Exploits

MybbCentral TagCloud 2.0 – ‘Topic’ HTML Injection

source: https://www.securityfocus.com/bid/42406/info

Joomla! Component Amblog 1.0 – Multiple SQL Injections

Amblog 1.0 Joomla Component Multiple SQL Injection Vulnerabilities

Mthree Development MP3 to WAV Decoder – Denial of Service

# Exploit Title: Mthree Development MP3 to WAV Decoder (.mp3) DoS

Joomla! Component Teams – Multiple Blind SQL Injections

Teams 1_1028_100809_1711 Joomla Component Multiple Blind SQL Injection Vulnerabilities

AoA Audio Extractor – Remote ActiveX SEH JIT Spray (ASLR + DEP Bypass)

Tested on my XPSP3+IE7+/nx=AlwaysOn, should work on Windows 7 with

SopCast 3.2.9 – Remote Command Execution

Sopcast POC by Sud0

Rosoft Media Player 4.4.4 – Buffer Overflow (SEH) (PoC)

#rosoft media player 4.4.4 SEH buffer overflow POC

Play! Framework 1.0.3.1 – Directory Traversal

Exploit Title: Play! Framework

Easy FTP 1.7.0.11 – ‘NLST’ / ‘NLST -al’ / ‘APPE’ / ‘RETR’ / ‘SIZE’ / ‘XCWD’ Remote Buffer Overflow

# Exploit Title: Easy FTP Server v1.7.0.11 NLST , NLST -al, APPE, RETR , SIZE and XCWD Commands Remote Buffer Overfl...

RSP MP3 Player – OCX ActiveX Buffer Overflow HeapSpray

. . . \ /

Zendesk – Multiple Vulnerabilities

/¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯\

Microsoft – SMB Server Trans2 Zero Size Pool Alloc (MS10-054)

#!/usr/bin/env python

Microsoft Windows – CreateWindow Function Callback (MS10-048)

-----BEGIN PGP SIGNED MESSAGE-----

Microsoft Msxml2.XMLHTTP.3.0 – Response Handling Memory Corruption (MS10-051)

# Sources:

Microsoft Windows – Tracing Registry Key ACL Privilege Escalation

source: https://www.securityfocus.com/bid/42269/info

Microsoft Windows – ‘SfnLOGONNOTIFY’ Privilege Escalation (MS10-048)

source: https://www.securityfocus.com/bid/39630/info

SyntaxCMS – ‘rows_per_page’ SQL Injection

source: https://www.securityfocus.com/bid/42436/info

Mystic 0.1.4 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/42445/info

Onyx – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/42446/info

Nasim Guest Book – ‘page’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/42503/info

QQ Computer Manager – ‘TSKsp.sys’ Local Denial of Service

#!/usr/bin/python

kleeja 1.0.0RC6 – Database Disclosure

====================================================

dBpowerAMP Audio Player 2 – ‘FileExists’ ActiveX Buffer Overflow

Visual MP3 Splitter & Joiner 6.1 – Denial of Service

# Exploit Title: Visual MP3 Splitter & Joiner 6.1 (.mp3 , .wav) DoS

PHP-Nuke 8.x – Blind SQL Injection

#Title: Php Nuke Blind Sql Injection 8.x.x

Fat Player 0.6b – ‘.WAV’ File Processing Buffer Overflow (SEH)

#################################################################################################

Joomla! Component com_yellowpages – SQL Injection

===============================================================

AoAAudioExtractor 2.0.0.0 – ActiveX (PoC) (SEH)

hadji samir

Linux Kernel 2.6.33.3 – SCTP INIT Remote Denial of Service

# From: http://jon.oberheide.org/files/sctp-boom.py

wizmall 6.4 – Cross-Site Request Forgery

# Exploit Title: wizmall 6.4 CSRF Vulnerabilities

Quintessential Media Player 5.0.121 – ‘.m3u’ Buffer Overflow

source: https://www.securityfocus.com/bid/42307/info

Allinta CMS 22.07.2010 – Multiple SQL Injections / Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/42320/info

Preation Eden Platform 27.7.2010 – Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/42321/info

PHPKick 0.8 – ‘Statistics.php’ SQL Injection

# Exploit Title: PHPKick v0.8 statistics.php SQL Injection

Advanced File Vault – ‘eSellerateControl350.dll’ ActiveX HeapSpray

//# Exploit Title: Advanced File Vault(eSellerateControl350.dll) Activex Heap Spray 0-day

myMP3-Player 3.0 – Local Buffer Overflow

# Exploit Title: myMP3-Player 3.0 (NOT SEH Overwrite)

ffdshow Video Codec – Denial of Service

#!/usr/bin/perl

Joomla! Component NeoRecruit 1.4 – SQL Injection

) ) ) ( ( ( ( ( ) )

Tycoon CMS Record Script 1.0.9 – SQL Injection

% Tycoon(CMS) Record Script Sql vulnerability

LibTIFF – ‘td_stripbytecount’ Null Pointer Dereference Remote Denial of Service

From: https://www.securityfocus.com/bid/41480/

Mini-stream Ripper 3.1.2.1 – Local Buffer Overflow (DEP Bypass)

DISCLAIMER

Subversion – Date Svnserve (Metasploit)

##

RealServer – Describe Buffer Overflow (Metasploit)

##

Sun Java Web Server – System WebDAV OPTIONS Buffer Overflow (Metasploit)

##

OpenSSL – ‘ssl3_get_key_exchange()’ Use-After-Free Memory Corruption

source: https://www.securityfocus.com/bid/42306/info

Nagios XI – Multiple Cross-Site Request Forgery Vulnerabilities

source: https://www.securityfocus.com/bid/42322/info

Microsoft Windows – ‘win32k.sys’ Driver ‘CreateDIBPalette()’ Local Buffer Overflow

// source: http://www.ragestorm.net/blogs/?p=255

Joomla! Component com_cgtestimonial 2.2 – Multiple Vulnerabilities

cgTestimonial 2.2 Joomla Component Multiple Remote Vulnerabilities

EFS Easy Chat Server – Authentication Request Handling Buffer Overflow (Metasploit)

##

Prado Portal 1.2 – ‘page’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/42276/info