Exploits

Apache OFBiz – Admin Creator

Apache OFBiz FULLADMIN Creator PoC Payload.

Iomega Home Media Network Hard Drive 2.038 < 2.061 - File-system Access

-----------------------------

60 cycleCMS 2.5.2 – Cross-Site Request Forgery (Change Username and Password)

========================================================================================

WebAdmin – Arbitrary File Upload

# Exploit Title: WebAdmin Shell Upload Vulnerability

Uploader 0.7 – Arbitrary File Upload

# Exploit Title: Uploader 0.7 Shell Upload Vulnerability

Joomla! Component JoltCard 1.2.1 – SQL Injection

# Exploit Title: Joomla Component com_joltcard SQL Injection Vulnerability

Joomla! Component com_pandafminigames – SQL Injection

# Exploit Title: Joomla Component com_pandafminigames SQL Injection Vulnerabilities

Softbiz B2B trading Marketplace Script – buyers_subcategories SQL Injection

# Exploit Title: Softbiz B2B trading Marketplace Script buyers_subcategories SQL Injection Vulnerability

Joomla! Component Intellectual Property 1.5.3 – ‘id’ SQL Injection

) ) ) ( ( ( ( ( ) )

Magneto Net Resource ActiveX 4.0.0.5 – ‘NetFileClose’ Universal

Magneto Net Resource ActiveX 4.0.0.5 – ‘NetConnectionEnum’ Universal

60cycleCMS 2.5.2 – ‘DOCUMENT_ROOT’ Multiple Local File Inclusions

########################################################

Magneto Net Resource ActiveX 4.0.0.5 – ‘NetShareEnum’ Universal

Camiro-CMS_beta-0.1 – ‘FCKeditor’ Arbitrary File Upload

IBM Bladecenter Management Module – Denial of Service

[DSECRG-09-049] IBM BladeCenter Management Module - DoS vulnerability

Ziggurat Farsi CMS – ‘id’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/39311/info

Mocha W32 LPD 1.9 – Remote Buffer Overflow (PoC)

source: https://www.securityfocus.com/bid/39498/info

Oracle E-Business Suite Financials 12 – ‘jtfwcpnt.jsp’ SQL Injection

source: https://www.securityfocus.com/bid/39510/info

Ziggurat Farsi CMS – ‘bck’ Directory Traversal

source: https://www.securityfocus.com/bid/39534/info

Opentel Openmairie tel 1.02 – Local File Inclusion

============================================================

Micropoint ProActive Denfense ‘Mp110013.sys’ 1.3.10123.0 – Local Privilege Escalation

{

Aircrack-NG Tools svn r1675 – Remote Heap Buffer Overflow (PoC)

#!/usr/bin/env python

School Management System Pro 6.0.0 – Backup Dump

========================================================================================

Mp3 Online Id Tag Editor – Remote File Inclusion

========================================================================================

Almnzm 2.1 – SQL Injection

# Title: almnzm 2.1 > #1 Vulnerability

Bild Flirt System 1.0 – SQL Injection

----------------------------Information------------------------------------------------

PhpMesFilms 1.8 – SQL Injection

========================================================================================

Multi-Mirror – Arbitrary File Upload

========================================================================================

Mihalism Multi Host 4.0.0 – Arbitrary File Upload

========================================================================================

Magic Uploader Mini – Arbitrary File Upload

========================================================================================

YUI Images Script – Arbitrary File Upload

# Title: YUI Images Script Shell Upload Vulnerability

MovieLibrary 1.4.401 – ‘.dmv’ Local Denial of Service

# Exploit Title: MovieLibrary Local Dos .dmv file

Book Library 1.4.162 – ‘.bkd’ Local Denial of Service

# Exploit Title: Book Library Local Dos .bkd file

Joomla! Component com_wgpicasa – Local File Inclusion

==============================================================================================================

Joomla! Component com_s5clanroster – Local File Inclusion

==================================================================================================================

Joomla! Component Photo Battle 1.0.1 – Local File Inclusion

===========================================================================================================

Joomla! Component MT Fire Eagle 1.2 – Local File Inclusion

=================================================================================================================

Joomla! Component Media Mall Factory 1.0.4 – Blind SQL Injection

===========================================================================================================

Joomla! Component Love Factory 1.3.4 – Local File Inclusion

=================================================================================================================

Joomla! Component JA Comment – Local File Inclusion

=========================================================================================================

Joomla! Component Delicious Bookmarks 0.0.1 – Local File Inclusion

===============================================================================================================

Joomla! Component Deluxe Blog Factory 1.1.2 – Local File Inclusion

=================================================================================================================

Joomla! Component BeeHeard 1.0 – Local File Inclusion

==================================================================================================================

Mocha LPD 1.9 – Remote Buffer Overflow (Denial of Service) (PoC)

#!/usr/bin/python

Nucleus CMS 3.51 (DIR_LIBS) – Multiple Vulnerabilities

########################################################

RJ-iTop Network Vulnerability Scanner System – Multiple SQL Injections

RJ-iTop Network Vulnerability Scanner System Multiple SQL Injection Vulnerabilities

RPM Select/Elite 5.0 – ‘.xml Configuration parsing’ Unicode Buffer Overflow (PoC)

#!/usr/bin/python

PHP 6.0 Dev – ‘str_transliterate()’ Local Buffer Overflow (NX + ASLR Bypass)

Joomla! Component Jvehicles 1.0/2.0 – ‘aid’ SQL Injection

[!] Joomla Component Jvehicles (aid) SQL Injection Vulnerability

Joomla! Component JP Jobs 1.2.0 – ‘id’ SQL Injection

) ) ) ( ( ( ( ( ) )