source: https://www.securityfocus.com/bid/44242/info

TFTgallery 0.13.1 – Local File Inclusion

# TFTgallery

Platinum SDK Library – POST UPnP ‘sscanf’ Buffer Overflow (PoC)

-POC CODE Remote Buffer Overflow -

XBMC 9.04.1r20672 – ‘soap_action_name’ POST UPnP ‘sscanf’ Remote Buffer Overflow

#!/usr/bin/env python

Pub-Me CMS – Blind SQL Injection

_______ _____ ___

Feindura CMS Groupware – Multiple Local File Inclusion / Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/44501/info

TeamSpeak 2.0.32.60 – Memory Corruption

source: https://www.securityfocus.com/bid/44502/info

DBHcms 1.1.4 – ‘dbhcms_user/SearchString’ SQL Injection

Vulnerability ID: HTB22651

phpLiterAdmin 1.0 RC1 – Authentication Bypass

Vulnerability ID: HTB22653

DZCP (deV!L`z Clanportal) 1.5.4 – Local File Inclusion

Vulnerability ID: HTB22656

Novaboard 1.1.4 – Local File Inclusion

Vulnerability ID: HTB22657

MyBB 1.6 – Full Path Disclosure

Vulnerability ID: HTB22654

BloofoxCMS 0.3.5 – Information Disclosure

Vulnerability ID: HTB22660

Energine CMS – SQL Injection

Vulnerability ID: HTB22655

BloofoxCMS Registration Plugin – SQL Injection

Vulnerability ID: HTB22658

Zomplog 3.9 – Cross-Site Request Forgery

Vulnerability ID: HTB22645

NinkoBB 1.3RC5 – Cross-Site Scripting

Vulnerability ID: HTB22652

Zomplog 3.9 – Multiple Cross-Site Scripting / Cross-Site Request Forgery Vulnerabilities

Vulnerability ID: HTB22643

BlogBird Platform – Multiple Cross-Site Scripting Vulnerabilities

Vulnerability ID: HTB22647

MinaliC WebServer 1.0 – Directory Traversal

------------------------------------------------------------------------

MinaliC WebServer 1.0 – Denial of Service

# ------------------------------------------------------------------------

Alstrasoft e-Friends 4.96 – Multiple Vulnerabilities

AlstraSoft E-Friends 4.96 Multiple Remote Vulnerabilities

MinaliC WebServer 1.0 – Remote Source Disclosure / File Download

###################################################################

DATAC RealWin SCADA Server 1.06 – Remote Buffer Overflow

# Exploit Title: RealWin SCADA System SEH Overwrite

ACC IMoveis 4.0 – SQL Injection

# Exploit Title : iMoveis SQL Injection Vulnerability

mycart 2.0 – Multiple Vulnerabilities

MyCart 2.0 Multiple Remote Vulnerabilities

Joomla! Component Projects ‘com_projects’ – SQL Injection / Local File Inclusion

source: https://www.securityfocus.com/bid/44456/info

LES PACKS – ‘ID’ SQL Injection

source: https://www.securityfocus.com/bid/44457/info

W-Agora 4.1.5 – Local File Inclusion / Cross-Site Scripting

source: https://www.securityfocus.com/bid/44507/info

NitroSecurity ESM 8.4.0a – Remote Code Execution

-- Product description:

Apache 2.2 (Windows) – Local Denial of Service

#!c:\\perl\\bin\\

BigACE 2.7.3 – Cross-Site Request Forgery (Change Admin Password)

#!/usr/bin/python

NitroView ESM – ‘ess.pm’ Remote Command Execution

source: https://www.securityfocus.com/bid/44421/info

Jamb – Cross-Site Request Forgery (Add a Post)

#!/usr/bin/python

Winamp 5.5.8.2985 (in_mod plugin) – Local Stack Overflow

#!/usr/bin/python

Plesk Small Business Manager 10.2.0 and Site Editor – Multiple Vulnerabilities

XSS + SQL Injection in Plesk Small Business Manager 10.2 + Site Editor

Oracle VM Server Virtual Server Agent – Command Injection (Metasploit)

##

Microsoft Windows Vista – ‘lpksetup.exe oci.dll’ DLL Loading Arbitrary Code Execution

// source: https://www.securityfocus.com/bid/44414/info

Pulse Pro 1.4.3 – Persistent Cross-Site Scripting

# Exploit Title: Pulse Pro 1.4.3 Persistent XSS Vulnerability

DBHcms 1.1.4 – ‘dbhcms_pid’ SQL Injection

DBHcms 1.1.4 SQL Injection Vulnerability

RarmaRadio 2.53.1 – ‘.m3u’ Denial of Service

#Title: RarmaRadio (.m3u) Denial of service vulnerability

AnyDVD 6.7.1.0 – Denial of Service

#!/usr/bin/perl

HP Data Protector Media Operations 6.11 – HTTP Server Remote Integer Overflow Denial of Service

# Exploit Title: HP Data Protector Media Operations 6.11 HTTP Server Remote Integer Overflow DoS

Spider Player 2.4.5 – Denial of Service

#Exploit Title : Spider Player Denial of Service Vulnerability

GNU C Library 2.x (libc6) – Dynamic Linker LD_AUDIT Arbitrary DSO Load Privilege Escalation

Source: http://marc.info/?l=full-disclosure&m=128776663124692&w=2