Exploits

Apple iOS Safari – Bad ‘VML’ Remote Denial of Service

# Exploit Title: Bad "VML" Remote DoS on Safari for iPhone & iPod Touch

Apple iOS Safari – Remote Denial of Service

# Exploit Title: Remote DoS on Safari for iPhone & iPod Touch

post Card – ‘catid’ SQL Injection

post Card ( catid ) Remote SQL Injection Vulnerability

tPop3d 1.5.3 – Denial of Service

# Exploit Title: tPop3d 1.5.3 DoS

CmsFaethon 2.2.0 (ultimate.7z) – Multiple Vulnerabilities

#####################################################################################

CyberCMS – SQL Injection

# Exploit Title: CyberCMS Remote SQL Injection Vuln.

BPTutors Tutoring site script – Cross-Site Request Forgery (Add Admin)

# Title: BPTutors Tutoring site script - [ CSRF ] Create Administrator Account

Kasseler CMS 1.4.x lite Module Jokes – SQL Injection

UoW IMAPd Server – LSUB Buffer Overflow (Metasploit)

##

Apple Safari for iPhone/iPod touch – ‘Throw’ Exception Remote Code Execution

source: https://www.securityfocus.com/bid/38992/info

Apple Safari iPhone/iPod touch – Webpage Remote Code Execution

source: https://www.securityfocus.com/bid/38994/info

KenWard’s Zipper 1.400 – Local Buffer Overflow (2)

#!/usr/bin/python

Interactivefx.ie CMS – SQL Injection

================================================

INVOhost – SQL Injection

##########################[Andrés Gómez]##########################

Easy-Clanpage 2.01 – SQL Injection

----------------------------Information------------------------------------------------

justVisual 2.0 – ‘index.php’ Local File Inclusion

#########################################################################

eDisplay Personal FTP Server 1.0.0 – (Authenticated) Multiple Stack Buffer Overflows (2)

# Exploit Title : eDisplay Personal FTP server 1.0.0 Multiple Post-Authentication Stack BOF

Cisco TFTP Server 1.1 – Denial of Service

# Exploit Title: [Cisco TFTP Server 1.1]

SAP GUI 7.00 – BExGlobal Active-X unsecure method

Security vulnerability found in SAP GUI 7.10 and BI 7.0 that allows operating system functions to be called remotely.

Lexmark Multiple Laser printers – Remote Stack Overflow

#####################################################################################

SiteX CMS 0.7.4 Beta – ‘photo.php’ SQL Injection

Direct News 4.10.2 – Multiple Remote File Inclusions

\\\|///

WebsiteBaker 2.8.1 – DataBase Backup Disclosure

::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

Jenkins Software RakNet 3.72 – Remote Integer Underflow

source: https://www.securityfocus.com/bid/38974/info

Smart PC Recorder 4.8 – ‘.mp3’ Local Crash (PoC)

# Exploit Title: Smart PC Recorder .MP3 Local Crash POC

Easy-Clanpage 2.0 – Blind SQL Injection

----------------------------Information------------------------------------------------

CMS By SoftnSolv – ‘index.php’ SQL Injection

# Exploit Title: CMS By SoftnSolv (index.php) SQL Injection Vulnerable

E-PHP CMS – SQL Injection

# Exploit Title: E-php CMS SQL Injection Vulnerability

Joomla! Component com_universal – Remote File Inclusion

###########################################################

New-CMS – Local File Inclusion

# Exploit Title: New CMS Local File Inclusio

Joomla! Component com_wallpapers – SQL Injection

# Title : Joomla Component com_wallpapers SQL Injection Vulnerability

Joomla! Component com_software – SQL Injection

# Title : Joomla Component com_software SQL Injection Vulnerability

vBulletin Blog 4.0.2 – Title Cross-Site Scripting

Vbulletin Blog 4.0.2 XSS Vulnerability

Joomla! Component com_jresearch – ‘Controller’ Local File Inclusion

source: https://www.securityfocus.com/bid/38917/info

Sun Connection Update Manager for Solaris – Multiple Insecure Temporary File Creation Vulnerabilities

source: https://www.securityfocus.com/bid/38928/info

Mozilla Firefox 3.6 – ‘gfxTextRun::SanitizeGlyphRuns()’ Remote Memory Corruption

source: https://www.securityfocus.com/bid/38943/info

Mozilla Firefox/Thunderbird/SeaMonkey – Multiple Memory Corruption Vulnerabilities

source: https://www.securityfocus.com/bid/38944/info

Joomla! Component com_jwmmxtd – Remote File Inclusion

#################################################################

Uiga Business Portal – ‘index.php’ SQL Injection

----------------------------Information------------------------------------------------

Joomla! Component com_gds – SQL Injection

# Title : Joomla Component com_gds SQL Injection Vulnerability

Insky CMS 006-0111 – Multiple Remote File Inclusions

\\\|///

Zephyrus CMS – ‘index.php’ SQL Injection

====================================================

Joomla! Component Property – Local File Inclusion

---------------------------------------------------------------------------------

Xataface – Admin Authentication Bypass

=======================================================

Joomla! Component SMEStorage – Local File Inclusion

---------------------------------------------------------------------------------

Jinais IRC Server 0.1.8 – Null Pointer (PoC)

Jinais IRC Server 0.1.8 - NULL Pointer PoC

uhttp Server 0.1.0-alpha – Directory Traversal

uhttp Server Path Traversal Vulnerability

MX Simulator Server – Remote Buffer Overflow

MX Simulator Server 2010-02-06 Remote Buffer Overflow PoC

Lussumo Vanilla 1.1.10 – ‘definitions.php’ Multiple Remote File Inclusions

source: https://www.securityfocus.com/bid/38889/info

Astaro Security Linux 5 – ‘index.fpl’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/38893/info