Exploits

eWebeditor ASP Version – Multiple Vulnerabilities

#################################################################

Ingres Database 9.3 – Heap Buffer Overflow

source: https://www.securityfocus.com/bid/38001/info

COMTREND CT-507 IT ADSL Router – ‘scvrtsrv.cmd’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/38004/info

Hybserv2 – ‘:help’ Denial of Service

source: https://www.securityfocus.com/bid/38006/info

Joomla! Component CCNewsLetter – Directory Traversal

[~]>> ...[BEGIN ADVISORY]...

Novaboard 1.1.2 – SQL Injection

#############################################################

Joomla! Component com_kunena – Blind SQL Injection

[~]>> ...[BEGIN ADVISORY]...

Joomla! Component jVideoDirect – Blind SQL Injection

[~]>> ...[BEGIN ADVISORY]...

Rising AntiVirus 2008/2009/2010 – Local Privilege Escalation

//by Dlrow dlrow1991@ymail.com

Joomla! Component CCNewsLetter – Local File Inclusion

Joomla Component com_ccnewsletter Local File Inclusion

Audiotran 1.4.1 – ‘.pls’ Local Stack Buffer Overflow (Metasploit)

##

CommonSpot Server – ‘/utilities/longproc.cfm’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/37986/info

Battery Life Toolkit 1.0.9 – ‘bltk_sudo’ Local Privilege Escalation

source: https://www.securityfocus.com/bid/37996/info

Joomla! Component VirtueMart Module Customers_who_bought – SQL Injection

[~]>> ...[BEGIN ADVISORY]...

Joomla! Component com_virtuemart – order_status_id SQL Injection

[~]>> ...[BEGIN ADVISORY]...

CamShot 1.2 – Overwrite (SEH)

# CamShot SEH overwrite by tecnik

iOS Serversman 3.1.5 – HTTP Remote Denial of Service

#!/usr/bin/python

HP System Management Homepage 3.0.2 – ‘servercert’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/37968/info

SAP BusinessObjects 12 – URI redirection / Cross-Site Scripting

source: https://www.securityfocus.com/bid/37972/info

PostgreSQL – ‘bitsubstr’ Buffer Overflow

source: https://www.securityfocus.com/bid/37973/info

IBM DB2 – ‘REPEAT()’ Local Heap Buffer Overflow

source: https://www.securityfocus.com/bid/37976/info

Discuz! 6.0 – ‘tid’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/37982/info

Geo++ GNCASTER 1.4.0.7 – GET Denial of Service

source: https://www.securityfocus.com/bid/40009/info

Geo++ GNCASTER 1.4.0.7 NMEA-data – Denial of Service

source: https://www.securityfocus.com/bid/40015/info

AIC Audio Player 1.4.1.587 – Local Crash (PoC)

#!/usr/bin/python

UGiA PHP UPLOADER 0.2 – Arbitrary File Upload

========================================================================================

Joomla! 1.5.12 – Connect Back

#!/usr/bin/php

Joomla! 1.5.12 – read/exec Remote files

South River Technologies WebDrive Service 9.02 build 2232 – Bad Security Descriptor Privilege Escalation

##

KOL WaveIOX 1.04 – ‘.wav’ Local Buffer Overflow (PoC)

#!/usr/bin/perl

KOL Wave Player 1.0 – ‘.wav’ Local Buffer Overflow (PoC)

#!/usr/bin/perl

Winamp 5.572 – Local Overflow (SEH)

#!/usr/bin/python

Joomla! Component 3D Cloud – ‘tagcloud.swf’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/37958/info

Cisco Secure Desktop 3.x – ‘translation’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/37960/info

Winamp 5.572 – ‘whatsnew.txt’ Local Stack Overflow

# Tested on: Windows xp sp3

Winamp 5.572 (Windows XP SP3 DE) – ‘whatsnew.txt’ Local Buffer Overflow

# Tested on: WinXP SP3 De

AOL 9.5 – Phobos.Playlist ‘Import()’ Remote Buffer Overflow (Metasploit)

##

Status2k – Remote Add Admin

::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

Joomla! Component com_mochigames – SQL Injection

[~]>> ...[BEGIN ADVISORY]...

SilverStripe CMS 2.3.5 – Cross-Site Request Forgery / Open Redirection

# Exploit Title: Silverstripe

Mozilla Firefox 3.6 – XML Parser Memory Corruption (PoC) / Denial of Service

# Firefox 3.6(XML parser)memory corruption PoC/Dos

Opera 10.10 – XML Parser Denial of Service (PoC)

# From tiny islands of maldivies

Winamp 5.572 – ‘whatsnew.txt’ Stack Overflow (PoC)

# Author: Debug (eldadru@gmail.com)

BoastMachine 3.1 – Arbitrary File Upload

::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

P2GChinchilla HTTP Server 1.1.1 – Denial of Service

#!/usr/bin/perl

Sonique2 2.0 Beta Build 103 – Local Crash (PoC)

#!/usr/bin/python

magic-portal 2.1 – SQL Injection

::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

Joomla! Component com_ContentBlogList – SQL Injection

[~]>> ...[BEGIN ADVISORY]...

Joomla! Component com_casino – SQL Injection

[~]>> ...[BEGIN ADVISORY]...

Joomla! Component com_jbpublishdownfp – SQL Injection

[~]>> ...[BEGIN ADVISORY]...