Exploits

Integard Home and Pro 2 – Remote HTTP Buffer Overflow

class Metasploit3 < Msf::Exploit::Remote

1024 CMS 2.1.1 – Blind SQL Injection

# Exploit Title: 1024cms 2.1.1 Blind SQL Injection Vulnerability

ZenPhoto 1.3 – ‘/zp-core/full-image.php?a’ SQL Injection

source: https://www.securityfocus.com/bid/43021/info

ZenPhoto 1.3 – ‘/zp-core/admin.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/43021/info

Microsoft Windows – Local Procedure Call (LPC) Privilege Escalation

// source: https://www.securityfocus.com/bid/43860/info

DMXReady Members Area Manager – Persistent Cross-Site Scripting

Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]

Micronetsoft RV Dealer Website – SQL Injection

Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]

InterPhoto Gallery – Multiple Vulnerabilities

'''

HP OpenView Network Node Manager (OV NNM) – ‘webappmon.exe execvp_nc’ Remote Code Execution

'''

Micronetsoft Rental Property Management Website – SQL Injection

Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]

Joomla! Component Aardvertiser 2.1 – Blind SQL Injection

# Exploit Title: Joomla Component Aardvertiser 2.1 free Blind SQL Injection Vulnerability

WordPress Plugin Events Manager Extended – Persistent Cross-Site Scripting

# Author: Craw

Microsoft Internet Explorer 7/8 – CSS Handling Cross Domain Information Disclosure

source: https://www.securityfocus.com/bid/42993/info

Adobe Acrobat and Reader 9.3.4 – ‘acroform_PlugInMain’ Memory Corruption

source: https://www.securityfocus.com/bid/42998/info

BlueCMS 1.6 – ‘x-forwarded-for’ Header SQL Injection

source: https://www.securityfocus.com/bid/42999/info

Horde Application Framework 3.3.8 – ‘icon_browser.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/43001/info

HeffnerCMS 1.22 – ‘index.php’ Local File Inclusion

source: https://www.securityfocus.com/bid/43006/info

MySource Matrix – ‘char_map.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/43020/info

Santafox 2.0.2 – ‘search’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/43237/info

A-Blog 2.0 – ‘/sources/search.php’ SQL Injection

#!/usr/bin/python

Microsoft MPEG Layer-3 – Remote Command Execution

'''

Joomla! Component iJoomla! Magazine 3.0.1 – Remote File Inclusion

# Exploit Title: [iJoomla.Magazine.v.3.0.1 Remote File Inclusion ]

ifnuke – Multiple Vulnerabilities

'''

Joomla! Component Clantools 1.5 – Blind SQL Injection

# Exploit Title: Joomla Component Clantools version 1.5 Blind SQL Injection Vulnerability

Joomla! Component Clantools 1.2.3 – Multiple Blind SQL Injections

# Exploit Title: Joomla Component Clantools version 1.2.3 Multiple Blind SQL Injection Vulnerability

FCrackZip 1.0 – Local Buffer Overflow (PoC)

# Exploit Title: FCrackZip Local Buffer Overflow PoC

DMXready Polling Booth Manager – SQL Injection

Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]

Virtual DJ Trial 6.1.2 – Buffer Overflow Crash (SEH) (PoC)

#Virtual DJ Trail 6.1.2 SEH Buffer Overflow Crash POC

Softbiz Article Directory Script – ‘sbiz_id’ Blind SQL Injection

===========================================================

Joomla! Component Gantry 3.0.10 – Blind SQL Injection

#!/bin/bash

ChillyCMS 1.1.3 – Multiple Vulnerabilities

##########################www.BugReport.ir########################################

Microsoft Movie Maker – Remote Code Execution (MS10-016)

'''

SyndeoCMS 2.8.02 – Multiple Vulnerabilities (1)

'''

mBlogger 1.0.04 – ‘addcomment.php’ Persistent Cross-Site Scripting

#!/usr/bin/python

PHP Classifieds ADS – ‘sid’ Blind SQL Injection

[~] Title: PHP CLASSIFIEDS ADS

VideoLAN VLC Media Player < 1.1.4 - '.xspf smb://' URI Handling Remote Stack Overflow (PoC)

#!/usr/bin/python

PHP Classifieds 7.3 – Remote File Inclusion

==================================

Samba 3.3.12 (Linux x86) – ‘chain_reply’ Memory Corruption (Metasploit)

##

Trend Micro Internet Security Pro 2010 – ActiveX ‘extSetOwner()’ Remote Code Execution (2)

visinia 1.3 – Multiple Vulnerabilities

'''

FFDshow – Overflow (SEH) Exception Leading to Null Pointer on Read

FFDshow SEH Exception leading to NULL pointer on Read

Intel Video Codecs 5.0 – Remote Denial of Service

Intel Video Codecs 5 Remote Denial of Service

smbind 0.4.7 – SQL Injection

##############################################################################################

NuSOAP 0.9.5 – ‘nusoap.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/42959/info

Pligg CMS 1.0.4 – SQL Injection / Cross-Site Scripting

source: https://www.securityfocus.com/bid/42967/info

vbShout 5.2.2 – Local/Remote File Inclusion

#################################################

Apple QuickTime FlashPix NumberOfTiles – Remote Code Execution

'''

rainbowportal – Multiple Vulnerabilities

'''

Accton-based switches (3com / Dell / SMC / Foundry / EdgeCore) – Backdoor Password

On the 15th of august 2009, at the HAR2009 conference, the existence of a backdoor password in Accton-based switches ...

Shop a la Cart – Multiple Vulnerabilities

# Exploit Title: [Multiple vulnerabilities in SHOP A LA CART]