Exploits

Edgephp ClickBank Affiliate Marketplace Script – Multiple Vulnerabilities

Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]

Sillaj time tracking tool – Authentication Bypass

Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]

My Kazaam Notes Management System – Multiple Vulnerabilities

Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]

My Kazaam Address & Contact ORGanizer – SQL Injection

) ) ) ( ( ( ( ( ) )

Joomla! Component Rapid-Recipe – Persistent Cross-Site Scripting

1 ########################################## 1

Joomla! Component Rapid-Recipe – HTML Injection

source: https://www.securityfocus.com/bid/41531/info

eliteCMS 1.01 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/41537/info

Sun Java Web Server 7.0 u7 – Remote Overflow (DEP Bypass)

# Exploit Title: [SJWSexv2]

b2evolution 3.3.3 – Cross-Site Request Forgery

----------------------------------------------------------------------------

MP3 Cutter 1.5 – Denial of Service

##########################################################

Joomla! Component IXXO Cart – SQL Injection

1 ########################################## 1

Joomla! Component Minify4Joomla! – Arbitrary File Upload / Persistent Cross-Site Scripting

=======================================================

sphider 1.3.5 – Remote File Inclusion

--##----------##------######--------------------------------########----------------##--------|

Microsoft – ‘MSHTML.dll’ CTIMEOUTEVENTLIST::INSERTINTOTIMEOUTLIST Memory Leak

mshtml.dll CTimeoutEventList::InsertIntoTimeoutList Timer ID Pointer leak - Rubén Santamarta www.reversemode.com

Joomla! Component QuickFAQ 1.0.3 – Blind SQL Injection

-----------------------------------------------------------------------------------------

CMS Contentia – ‘news.php’ SQL Injection

##############################################################################

HoloCMS 9.0.47 – ‘news.php’ SQL Injection

##############################################################################

WordPress Plugin Firestats – Remote Configuration File Download

# Exploit Title: Wordpress firestats remote configuration file download

dotDefender 3.8-5 – Remote Code Execution (via Cross-Site Scripting)

DotDefender

RSP MP3 Player OCX 3.2 – ActiveX Buffer Overflow

MP3 Cutter 1.8 MP3 – File Processing Remote Denial of Service

source: https://www.securityfocus.com/bid/41506/info

Real Estate Manager 1.0.1 – ‘index.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/41507/info

SimpNews 2.47.3 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/41517/info

Yappa 3.1.2 – ‘yappa.php’ Multiple Remote Command Execution Vulnerabilities

source: https://www.securityfocus.com/bid/41521/info

WordPress Plugin Firestats 1.6.5 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/41548/info

dotDefender – Cross-Site Scripting Security Bypass

source: https://www.securityfocus.com/bid/41560/info

Oracle MySQL < 5.1.49 - 'DDL' Statements Denial of Service

source: https://www.securityfocus.com/bid/42643/info

IrcDelphi Daemon Server – Denial of Service

[DCA-0010]

EA Battlefield 2 / Battlefield 2142 – Multiple Arbitrary File Upload Vulnerabilities

Source:

Qt 4.6.3 – ‘QSslSocketBackendPrivate::transmit()’ Denial of Service

Source:

FathFTP 1.7 – ActiveX Buffer Overflow

Zylone IT – Multiple Blind SQL Injections

# Exploit Title: Zylone IT Multiple Blind SQL Injection Vulnerability

Pithcms – ‘theme’ Local/Remote File Inclusion

Title: pithcms (theme) Local / remote File inclusion VUlnerability

UFO: Alien Invasion 2.2.1 (OSX Snow Leopard) – IRC Client Remote Code Execution (ROP)

#!/usr/bin/python

Linux PAM 1.1.0 (Ubuntu 9.10/10.04) – MOTD File Tampering Privilege Escalation (1)

#!/bin/sh

Joomla! Component Music Manager – Local File Inclusion

Critical Level : HIGH

Real Player 12.0.0.879 – Code Execution

# Exploit Title: Real Player 12.0.0.879 0day for WinXP

Inout Music 1.0 – Arbitrary File Upload

==============================================================

Inout Article Base Ultimate – Arbitrary File Upload

==============================================================

Inout Ad server Ultimate – Arbitrary File Upload

==============================================================

PG Social Networking – Arbitrary File Upload

==============================================================

KMSoft GB – SQL Injection

==============================================================

Microsoft Windows – ‘cmd.exe’ Unicode Buffer Overflow (SEH)

# Exploit Title: cmd.exe Unicode Buffer Overflow (SEH)

ClickGallery Server – SQL Injection

==============================================================

i-Gallery – Multiple Vulnerabilities

==============================================================

Outlook Web Access 2007 – Cross-Site Request Forgery

Source:

Ghost Recon Advanced Warfighter – Integer Overflow / Array Indexing Overflow

Source:

BEA Weblogic – Transfer-Encoding Buffer Overflow (Metasploit)

##

BadBlue 2.72b – PassThru Buffer Overflow (Metasploit)

##

osCSS 1.2.2 – ‘page’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/41510/info