Exploits

All Browsers – Long Unicode Denial of Service (PoC)

Dr_IDE - All Browsers - Long Unicode DoS PoC

Winamp 5.572 – Local Crash (PoC)

#!\C:\Perl\bin

ProSSHD 1.2 – (Authenticated) Remote (ASLR + DEP Bypass)

# Exploit Title: ProSSHD 1.2 remote post-auth exploit (w/ASLR and DEP bypass)

KubeBlog – Cross-Site Request Forgery

========================================================================================

Adobe – ‘util.printf()’ Local Buffer Overflow (Metasploit) (1)

##

Mango Blog 1.4.1 – ‘/archives.cfm/search’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/39864/info

IslamSound – Multiple SQL Injections

source: https://www.securityfocus.com/bid/39880/info

Mesut Manþet Haber 1.0 – Authentication Bypass

==============================================================================

Joomla! Component com_djClassifieds 0.9.1 – Arbitrary File Upload

# Dork:inurl:com_djclassifieds

Acritum Femitter Server 1.03 – Multiple Vulnerabilities

--=> Tested on: XP sp 2

WHMCompleteSolution (WHMCS) Control 2 – ‘announcements.php’ SQL Injection

Software: WHMCS control 2 Sql Injection

TFTPGUI – Long Transport Mode Overflow

# Exploit Title: TFTPGUI Long Transport Mode Overflow

Burning Board Lite 1.0.2 – Arbitrary File Upload

========================================================================================

Openannuaire Openmairie Annuaire 2.00 – Local File Inclusion / Remote File Inclusion

===================================================================================

GuppY 4.5.18 – Blind SQL Injection / XPath Injection

========================================================================================

Billwerx RC5.2.2 PL2 – ‘primary_number’ SQL Injection

source: https://www.securityfocus.com/bid/39867/info

PHP 5.3 – ‘PHP_dechunk()’ HTTP Chunked Encoding Integer Overflow

source: https://www.securityfocus.com/bid/39877/info

RealVNC 4.1.3 – ‘ClientCutText’ Message Remote Denial of Service

source: https://www.securityfocus.com/bid/39895/info

Comersus 8 Shopping Cart – SQL Injection / Cross-Site Request Forgery

# Exploit Title:SQL Injection and CSRF Vulnerability in Comersus 8 Shopping Cart

CF Image Host 1.1 – Remote File Inclusion

###########################################################

Joomla! Component Table JX – Cross-Site Scripting

# Exploit Title: Joomla Component Table JX XSS Vulnerabilities

Joomla! Component Card View JX – Cross-Site Scripting

[:::::::::::::::::::::::::::::::::::::: 0x1 ::::::::::::::::::::::::::::::::::::::]

Opencatalogue 1.024 – Local File Inclusion

====================================================

Opencimetiere 2.01 – Multiple Remote File Inclusions

=============================================================

Google Chrome 4.1.249.1064 – Remote Memory Corrupt

CF Image Hosting Script 1.1 – ‘upload.php’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/39870/info

NolaPro Enterprise 4.0.5538 – Cross-Site Scripting / SQL Injection

source: https://www.securityfocus.com/bid/39875/info

ec21 clone 3.0 – ‘id’ SQL Injection

) ) ) ( ( ( ( ( ) )

B2B Gold Script – ‘id’ SQL Injection

) ) ) ( ( ( ( ( ) )

JobPost – SQL Injection

# vendor :http://www.aspsiteware.com/job.asp

AutoDealer 1.0/2.0 – MSSQL Injection

# vendor :http://www.aspsiteware.com/Auto.asp

New-CMS – Multiple Vulnerabilities

#

Joomla! Component Newsfeeds – SQL Injection

# Exploit Title: Joomla Component com_newsfeeds SQL injection vulnerability

Puntal 2.1.0 – Remote File Inclusion

====================================================

Webthaiapp – ‘detail.php?cat’ Blind SQL Injection

--==+==================================================+==--

Alibaba Clone Platinum – ‘offers_buy.php’ SQL Injection

) ) ) ( ( ( ( ( ) )

Urgent Backup 3.20 / ABC Backup Pro 5.20 / ABC Backup 5.50 – ‘.zip’ File (SEH)

#!/usr/bin/ruby

Solaris dtspcd – Remote Heap Overflow (Metasploit)

##

ProSysInfo TFTP server TFTPDWIN 0.4.2 – ‘Filename’ Remote Buffer Overflow (Metasploit)

##

Microsoft IIS – Phone Book Service Overflow (MS00-094) (Metasploit)

##

Timbuktu 8.6.6 – PlughNTCommand Named Pipe Buffer Overflow (Metasploit)

##

Microsoft SQL Server – Resolution Overflow (MS02-039) (Metasploit)

##

Microsoft SQL Server – Hello Overflow (MS02-056) (Metasploit)

##

Seattle Lab Mail (SLmail) 5.5 – POP3 ‘PASS’ Remote Buffer Overflow (Metasploit)

##

CA BrightStor ARCserve – Message Engine Heap Overflow (Metasploit)

##

CA BrightStor Agent for Microsoft SQL – Remote Overflow (Metasploit)

##

Computer Associates ARCserve – REPORTREMOTEEXECUTECML Buffer Overflow (Metasploit)

##

CA BrightStor Discovery Service – TCP Overflow (Metasploit)

##

Computer Associates – Alert Notification Buffer Overflow (Metasploit)

##

CA BrightStor ARCserve – Message Engine Buffer Overflow (Metasploit)

##