Exploits

VariCAD 2010-2.05 EN – ‘.DWB’ Local Stack Buffer Overflow (Metasploit)

##

Samba 3.0.10 (OSX) – ‘lsa_io_trans_names’ Heap Overflow (Metasploit)

##

Advanced Management For Services Sites – Bypass Create And Download SQL Backup

========================================================================================

QuickEStore 6.1 – Backup Dump

========================================================================================

Solutive CMS – SQL Injection

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

x10 mirco blogging 121 – SQL Injection

===========================================

Prediction League 0.3.8 – Cross-Site Request Forgery (Add Admin)

========================================================================================

EasyFTP Server 1.7.0.2 – ‘MKD’ (Authenticated) Remote Buffer Overflow

#include

MunkyScripts Simple Gallery – SQL Injection

coded by ahmadbady

nodesforum 1.033 – Remote File Inclusion

coded by ahmadbady

ttCMS 5.0 – Remote File Inclusion

coded by ahmadbady

Uiga Proxy – Remote File Inclusion

coded by ahmadbady

MassMirror Uploader – Multiple Remote File Inclusions

========================================

PHP 6.0 Dev – ‘str_transliterate()’ Local Buffer Overflow

SAGU-PRO 1.0 – Multiple Remote File Inclusions

\\\|///

ZipCentral – ‘.zip’ File (SEH)

#!/usr/bin/python

Joomla! Component redSHOP 1.0 – Local File Inclusion

======================================================================================================================

Joomla! Component redTWITTER 1.0 – Local File Inclusion

=====================================================================================================================...

Joomla! Component com_wisroyq 1.1 – Local File Inclusion

=====================================================================================================================...

Joomla! Component com_press – SQL Injection

# Title : Joomla Component com_press SQL Injection Vulnerability

Joomla! Component Picasa 2.0 – Local File Inclusion

# Exploit Title: Joomla Component Picasa 2.0 LFI Vulnerability

eZip Wizard 3.0 – ‘.zip’ File (SEH)

#!/usr/bin/perl

Joomla! Component com_serie – SQL Injection

# Title : Joomla Component com_serie SQL Injection Vulnerability

Facil-CMS 0.1RC2 – Local/Remote File Inclusion

########################################################

Joomla! Component com_ranking – SQL Injection

# Title : Joomla Component com_ranking SQL Injection Vulnerability

Zip Unzip 6.0 – ‘.zip’ Local Stack Buffer Overflow

Dualis 20.4 – ‘.bin’ Local Denial of Service

phpscripte24 Vor und Rückwärts Auktions System – Blind SQL Injection

----------------------------Information------------------------------------------------

DSEmu 0.4.10 – ‘.nds’ Local Crash

#!/usr/bin/env python

PHP-fusion dsmsf Mod Downloads – SQL Injection

========================================================

SafeSHOP 1.5.6 – Cross-Site Scripting / Multiple Cross-Site Request Forgery Vulnerabilities

# Exploit Title: SafeSHOP

IncrediMail 2.0 – ActiveX (Authenticated) Buffer Overflow (PoC)

IncrediMail 2.0 activeX (Authenticate) bof poc

Advanced Management For Services Sites – Remote Add Admin

::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

Microsoft Internet Explorer Tabular Data Control – ActiveX Remote Code Execution

# CVE : CVE-2010-0805

Java Mini Web Server 1.0 – Directory Traversal / Cross-Site Scripting

# Exploit Title: Java Mini Web Server

Flatpress 0.909.1 – Persistent Cross-Site Scripting

##############################################################################

ZipScan 2.2c – Local Overflow (SEH)

#!/usr/bin/perl

Edimax AR-7084GA Router – Cross-Site Request Forgery / Persistent Cross-Site Scripting

Joomla! Component JP Jobs 1.4.1 – SQL Injection

:: General information

CMS Made Simple 1.7 – Cross-Site Request Forgery

=======================================================================

μTorrent (uTorrent) WebUI 0.370 – Authorisation Header Denial of Service

#!/usr/bin/perl

Google Chrome 4.1 – Out-of-Bounds Array Indexing

-----BEGIN PGP SIGNED MESSAGE-----

Free MP3 CD Ripper 2.6 – ‘.wav’ Local Overflow

# Exploit Title: Free MP3 CD Ripper 2.6 0 day

Joomla! Component com_menu – SQL Injection

# Title : Joomla Component com_menu SQL Injection Vulnerability

Joomla! Component com_ops – SQL Injection

# Title : Joomla Component com_ops SQL Injection Vulnerability

Joomla! Component com_football – SQL Injection

# Title : Joomla Component com_football SQL Injection Vulnerability

DynPG CMS 4.1.0 – ‘popup.php’ / ‘counter.php’ Multiple Vulnerabilities

########################################################

Velhost Uploader Script 1.2 – Local File Inclusion

===============================================================

68kb 68KB Base 1.0.0rc3 – Cross-Site Request Forgery (Admin)

Exploit Title: 68kb Knowledge Base v1.0.0rc3 create administrator account CSRF

68KB Knowledge Base 1.0.0rc3 – Cross-Site Request Forgery (Edit Main Settings)

Exploit Title: 68kb Knowledge Base v1.0.0rc3 edit main settings CSRF