Exploits

Acart 2.0 Shopping Cart – Software Backup Dump

========================================================================================

Webkit (Apple Safari 4.0.5) – Blink Tag Stack Exhaustion Denial of Service

Webkit (Safari) Stack Exhaustion DoS

Joomla! Component Ultimate Portfolio 1.0 – Local File Inclusion

=======================================================================================================================

Joomla! Component NoticeBoard 1.3 – Local File Inclusion

=================================================================================================================

Joomla! Component SmartSite 1.0.0 – Local File Inclusion

===============================================================================================================

Joomla! Component ABC 1.1.7 – SQL Injection

#!/usr/bin/perl

Joomla! Component Graphics 1.0.6 – Local File Inclusion

================================================================================================

memcached 1.4.2 – Memory Consumption Remote Denial of Service

source: https://www.securityfocus.com/bid/39577/info

Linux Kernel 2.6.34 – ‘find_keyring_by_name()’ Local Memory Corruption

source: https://www.securityfocus.com/bid/39719/info

ProArcadeScript – ‘search.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/39749/info

SmartBlog 1.3 – SQL Injection / Cross-Site Scripting

source: https://www.securityfocus.com/bid/39756/info

OneHTTPD 0.6 – Directory Traversal

source: https://www.securityfocus.com/bid/39757/info

2DayBiz Advanced Poll Script – Cross-Site Scripting / Authentication Bypass

______________________________________________________________________________

OpenCominterne 1.01 – Local File Inclusion

====================================================

Opencourrier 2.03beta – Local File Inclusion / Remote File Inclusion

===================================================================

Uiga Personal Portal – ‘index.php’ ‘view’ SQL Injection

# Exploit Title: Uiga Personal Portal index.php (view) SQL Injection

Joomla! Component JoomRadio 1.0 – SQL Injection

Joomla Component com_joomradio SQL injection vulnerability

WebKit 532.5 – Stack Exhaustion

Kasseler CMS 2.0.5 – Bypass / Download Backup

========================================================================================

IDEAL Administration 2010 10.2 – Local Buffer Overflow

#!/usr/bin/env python

IDEAL Migration 2009 4.5.1 – Local Buffer Overflow

#!/usr/bin/env python

CMScout 2.08 – SQL Injection

# Title: CMScout 2.08 SQL Injection Vulnerability

Apple Safari 4.0.5 (531.22.7) – Denial of Service

#!/usr/bin/perl

PostNuke 0.764 Module modload – SQL Injection

PostNuke 0.764 Module modload SQL Injection Vulnerability

Ektron CMS400.NET 7.5.2 – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/39679/info

Kasseler CMS 2.0.5 – ‘index.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/39703/info

Serenity Audio Player 3.2.3 – ‘.m3u’ Remote Buffer Overflow

source: https://www.securityfocus.com/bid/39768/info

Serenity Audio Player 3.2.3 – ‘.m3u’ Remote Buffer Overflow (Metasploit)

source: https://www.securityfocus.com/bid/39768/info

CMS Firebrand Tec – Local File Inclusion

======================================================================

Easyzip 2000 3.5 – ‘.zip’ Local Stack Buffer Overflow

Rumba FTP Client 4.2 – PASV Buffer Overflow (SEH)

# Email: darkernet[at]gmail.com

phpegasus 0.1.2 – ‘FCKeditor’ Arbitrary File Upload

Invision Power Board – Denial of Service

==============================================

clipak – Arbitrary File Upload

========================================================================================

Powered by iNetScripts – Arbitrary File Upload

====================================================

TR Forum 1.5 – Cross-Site Request Forgery (Add Admin)

========================================================================================

PHP Classifieds 6.09 – E-mail Dump

========================================================================================

webessence 1.0.2 – Multiple Vulnerabilities

#

WM Downloader 3.0.0.9 – Local Buffer Overflow (Metasploit)

##

HP System Management Homepage – ‘RedirectUrl’ Open Redirection

source: https://www.securityfocus.com/bid/39676/info

Openpresse 1.01 – Local File Inclusion

================================================

Openplanning 1.00 – Local File Inclusion / Remote File Inclusion

===============================================================

Openfoncier 2.00 – Local File Inclusion / Remote File Inclusion

==============================================================

HP Digital Imaging – ‘hpodio08.dll’ Insecure Method

# Exploit Title: HP Digital Imaging (hpodio08.dll) Insecure Method Exploit

ZipWrangler 1.20 – ‘.zip’ File (SEH)

#!/usr/bin/perl

Madirish Webmail 2.01 – ‘baseDir’ Local/Remote File Inclusion

=====================================================

NCT Jobs Portal Script – Cross-Site Scripting / Authentication Bypass

# Exploit Title: XSS and Authentication bypass in NCT Jobs Portal Script

WHMCompleteSolution (WHMCS) control (WHMCompleteSolution) – SQL Injection

#=Info=======================================================================#

Alstrasoft AskMe Pro 2.1 – ‘que_id’ SQL Injection

) ) ) ( ( ( ( ( ) )

Sethi Family Guestbook 3.1.8 – Cross-Site Scripting

[:::::::::::::::::::::::::::::::::::::: 0x1 ::::::::::::::::::::::::::::::::::::::]