Exploits

Solaris – ypupdated Command Execution (Metasploit)

##

Microsoft IIS – ISAPI ‘nsiislog.dll’ ISAPI POST Overflow (MS03-022) (Metasploit)

##

Microsoft IIS – ISAPI FrontPage ‘fp30reg.dll’ Chunked Overflow (MS03-051) (Metasploit)

##

Microsoft Windows – ASN.1 Library Bitstring Heap Overflow (MS04-007) (Metasploit)

##

Microsoft IIS 5.0 – WebDAV ‘ntdll.dll’ Path Overflow (MS03-007) (Metasploit)

##

Microsoft DNS RPC Service – ‘extractQuotedChar()’ TCP Overflow (MS07-029) (Metasploit)

##

Microsoft Message Queueing Service – DNS Name Path Overflow (MS07-065) (Metasploit)

##

Apache Tomcat mod_jk 1.2.20 – Remote Buffer Overflow (Metasploit)

##

Novell ZENworks 6.5 – Desktop/Server Management Overflow (Metasploit)

##

XML-RPC Library 1.3.0 – ‘xmlrpc.php’ Arbitrary Code Execution (Metasploit)

##

Simple PHP Blog 0.4.0 – Remote Command Execution (Metasploit)

##

TikiWiki jhot – Remote Command Execution (Metasploit)

##

vBulletin – ‘misc.php’ Template Name Arbitrary Code Execution (Metasploit)

##

MC Content Manager 10.1 – SQL Injection / Cross-Site Scripting

source: https://www.securityfocus.com/bid/41949/info

vBulletin 3.8.6 – ‘faq.php’ Information Disclosure

010101010101010101010101010101010101010101010101010101010

IBM AIX 5l – ‘FTPd’ Remote DES Hash

#include

DM FileManager 3.9.11 – Arbitrary File Upload

sNews – ‘index.php’ SQL Injection

# Exploit Title:sNews (index.php) SQL Injection Vulnerability

Open Realty 2.x/3.x – Persistent Cross-Site Scripting

# Title: persistence XSS flaw in Open Realty 2.x and 3.x

AKY Blog – SQL Injection

===================================================

Joomla! Component Ozio Gallery – SQL Injection

# Exploit Title: Joomla Component (com_oziogallery) SQL Injection

Joomla! Component com_itarmory – SQL Injection

# Author: Craw

Mediacoder 0.7.3.4682 – ‘.m3u’ Universal Buffer Overflow

#!/usr/bin/perl

sNews 1.7 – ‘index.php?category’ SQL Injection

########################################################################################

Joomla! Component Joomdle 0.24 – SQL Injection

[!]===========================================================================[!]

Joomla! Component YouTube 1.5 – SQL Injection

# Exploit Title: Joomla "com_youtube" Sql Injection Vulnerability

ZeeAdbox 2.x – SQL Injection

=======================================================

LILDBI – Arbitrary File Upload

# Exploit Title: LILDBI Shell Upload Vulnerability

ZeeNetworking 1x – Arbitrary File Upload

1 ################################### 1

ZeeMatri 3.x – Arbitrary File Upload

1 ################################### 1

PhotoPost – PHP SQL Injection

# Exploit Title: PhotoPost PHP SQL Injection Vulnerability

Multiple Browsers (FF3.6.7/SM 2.0.6) – Clickjacking

FF3.6.7/SM 2.0.6 ClickJacking Vulnerability

Joomla! Component Golf Course Guide 0.9.6.0 – SQL Injection

# Exploit Title: Joomla Component com_golfcourseguide SQL Injection Vulnerability

Joomla! Component Huru Helpdesk – SQL Injection (2)

====================================================

Joomla! Component com_iproperty – SQL Injection

====================================================

EasyFTP Server 1.7.0.11 – ‘LIST’ (Authenticated) Remote Buffer Overflow (Metasploit)

##

FTP Client 0.17-19build1 ACCT (Ubuntu 10.04) – Buffer Overflow (PoC)

#Exploit Title: Ubuntu 10.04 LTS - Lucid Lynx ftp Client v0.17-19build1 ACCT Buffer Overflow

PhotoPost PHP 4.6.5 – ‘ecard.php’ SQL Injection

########################################################################################

ValidForm Builder script – Remote Command Execution

# Exploit Title: ValidForm Builder script Remote Command Execution

IBM Java – UTF8 Byte Sequences Security Bypass

source: https://www.securityfocus.com/bid/41918/info

SAP NetWeaver 6.4/7.0 – ‘wsnavigator’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/41925/info

Joomla! Component com_jomtube – ‘user_id’ Blind SQL Injection

===============================================================================

AJ HYIP MERIDIAN – ‘news.php?id’ Blind SQL Injection

AJ HYIP MERIDIAN (news.php id) Blind SQL Injection Vulnerability

Free PHP photo Gallery script – Remote Command Execution

# Exploit Title: Free PHP photo gallery script Remote Command Execution

Free PHP Photo Gallery Script – Remote File Inclusion

# Exploit Title: Free PHP photo gallery script Remote File inclusion

phpBazar Admin – Information Disclosure

=====================================

phpBB MOD 2.0.19 – Invitation Only (PassCode Bypass)

PHPBB MOD [2.0.19] Invitation Only (PassCode Bypass vulnerability)

WordPress Plugin myLDlinker – SQL Injection

010101010101010101010101010101010101010101010101010101010

AJ HYIP PRIME – ‘welcome.php?id’ Blind SQL Injection

AJ HYIP PRIME (welcome.php id) Blind SQL Injection Vulnerability

Claus Muus Spitfire 1.0.336 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/41885/info