Exploits

Dataface 1.0 – ‘admin.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/42282/info

MediaMonkey 3.2.1.1297 – Denial of Service (PoC)

#Mediamonkey v. 3.2.1.1297 DOS POC

Nuked-klaN Module Partenaires NK 1.5 – Blind SQL Injection

####################################################################

sX-Shop – ‘view_image.php’ SQL Injection

#############################################################################################################

sX-Shop – Multiple SQL Injections

########################################################################################

APBoard 2.1.0 – ‘board.php?id’ SQL Injection

#############################################################################################################

ccTiddly 1.7.6 – Multiple Remote File Inclusions

1 ######################################## 1

Open Blog 1.2.1 – Cross-Site Request Forgery

Vulnerability ID: HTB22496

BXR 0.6.8 – Cross-Site Request Forgery

Vulnerability ID: HTB22503

Amethyst 0.1.5 – Cross-Site Scripting

Vulnerability ID: HTB22502

DiamondList 0.1.6 – Cross-Site Request Forgery

Vulnerability ID: HTB22517

PHPFinance 0.6 – ‘/group.php’ SQL Injection / HTML Injection

source: https://www.securityfocus.com/bid/42230/info

DT Centrepiece 4.5 – Cross-Site Scripting / Security Bypass

source: https://www.securityfocus.com/bid/42243/info

Hulihan Applications BXR 0.6.8 – SQL Injection / HTML Injection

source: https://www.securityfocus.com/bid/42247/info

DiamondList – ‘/user/main/update_settings?setting[site_title]’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/42252/info

DiamondList – ‘/user/main/update_category?category[description]’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/42252/info

Hulihan Applications Amethyst 0.1.5 – Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/42253/info

Muraus Open Blog – Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/42255/info

uzbl ‘uzbl-core’ – ‘@SELECTED_URI’ Mouse Button Bindings Command Injection

source: https://www.securityfocus.com/bid/42297/info

Easy RM to MP3 2.7.3.700 – ‘.m3u’ / ‘.pls’ / ‘.smi’ / ‘.wpl’ / ‘.wax’ / ‘.wvx’ / ‘.ram’ Local Overflow

# Exploit Title: Easy RM to MP3 2.7.3.700 Local Buffer Overflow (.m3u , .pls , .smi , .wpl , .wax , .wvx , .ram)

FathFTP 1.8 – ‘DeleteFile Method’ ActiveX Buffer Overflow (SEH)

FathFTP 1.8 – ‘EnumFiles Method’ ActiveX Buffer Overflow (SEH)

FathFTP 1.8 – ‘FileExists Method’ ActiveX Buffer Overflow (SEH)

K-Meleon 1.x – URI Handling Multiple Denial of Service Vulnerabilities

source: https://www.securityfocus.com/bid/42200/info

Avast! Internet Security 5.0 – ‘aswFW.sys’ Kernel Driver IOCTL Memory Pool Corruption

+-------------------------------------------------------------------------------------+

68KB 1.0.0rc4 – Remote File Inclusion

====================================================

EMC Celerra NAS Appliance – Unauthorized Access to Root NFS Export

Trustwave's SpiderLabs Security Advisory TWSL2010-003:

Oracle MySQL – ‘ALTER DATABASE’ Remote Denial of Service

A vulnerability was reported in MySQL. A remote authenticated user can cause denial of service conditions.

Apple iOS – ‘.pdf’ Local Privilege Escalation ‘Jailbreak’

The files contained in the archive link below are those that make use of a pdf exploit in order to jailbreak devices ...

FathFTP 1.8 – ‘RasIsConnected Method’ ActiveX Buffer Overflow (SEH)

WordPress Plugin NextGEN Smooth Gallery 0.12 – Blind SQL Injection

#############################################################################################################

Progitek Visionner Photos 2.0 – File Format Denial of Service

================================================

HP OpenView Network Node Manager (OV NNM) 7.53 – ‘OvJavaLocale’ Buffer Overflow

HP OPENVIEW NNM OVJAVALOCALE BUFFER OVERFLOW VULNERABILITY

JBoss – Java Class DeploymentFileRepository WAR Deployment (Metasploit)

##

EasyFTP Server 1.7.0.11 – ‘LIST’ Stack Buffer Overflow (Metasploit)

##

Joomla! Component com_jigsaw – ‘Controller’ Directory Traversal

source: https://www.securityfocus.com/bid/42144/info

D-Link WBR-2310 1.0.4 – ‘GET’ Remote Buffer Overflow (PoC)

source: https://www.securityfocus.com/bid/42153/info

PMSoftware Simple Web Server 2.1 – ‘From:’ Header Processing Remote Denial of Service

source: https://www.securityfocus.com/bid/42155/info

Oracle MySQL < 5.1.50 - Privilege Escalation

source: https://www.securityfocus.com/bid/43677/info

SnoGrafx – ‘cat.php?cat’ SQL Injection

########################################################################################

Jaangle 0.98e.971 – Denial of Service

#!/usr/bin/perl

WM Downloader 3.1.2.2 – Local Buffer Overflow (1)

#!/usr/bin/perl

APT-WEBSHOP-SYSTEM – ‘modules.php’ SQL Injection

===============================================

Joomla! Component CamelcityDB 2.2 – SQL Injection

==============================================================

MyIT CRM – Multiple Cross-Site Scripting Vulnerabilities

Advisory Name: Multiple Cross-Site Scripting (XSS) in MyIT CRM

Mini-stream RM-MP3 Converter/WMDownloader/ASX to MP3 Converter – Local Stack Buffer Overflow

####################################################################################

MyIT CRM – ‘index.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/42140/info

Intellinet IP Camera MNC-L10 – Authentication Bypass

by Magnefikko

Xerver 4.32 – Source Disclosure / HTTP Authentication Bypass (Metasploit)

# Exploit Title: Xerver Source Disclosure and HTTP Auth Bypass

Concept E-Commerce – SQL Injection

#######################################