Exploits

agXchange ESM – ‘ucquerydetails.jsp’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/38896/info

Cafu 9.06 – Multiple Remote Vulnerabilities

source: https://www.securityfocus.com/bid/38897/info

RepairShop2 – ‘index.php?Prod’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/38907/info

PHPAuthent 0.2.1 – ‘useradd.php’ Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/38908/info

Kasseler CMS News Module – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/38909/info

SpringSource (Multiple Products) – Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/38913/info

Joomla! Component com_aml_2 – ‘art’ SQL Injection

source: https://www.securityfocus.com/bid/38914/info

Joomla! Component com_cb – ‘cat’ SQL Injection

source: https://www.securityfocus.com/bid/38916/info

Kenward Zipper 1.4 – Local Stack Buffer Overflow

#!/usr/bin/python

Mini-CMS RibaFS 1.0 – Authentication Bypass

=============================================================

CMS Openpage – ‘index.php’ SQL Injection

====================================================

Uiga Fan Club – SQL Injection

# Exploit Title: Uiga Fan Club SQL Injection Vulnerability

Apple Safari 4.0.5 – Object Tag ‘JavaScriptCore.dll’ Crash (Denial of Service)

Donar Player 2.2.0 – Local Crash (PoC)

#!/usr/bin/python

PowieSys 0.7.7 alpha – ‘index.php’ shownews SQL Injection

----------------------------Information------------------------------------------------

New Advisore Stack 1.1 – Directory Traversal

===============================================================================================

freeSSHd 1.2.4 – Denial of Service

#!/usr/bin/env python

Joomla! Component com_flash – SQL Injection

# Title : Joomla Component com_flash SQL Injection Vulnerability

agXchange ESM – ‘ucschcancelproc.jsp’ Open Redirection

source: https://www.securityfocus.com/bid/38879/info

PHPKIT 1.6.x – ‘b-day.php’ Addon SQL Injection

source: https://www.securityfocus.com/bid/38891/info

Woltlab Burning Board Teamsite Hack 3.0 – ‘ts_other.php’ SQL Injection

----------------------------Information-----------------------------------------------------

Adult Video Site Script – Multiple Vulnerabilities

========================================================================================

Jewelry Cart Software – ‘product.php’ SQL Injection

# Name : Jewelry Cart Software SQL Injection (product.php) ::-

no$gba 2.5c – ‘.nds’ Local crash

#!/usr/bin/env python

Crimson Editor r3.70 – Overwrite (SEH)

#!/usr/bin/python

Woltlab Burning Board Lite Addon – ‘lexikon.php’ SQL Injection

.-=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=-.

Fw-BofF (oolime-resurrection) 1.5.3beta – Multiple Remote File Inclusions

=============================================================================

WebMaid CMS 0.2-6 Beta – Multiple Remote File Inclusions

====================================================================

NotSopureEdit 1.4.1 – Remote File Inclusion

========================================================

4x CMS r26 – Authentication Bypass

=======================================================

4x CMS – ‘login.php’ Multiple SQL Injections

source: https://www.securityfocus.com/bid/39840/info

Joomla! Component Gift Exchange com_giftexchange 1.0 Beta – ‘pkg’ SQL Injection

---------------------------------------------------------------------------------

Pay Per Watch & Bid Auktions System – ‘auktion.php?id_auk’ Blind SQL Injection

----------------------------Information------------------------------------------------

KDE 4.4.1 – Ksysguard Remote Code Execution (via Cross Application Scripting)

# Exploit Title: Ksysguard RCE via Cross Application Scripting

eDisplay Personal FTP Server 1.0.0 – (Authenticated) Multiple Stack Buffer Overflows (1)

# Exploit Title : eDisplay Personal FTP server 1.0.0 Multiple Post-Authentication Stack BOF

ZKSoftware Biometric Attendence Managnmnet Hardware[MIPS] 2 – Improper Authentication

# Exploit Title: ZKSoftware Biometric Attendence managnmnet Hardware[MIPS] Improper Authentication.

Trouble Ticket Software – ‘ttx.cgi’ Arbitrary File Download

# Exploit Title: Trouble Ticket Software 0Day

Remote Help HTTP 0.0.7 – GET Format String Denial of Service

source: https://www.securityfocus.com/bid/38875/info

ZKSoftware ‘ZK5000’ – Remote Information Disclosure

source: https://www.securityfocus.com/bid/39789/info

quality point 1.0 newsfeed – SQL Injection / Cross-Site Scripting

sEc-r1z crEw The Leaders for Penetration Testing In Middle East.

eDisplay Personal FTP Server 1.0.0 – Denial of Service (PoC)

# Title: eDisplay Personal FTP server 1.0.0 Pre-Authentication DoS (PoC)

eDisplay Personal FTP Server 1.0.0 – (Authenticated) Multiple Crashs (SEH) (PoC)

# Title: eDisplay Personal FTP server 1.0.0 Multiple Post-Authentication Crash (PoC)

PHPscripte24 Preisschlacht Liveshop System – ‘index.php?aid’ SQL Injection

----------------------------Information------------------------------------------------

DirectAdmin 1.34.4 – Multiple Cross-Site Request Forgerys

=============================================================================

Joomla! Component & Plugin JE Tooltip 1.0 – Local File Inclusion

---------------------------------------------------------------------------------

IBM Lotus Notes 6.5.6 – ‘names.nsf’ Open Redirection

source: https://www.securityfocus.com/bid/38852/info

Xilisoft Video Converter Wizard – ‘.yuv’ Stack Buffer Overflow

source: https://www.securityfocus.com/bid/38854/info

PHPWind 6.0 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/38867/info

IBM Lotus Notes 6.5.x – ‘names.nsf’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/38880/info

vBulletin 4.0.2 – Search Cross-Site Scripting

source: https://www.securityfocus.com/bid/38895/info