Exploits

SigPlus Pro 3.74 – ActiveX ‘LCDWriteString()’ Remote Buffer Overflow JIT Spray (ASLR + DEP Bypass)

~ mr_me presents ~

Xmyplay 3.5.1 – Denial of Service

#!/usr/bin/perl

Xion Audio Player 1.0.125 – Denial of Service

#!/usr/bin/perl

Joomla! Component com_spielothek 1.6.9 – Multiple Blind SQL Injections

Spielothek 1.6.9 Joomla Component Multiple Blind SQL Injection

Barcodewiz Barcode ActiveX Control 3.29 – Remote HeapSpray (Internet Explorer 6/7)

Barcodewiz BarCode ActiveX 3.29 – Denial of Service (PoC)

# BarCodeWiz Barcode ActiveX Control 3.29 PoC (SEH)

Barcodewiz Barcode ActiveX Control 3.29 – Remote Buffer Overflow (SEH)

# BarCodeWiz Barcode ActiveX Control 3.29 BoF (SEH)

ChordPulse 1.4 – Denial of Service

# Vendor: http://www.chordpulse.com/

Sourcefabric Campsite – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/42107/info

Joomla! Component com_pbbooking 1.0.4_3 – Multiple Blind SQL Injections

PBBooking 1.0.4_3 Joomla Component Multiple Blind SQL Injection

Whizzy CMS 10.02 – Local File Inclusion

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Joomla! Component com_SimpleShop – SQL Injection

==============================================================

Joomla! Component com_beamospetition – SQL Injection

# Exploit Title : Joomla "com_beamospetition" Sql Injection Vulnerability

HTML Email Creator 2.42 build 718 – Local Buffer Overflow (SEH)

########################################################################################

Apache Tomcat < 6.0.18 - 'utf8' Directory Traversal

c0d3r: mywisdom

nuBuilder – Remote File Inclusion

Software: nuBuilder 10.04.x and lower(maybe)?

Zemana AntiLogger ‘AntiLog32.sys’ 1.5.2.755 – Local Privilege Escalation

Zemana AntiLogger AntiLog32.sys OptionalHeader.DataDirectory[IMAGE_DIRECTORY_ENTRY_SECURITY].VirtualAddress ;

Symantec Ams Intel Alert Handler Service – Design Flaw

// Remote command execution at System level without authentication

AV Arcade 3 – Cookie Authentication Bypass

:----------------------------------------------------------------------------:

Joomla! Component com_photomapgallery 1.6.0 – Multiple Blind SQL Injections

PhotoMap Gallery 1.6.0 Joomla Component Multiple Blind SQL Injection

UPlusFTP Server 1.7.1.01 – (Authenticated) HTTP Remote Buffer Overflow

#!/usr/bin/python

WM Downloader 3.1.2.2 2010.04.15 – Local Buffer Overflow (SEH)

#!/usr/bin/python

SPIP 2.1 – ‘var_login’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/42060/info

Jira 4.0.1 – Cross-Site Scripting / Information Disclosure

source: https://www.securityfocus.com/bid/42025/info

Cetera eCommerce – Multiple SQL Injections

source: https://www.securityfocus.com/bid/42058/info

KVIrc 4.0 – ‘\r’ Carriage Return in DCC Handshake Remote Command Execution

source: https://www.securityfocus.com/bid/42026/info

Cetera eCommerce – Multiple Cross-Site Scripting / HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/42059/info

Joomla! Component TTVideo 1.0 – SQL Injection

TTVideo 1.0 Joomla Component SQL Injection Vulnerability

QQPlayer 2.3.696.400p1 – ‘.smi’ File Buffer Overflow

#!/usr/bin/env python

PunBB 1.3.4 / Pun_PM 1.2.6 – Blind SQL Injection

#!/usr/bin/perl

Microsoft Internet Explorer 6/7 – Remote Denial of Service

# Exploit Title: IE6 / 7 Remote Dos vulnerability

nuBuilder 10.04.20 – Local File Inclusion

------------------------------------------------------------------------

Joomla! Component com_appointinator 1.0.1 – Multiple Vulnerabilities

Appointinator 1.0.1 Joomla Component Multiple Remote Vulnerabilities

Opera 9 – Configuration Overwrite (Metasploit)

##

Hyleos ChemView – ActiveX Control Stack Buffer Overflow (Metasploit)

##

EasyFTP Server 1.7.0.11 – ‘MKD’ Stack Buffer Overflow (Metasploit)

##

Social Media – ‘index.php’ Local File Inclusion

source: https://www.securityfocus.com/bid/42009/info

Impact Software AdPeeps – Cross-Site Scripting / HTML Injection

source: https://www.securityfocus.com/bid/42071/info

Freeway CMS 1.4.3.210 – SQL Injection

-----------------------------------------------------------------------------------------

Joomla! Component Visites 1.1 RC2 – Remote File Inclusion

==========================================================

Media Player Classic – Heap Overflow / Denial of Service

Tested on:

CommuniCrypt Mail 1.16 – SMTP ActiveX Stack Buffer Overflow (Metasploit)

##

httpdx – ‘h_handlepeer()’ Remote Buffer Overflow (Metasploit)

##

Joomla! Component FreiChat 1.0/2.x – HTML Injection

source: https://www.securityfocus.com/bid/41961/info

sSMTP 2.62 – ‘standardize()’ Buffer Overflow

source: https://www.securityfocus.com/bid/41965/info

SyndeoCMS 2.9 – Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/41989/info

XAOS CMS – SQL Injection

# Exploit Title: XAOS CMS SQL Injection Vulnerability

Ballettin Forum – SQL Injection

====================================================================

CMS Ignition – SQL Injection

|------------------------------------------------|

WhiteBoard 0.1.30 – Multiple Blind SQL Injections

WhiteBoard 0.1.30 Multiple Blind SQL Injection Vulnerabilities