Exploits

60cycleCMS – ‘select.php’ Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/38637/info

httpdx 1.5.3 – ‘.png’ File Handling Remote Denial of Service

source: https://www.securityfocus.com/bid/38638/info

DDL CMS 2.1 – ‘blacklist.php’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/38643/info

SUPERAntiSpyware 4.34.1000 and SuperAdBlocker 4.6.1000 – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/38645/info

Employee TimeClock Software 0.99 – SQL Injection

source: http://www.securityfocus.com/archive/1/509995

PHP File Sharing System 1.5.1 – Multiple Vulnerabilities

Title: PHP File Sharing System 1.5.1 Multiple Vulnerabilities

SAP GUI 7.10 – WebViewer3D Active-X JIT-Spray

SAP GUI version 7.10 WebViewer3D Active-X JIT-Spray exploit

Apache SpamAssassin Milter Plugin 0.3.1 – Remote Command Execution

Description: The Spamassassin Milter plugin suffers from a remote root command execution vulnerability. Full exploit ...

Lenovo Hotkey Driver 5.33 – Local Privilege Escalation

Author: Chilik Tamir - Amdocs Power Security Testing Group

Uebimiau Webmail 3.2.0-2.0 – Email Disclosure

# Exploit Title: Uebimiau Webmail v3.2.0-2.0 | Email Disclosure

Joomla! Component com_hezacontent 1.0 – ‘id’ SQL Injection

[!]===========================================================================[!]

EasyFTP Server 1.7.0.2 – CWD Remote Buffer Overflow (Metasploit)

# Exploit Title: Easy~FTP

JAD java Decompiler 1.5.8g – ‘argument’ Local Crash

#!/usr/bin/env python

JAD java Decompiler 1.5.8g – ‘.class’ Stack Overflow Denial of Service

#!/usr/bin/env python

mhproducts Kleinanzeigenmarkt – ‘search.php’ SQL Injection

----------------------------Information------------------------------------------------

Wild CMS – SQL Injection

# Title: [SQL injection vulnerability in Wild CMS]

nus newssystem 1.02 – ‘id’ SQL Injection

.-=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=-.

Orbital Viewer – ‘.ORB’ File Parsing Buffer Overflow (Metasploit)

##

TikiWik < 4.2 - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/38608/info

IBM ENOVIA SmarTeam – ‘LoginPage.aspx’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/38612/info

DZ Auktionshaus ‘V4.rgo’ – ‘id’ news.php?SQL Injection

----------------------------Information------------------------------------------------

TRIBISUR 2.0 – Local File Inclusion

# TRIBISUR Exploit database separated by exploit 0

QuickZip 4.x – ‘.zip’ Local Universal Buffer Overflow

#!/usr/bin/python

Chaton 1.5.2 – Local File Inclusion

[+] Chaton

Microsoft Windows XP/Vista – ‘.ani tagBITMAPINFOHEADER’ Denial of Service

source: https://www.securityfocus.com/bid/38579/info

Pre E-Learning Portal – ‘search_result.asp’ SQL Injection

source: https://www.securityfocus.com/bid/38582/info

Max Network Technology BBSMAX 4.2 – ‘post.aspx’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/38592/info

ASPCode CMS 1.5.8 – ‘default.asp’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/38601/info

KDPics 1.18 – ‘/admin/index.php’ Authentication Bypass

source: https://www.securityfocus.com/bid/38603/info

BigForum 4.5 – SQL Injection

#!/usr/bin/perl

Yahoo Player 1.0 – ‘.m3u’ / ‘.pls’ / ‘.ypl’ Local Buffer Overflow (SEH)

#!/usr/bin/perl

Bild Flirt System 2.0 – ‘index.php?id’ SQL Injection

----------------------------Information------------------------------------------------

Apache 2.2.14 mod_isapi – Dangling Pointer Remote SYSTEM

#include

(Tod Miller’s) Sudo/SudoEdit 1.6.9p21/1.7.2p4 – Local Privilege Escalation

#!/bin/sh

TopDownloads MP3 Player 1.0 – ‘.m3u’ Crash

#!/usr/bin/env python

OpenCart 1.3.2 – ‘page’ SQL Injection

source: https://www.securityfocus.com/bid/38605/info

Google Chrome 4.0.249 – XML Denial of Service (PoC)

# Exploit Title: Google Chrome 4.0.249 XML PoC

PHPCOIN 1.2.1 – ‘mod.php’ Local File Inclusion

# Exploit Title: phpCOIN 1.2.1 (mod.php) LFI vulnerability

dev4u CMS (Personenseiten) – ‘go_target.php’ SQL Injection

----------------------------Information------------------------------------------------

Flare 0.6 – Local Heap Overflow Denial of Service

# Exploit Title: Flare

phpCOIN 1.2.1 – ‘mod’ Local File Inclusion

source: https://www.securityfocus.com/bid/38576/info

Microsoft Windows XP/2000 – Help File Relative Path Remote Command Execution

source: https://www.securityfocus.com/bid/38661/info

OneCMS 2.5 – SQL Injection

# Exploit Title: ONECMS v2.5 SQL INJECTION

Kolang 4.3.10 < 5.3.0 - 'proc_open()' PHP 'safe_mode' Bypass

Auktionshaus 3.0.0.1 – ‘news.php?id’ SQL Injection

----------------------------Information------------------------------------------------

E-topbiz Link ADS 1 PHP script – ‘linkid’ Blind SQL Injection

# E-topbiz Link ADS 1 PHP script (linkid) Blind SQL Injection Vulnerability

FreeBSD 8.0 / OpenBSD 4.x – ‘ftpd’ Null Pointer Dereference Denial of Service

// source: https://www.securityfocus.com/bid/38559/info

Natychmiast CMS – Multiple Cross-Site Scripting / SQL Injections

source: https://www.securityfocus.com/bid/38561/info

BS.Player 2.51 – ‘.mp3’ Buffer Overflow

source: https://www.securityfocus.com/bid/38568/info

VideoLAN VLC Media Player 1.0.x – Bookmark Creation Buffer Overflow

source: https://www.securityfocus.com/bid/38569/info