Exploits

Joomla! Component Article Factory Manager – Arbitrary File Upload

# vendor :http://www.thefactory.ro/shop/joomla-components/article-manager.html

IDEAL Migration 4.5.1 – Local Buffer Overflow (Metasploit)

###

Web 2.0 Social Network Freunde Community System – ‘user.php’ SQL Injection

source: https://www.securityfocus.com/bid/40264/info

Microsoft Windows – SMB2 Negotiate Protocol ‘0x72’ Response Denial of Service

#!/usr/bin/python

PHP-Nuke – ‘friend.php’ Module SQL Injection

# Exploit Title: [PHP-Nuke 'friend.php' Module Remote SQL Injection]

ArticleLive (Interspire Website Publisher) – SQL Injection

# Author : ra3ch

Administrador de Contenidos – Admin Authentication Bypass

************************************************************ ** Administrador de Contenidos Admin Login Bypass vulne...

AVCON H323Call – Local Buffer Overflow

#!/usr/bin/perl

ESET Smart Security 4.2 and NOD32 AntiVirus 4.2 (x86/x64) – LZH archive parsing (PoC)

#

Consona – ‘n6plugindestructor.asp’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/39999/info

ECShop 2.7.2 – ‘category.php’ SQL Injection

source: https://www.securityfocus.com/bid/40001/info

Cisco Application Control Engine (ACE) – HTTP Parsing Security

source: https://www.securityfocus.com/bid/40002/info

gdomap – Multiple Local Information Disclosure Vulnerabilities

source: https://www.securityfocus.com/bid/40005/info

Rebellion Aliens vs Predator 2.22 – Multiple Memory Corruption Vulnerabilities

// source: https://www.securityfocus.com/bid/40041/info

BaoFeng Storm – ‘.m3u’ File Processing Buffer Overflow

#!/usr/bin/env python

Getsimple CMS 2.01 – Local File Inclusion

# Exploit Title: GetSimple 2.01 LFI

Microsoft Paint – Integer Overflow (Denial of Service) (MS10-005)

# Date: 2010-05-04

AV Arcade – ‘Search’ Cross-Site Scripting / HTML Injection

# Exploit Title: AV Arcade Search Field XSS/HTML Injection

OCS Inventory NG Server 1.3.1 – ‘LOGIN’ Remote Authentication Bypass

OCS Inventory NG

Factux – Local File Inclusion

[~]######################################### InformatioN

WeBProdZ CMS – SQL Injection

______ _ _ _

REZERVI 3.0.2 – Remote Command Execution

#!/usr/bin/perl

DeluxeBB 1.x – ‘newpost.php’ SQL Injection

source: https://www.securityfocus.com/bid/39962/info

PCRE 6.2 – Regular Expression Compiling Workspace Buffer Overflow

source: https://www.securityfocus.com/bid/39974/info

Digital Factory Publique! 2.3 – ‘sid’ SQL Injection

source: https://www.securityfocus.com/bid/39988/info

X-Motor Racing 1.26 – Remote Buffer Overflow / Multiple Denial of Service Vulnerabilities

source: https://www.securityfocus.com/bid/40008/info

PHP-Nuke 7.0/8.1/8.1.35 – Wormable Remote Code Execution

#!/usr/bin/php

MDaemon Mailer Daemon 11.0.1 – Remote File Disclosure

MDaemon Mailer Daemon Version 11.0.1 (LATEST) Remote File Disclosure

Ziepod+ 1.0 – CrossApplication Scripting

#!/usr/bin/python

PHP-Nuke 5.0 – Viewslink SQL Injection

# Author: CMD

Slooze PHP Web Photo Album 0.2.7 – Command Execution

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0

WordPress Plugin TYPO3 ‘t3m_cumulus_tagcloud’ Extension 1.0 – HTML Injection / Cross-Site Scripting

source: https://www.securityfocus.com/bid/39926/info

VMware View 3.1.x – URL Processing Cross-Site Scripting

source: https://www.securityfocus.com/bid/39949/info

WordPress Plugin Cimy Counter 0.9.4 – HTTP Response Splitting / Cross-Site Scripting

source: https://www.securityfocus.com/bid/41132/info

PhotoFiltre Studio X – ‘.tif’ Local Buffer Overflow

#include

VicFTPS 5.0 – Directory Traversal

################################################################################

DBHcms 1.1.4 – Persistent Cross-Site Scripting

############################################################################

Clicksor – SQL Injection

( ALLH AKBAR )

Beyond Compare 3.0.13 b9599 – ‘.zip’ Local Stack Buffer Overflow

thEngine 0.1 – Local File Inclusion

=============================================================================================

Knowledgeroot (fckeditor) – Arbitrary File Upload

SmartCMS 2 – SQL Injection

============ { Ariko-Security - Advisory #1/5/2010 } =============

Multiple Browsers – ‘history.go()’ Denial of Service

Dr_IDE - Camino 2.0.2 & Safari 4.0.5 DoS PoC

Multiple Browsers – ‘window.print()’ Denial of Service

Dr_IDE Firefox 3.6.3 & Safari 4.0.5 window.print() DoS

Apple QuickTime 7.1.3 – RTSP URI Buffer Overflow (Metasploit)

##

Apple Safari 4.0.5 – ‘JavaScriptCore.dll’ Stack Exhaustion

Gallo 0.1.0 – Remote File Inclusion

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0

Joomla! 1.6.0 Alpha2 – Cross-Site Scripting

# Title:Joomla_1.6.0-Alpha2 XSS Vulnerabilities

All browsers – Crash

===============================

Mozilla Firefox 3.6.3 – Fork Bomb (Denial of Service)