Exploits

Mozilla Firefox 3.5.8 – Style Sheet redirection Information Disclosure

source: https://www.securityfocus.com/bid/38369/info

SopCast SopCore Control – ActiveX Remote Execution (PoC)

# Exploit Title: SopCast SopCore Control ActiveX Remote Exec 0day poc

CU Village CMS Site 1.0 – ‘print_view’ Blind SQL Injection

+===================================================================================+

UUSee ReliPlayer – ActiveX Remote Execution (PoC)

# Exploit Title: UUSee ReliPlayer ActiveX Remote Exec 0day POC

SPlayer XvidDecoder 3.3 – ActiveX Remote Execution (PoC)

# Author: superli

Joomla! Component com_ksadvertiser – SQL Injection

########################################################################

DELTAScripts PHPLinks – ‘catid’ SQL Injection

Name : DELTAScripts PHPLinks

Microsoft Windows Live Messenger 2009 – ActiveX Denial of Service

Product:

DELTAScripts PHPClassifieds – ‘rate.php’ Blind SQL Injection

Name : DELTAScripts PHPClassifieds

Joomla! Component Jobads – ‘type’ SQL Injection

source: https://www.securityfocus.com/bid/37686/info

Apple Mac OSX 10.x – ‘libc/strtod(3)’ Memory Corruption

// source: https://www.securityfocus.com/bid/37687/info

MATLAB R2009b – ‘dtoa’ Implementation Memory Corruption

source: https://www.securityfocus.com/bid/37688/info

Zeeways Technology – ‘product_desc.php’ SQL Injection

#############################################################

Ulisse’s Scripts 2.6.1 – ‘ladder.php’ SQL Injection

# Tested on: Windows Vista Home Premium and Linux 2.6.28.1 (Backtrack 3)

AutoIndex PHP Script – ‘index.php’ Directory Traversal

==============================================================================

Kantaris 0.5.6 – Local Denial of Service (PoC)

#!/usr/bin/perl

ttplayer 5.6Beta3 – Denial of Service (PoC)

# Exploit Title: ttplayer=5.6Beta3 Dos POC

Read Excel Script 1.1 – Arbitrary File Upload

Read Excel v1.1 Shell Upload Vulnerability

JcomBand toolbar on IE – ActiveX Buffer Overflow

JcomBand Exploit (heap spray)

Drupal 6.15 – Multiple Persistent Cross-Site Scripting Vulnerabilities

# Exploit Title: 0day Drupal

Joomla! Component Regional Booking – ‘id’ Blind SQL Injection

Joomla Component Regional Booking (id) Blind SQL Injection Vulnerability

Joomla! Component DM Orders – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/37655/info

dotProject 2.1.3 – Multiple SQL Injections / HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/37669/info

Juniper Networks JUNOS 7.1.1 – Malformed TCP Packet Denial of Service / Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/37670/info

Calendarix 0.7 – ‘calpath’ Remote File Inclusion

source: https://www.securityfocus.com/bid/37673/info

Datetopia Match Agency BiZ – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/40488/info

PlayMeNow 7.3/7.4 – Local Buffer Overflow (Metasploit)

# Tested on: Windows XP SP3 - English

ITaco Group ITaco.biz – ‘view_news’ SQL Injection

=============================================================================

PHPDirector Game Edition 0.1 – Local File Inclusion / SQL Injection / Cross-Site Scripting

# Exploit Title: PHPDirector Game Edition Multiple Vulnerabilities (LFI/SQLi/Xss)

Myuploader – Arbitrary File Upload

# Exploit Title: Myuploader >> upload shell exploit

Lebi soft Ziyaretci Defteri 7.5 – Database Disclosure

========================================================================================

Net Gitar Shop 1.0 – Database Disclosure

========================================================================================

PHPDug 2.0.0 – Cross-Site Scripting

========================================================================================

VP-ASP Shopping Cart 7.0 – Database Disclosure

========================================================================================

MobPartner Counter – Arbitrary File Upload

_____________________________________________________

GOM Audio – Local Crash (PoC)

# Exploit Title: [GOM Audio Local crash poc]

FlashGet 3.x – IEHelper Remote Execution (PoC)

# Exploit Title:flashget 3.x IEHelper remote exec 0day poc

Novell eDirectory 8.8 SP5 – (Authenticated) Remote Buffer Overflow

# Exploit Title: Novell eDirectory 8.8 SP5 (Post Auth) Remote BOF Exploit (0day)

Erolife AjxGaleri VT – Database Disclosure

==============================================================================

Joomla! Component com_perchagallery – SQL Injection

########################################################################

AWCM – Database Disclosure

Subject:AWCM

com_jembed – ‘catid’ Blind SQL Injection

Apple QuickTime 7.2/7.3 – RTSP Buffer Overflow

# Exploit Title: Apple QuickTime 7.2/7.3 RTSP BOF (Perl)

Docebo 3.6.0.2 (stable) – Local File Inclusion

# Exploit Title: Docebo 3.6.0.2 (stable) Local File Inclusion

DirectAdmin 1.33.6 – Symlink Security Bypass

Subject: DirectAdmin

D-Link DKVM-IP8 – Cross-Site Scripting

# Exploit Title: D-LINK DKVM-IP8 XSS Vulnerability

Milonic News – ‘viewnews’ SQL Injection

=============================================================================

Joomla! Component com_kk – Blind SQL Injection

#############################################################

Microsoft HTML Help Compiler (hhc.exe) – Buffer Overflow (PoC)

Microsoft’s HTML Help Compiler (hhc.exe) is free tool to build Microsoft Compiled HTML Help (.chm) files. It is inclu...

Joomla! Component com_king – Blind SQL Injection

#############################################################