Exploits

Microsoft OWC Spreadsheet – HTMLURL Buffer Overflow (MS09-043) (Metasploit)

##

osCommerce 3.0a5 – Local File Inclusion / HTML Injection

source: https://www.securityfocus.com/bid/39820/info

Campsite 3.x – ‘article_id’ SQL Injection

source: https://www.securityfocus.com/bid/39862/info

Articles Directory – Authentication Bypass

# Exploit Title:Authenication Bypass Vulnerability in Articles Directory

TR Forum 1.5 – Multiple Vulnerabilities

========================================================================================

XT-Commerce 1.0 Beta 1 – Pass / Create and Download Backup

========================================================================================

Socialware 2.2 – Upload / Cross-Site Scripting

# Exploit Title:Upload Vulnerability and XSS in socialware V2.2 (www.iscripts.com)

DZCP (deV!L`z Clanportal) 1.5.3 – Multiple Vulnerabilities

========================================================================================

Microsoft SharePoint Server 2007 – Cross-Site Scripting

Vulnerability ID: HTB22350

iScripts VisualCaster – SQL Injection

# Exploit Title:SQli Vulnerability in iScripts VisualCaster

TaskFreak 0.6.2 – SQL Injection

CVE-2010-1583

Zyke CMS 1.1 – Bypass

========================================================================================

Zyke CMS 1.0 – Arbitrary File Upload

========================================================================================

Ucenter Projekt 2.0 – Insecure crossdomain (Cross-Site Scripting)

========================================================================================

chCounter – indirect SQL Injection / Cross-Site Scripting

# Exploit Title: chCounter indirect SQL Injection and XSS Vulnerabilities

Apple Safari 4.0.3 (Windows x86) – ‘CSS’ Remote Denial of Service (2)

===============================================================

Scratcher – SQL Injection / Cross-Site Scripting

[+] Scratcher (SQL/XSS) Multiple Remote Vulnerability

Your Articles Directory – Login Option SQL Injection

source: https://www.securityfocus.com/bid/39796/info

ddrLPD 1.0 – Remote Denial of Service

source: https://www.securityfocus.com/bid/39904/info

Webmoney Advisor – ActiveX Remote Denial of Service

Pwnage Page

Joomla! Component com_jesectionfinder – Arbitrary File Upload

--------------------------------------------------------------------------------------

NIBE heat pump – Remote Code Execution

#!/usr/bin/python

NIBE heat pump – Local File Inclusion

#!/usr/bin/python

Pligg CMS 1.0.4 – ‘story.php’ SQL Injection

[!] Pligg CMS (story.php?id) SQL Injection Vulnerability

Apple Safari 4.0.3/4.0.4 – Stack Exhaustion

SoftBizScripts Dating Script – SQL Injection

# Exploit Title: SoftBizScripts Dating Script SQL Injection Vunerability

SoftBizScripts Hosting Script – SQL Injection

# Exploit Title: SoftBizScripts Hosting Script SQL Injection Vunerability

Joomla! Component Wap4Joomla! – ‘wapmain.php’ SQL Injection

Joomla Component Wap4Joomla (wapmain.php) SQL Injection Vulnerability

gpEasy 1.6.1 – Cross-Site Request Forgery (Add Admin)

=============================================

GeneShop 5.1.1 – SQL Injection

# Vendor Link : http://softbizscripts.com/

Modelbook – ‘casting_view.php’ SQL Injection

) ) ) ( ( ( ( ( ) )

PHP Video Battle – SQL Injection

) ) ) ( ( ( ( ( ) )

Samba 2.2.2 < 2.2.6 - 'nttrans' Remote Buffer Overflow (Metasploit) (1)

##

Microsoft Windows Media Services – ConnectFunnel Stack Buffer Overflow (MS10-025) (Metasploit)

##

Apache ActiveMQ 5.3 – ‘admin/queueBrowse’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/39771/info

velBox 1.2 – Insecure Cookie Authentication Bypass

source: https://www.securityfocus.com/bid/39778/info

Tele Data’s Contact Management Server 0.9 – ‘Username’ SQL Injection

source: https://www.securityfocus.com/bid/39799/info

Avast! 4.7 – ‘aavmker4.sys’ Local Privilege Escalation

#!/usr/bin/python

FreeRealty(Free Real Estate Listing Software) – Authentication Bypass

# Exploit Title: Authentication bypass in FreeRealty(Free Real Estate Listing Software)

Ramaas Software CMS – SQL Injection

# Exploit Title: Ramaas Software CMS SQL Injection Vulnerability

i-Net Online Community – Cross-Site Scripting / Authentication Bypass

______________________________________________________________________________ XSS and Authentica...

2DayBiz Auction Script – Authentication Bypass

Authentication bypass in 2daybiz Auction Script

Infocus Real Estate Enterprise Edition Script – Authentication Bypass

Authentication bypass in Infocus Real Estate Enterprise Edition script

PHP Quick Arcade 3.0.21 – Multiple Vulnerabilities

PHP Quick Arcade 3.0.21 Multiple Vulnerabilites

Bigant Messenger 2.52 – ‘AntCore.dll RegisterCom()’ Remote Heap Overflow

#!/usr/bin/python

Boutique SudBox 1.2 – Cross-Site Request Forgery (Changer Login et Mot de Passe)

========================================================================================

Portaneo Portal 2.2.3 – Arbitrary File Upload

Help Center Live 2.0.6 – ‘module=helpcenter&file=’ Local File Inclusion

# Exploit Title: Help Center Live 2.0.6(module=helpcenter&file=) Local File

Acoustica 3.32 CD/DVD Label Maker – ‘.m3u’ (PoC)

# Exploit Title: Acoustica cd/dvd label maker .m3u PoC

CLScript.com Classifieds Software – SQL Injection

# Exploit Title: CLScript.com Classifieds Software SQL Injection