multiple

Applicure dotDefender 4.01-3 – Persistent Cross-Site Scripting

An advisory by EnableSecurity.

Subdreamer Pro 3.0.4 – CMS Upload

__________ __ __ .__

Weborf HTTP Server – Denial of Service

[DCA-0012]

Apache Axis2 1.x – ‘/axis2/axis2-admin’ Session Fixation

source: https://www.securityfocus.com/bid/41076/info

Interscan Web Security 5.0 – Arbitrary File Upload / Privilege Escalation

Advisory Name: Local Privilege Escalation in InterScan Web Security Virtual

Interscan Web Security Virtual Appliance 5.0 – Arbitrary File Download

# Exploit Title: Arbitrary File Download in InterScan Web Security

Solaris Sadmind – Command Execution (Metasploit)

##

Plesk Server Administrator (PSA) – ‘locale’ Local File Inclusion

source: https://www.securityfocus.com/bid/40813/info

Spring Framework – Arbitrary code Execution

CVE-2010-1622: Spring Framework execution of arbitrary code

Litespeed Technologies – Web Server Remote Poison Null Byte

Litespeed Technologies Web Server Remote Poison null byte Zero-Day

(GREEZLE) Global Real Estate Agent Login – Multiple SQL Injections

source: https://www.securityfocus.com/bid/40676/info

Joomla! Component Jreservation 1.5 – SQL Injection / Cross-Site Scripting

============================================================

Adobe Flash / Reader – Live Malware

# Exploit-DB Note - Live POC originally found at http://qoop.org/security/poc/cve-2010-1297/

JForum 2.1.8 BookMarks – Cross-Site Request Forgery / Cross-Site Scripting

JForum 2.1.8 bookmarks CSRF & XSS

DM Database Server – ‘SP_DEL_BAK_EXPIRED’ Memory Corruption

source: https://www.securityfocus.com/bid/40460/info

Nginx 0.6.36 – Directory Traversal

# Exploit Title: nginx [engine x] http server

VideoLAN VLC Media Player 1.0.6 – ‘.avi’ Media File Crash (PoC)

#!/usr/bin/python

Brekeke PBX 2.4.4.8 – ‘pbx/gate’ Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/40407/info

ProWeb Design – SQL Injection

__ __

e107 – Code Exection

# Exploit Title: e107 Code Exec

Apache Axis2 Administration Console – (Authenticated) Cross-Site Scripting

PR10-03 Authenticated Cross-Site Scripting Vulnerability (XSS) within Apache Axis2 administration console

VMware View Portal 3.1 – Cross-Site Scripting

[DSECRG-09-058] Vmware View - XSS vulnerability

Pargoon CMS – Denial of Service

#################################################################

VMware View 3.1.x – URL Processing Cross-Site Scripting

source: https://www.securityfocus.com/bid/39949/info

WordPress Plugin TYPO3 ‘t3m_cumulus_tagcloud’ Extension 1.0 – HTML Injection / Cross-Site Scripting

source: https://www.securityfocus.com/bid/39926/info

All Browsers – Long Unicode Denial of Service (PoC)

Dr_IDE - All Browsers - Long Unicode DoS PoC

All browsers – Crash

===============================

Apache ActiveMQ 5.3 – ‘admin/queueBrowse’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/39771/info

WebKit 532.5 – Stack Exhaustion

HP System Management Homepage – ‘RedirectUrl’ Open Redirection

source: https://www.securityfocus.com/bid/39676/info

Invision Power Board – Denial of Service

==============================================

Apache ActiveMQ 5.2/5.3 – Source Code Information Disclosure

source: https://www.securityfocus.com/bid/39636/info

Apache Tomcat 5.5.0 < 5.5.29 / 6.0.0 < 6.0.26 - Information Disclosure

CVE-2010-1157: Apache Tomcat information disclosure vulnerability

Multiple Browsers – Audio Tag Denial of Service

#!/usr/bin/python

Multi-Threaded HTTP Server 1.1 – Directory Traversal (1)

################################################################################

Apache OFBiz – Admin Creator

Apache OFBiz FULLADMIN Creator PoC Payload.

Apache OFBiz – Remote Execution (via SQL Execution)

Apache OFBiz SQL Remote Execution PoC Payload.

Oracle E-Business Suite Financials 12 – ‘jtfwcpnt.jsp’ SQL Injection

source: https://www.securityfocus.com/bid/39510/info

Aircrack-NG Tools svn r1675 – Remote Heap Buffer Overflow (PoC)

#!/usr/bin/env python

netkar-PRO 1.1 – Remote Stack Buffer Overflow

source: https://www.securityfocus.com/bid/39555/info

VMware Remote Console e.x.p build-158248 – Format String

[DSECRG-09-053] VMware Remote Console - format string vulnerability

PHP 5.3.0 – ‘getopt()’ Denial of Service

Asset Manager 1.0 – Arbitrary File Upload

# Title: Asset Manager ( Shell Upload Vulnerability )

JAVA Web Start – Arbitrary Command-Line Injection

Bye bye my little 0day :(, Tavis Ormandy did a great job uncovering a big logic flaw within Java JRE. I discovered th...

Tiny Java Web Server 1.71 – Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/39666/info

miniature java Web server 1.71 – Multiple Vulnerabilities

# Exploit Title: Miniature Java Web Server

Multiple Vendor ‘librpc.dll’ Signedness Error – Remote Code Execution

# Exploit Title: ZDI-10-023: Multiple Vendor librpc.dll Signedness Error Remote Code Execution Vulnerability

Local Glibc Shared Library (.so) 2.11.1 – Code Execution

# Exploit Title: Local Glibc shared library (.so) exploit

Miranda IM 0.8.16 – Information Disclosure

source: https://www.securityfocus.com/bid/39209/info

QuickEStore 6.1 – Backup Dump

========================================================================================