multiple

Java Mini Web Server 1.0 – Directory Traversal / Cross-Site Scripting

# Exploit Title: Java Mini Web Server

Easy-Clanpage 2.1 – SQL Injection

+Name : Easy-Clanpage );

Jenkins Software RakNet 3.72 – Remote Integer Underflow

source: https://www.securityfocus.com/bid/38974/info

Mozilla Firefox 3.6 – ‘gfxTextRun::SanitizeGlyphRuns()’ Remote Memory Corruption

source: https://www.securityfocus.com/bid/38943/info

Cafu 9.06 – Multiple Remote Vulnerabilities

source: https://www.securityfocus.com/bid/38897/info

uhttp Server 0.1.0-alpha – Directory Traversal

uhttp Server Path Traversal Vulnerability

Jinais IRC Server 0.1.8 – Null Pointer (PoC)

Jinais IRC Server 0.1.8 - NULL Pointer PoC

ZKSoftware ‘ZK5000’ – Remote Information Disclosure

source: https://www.securityfocus.com/bid/39789/info

KDE 4.4.1 – Ksysguard Remote Code Execution (via Cross Application Scripting)

# Exploit Title: Ksysguard RCE via Cross Application Scripting

IBM Lotus Notes 6.5.x – ‘names.nsf’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/38880/info

IBM Lotus Notes 6.5.6 – ‘names.nsf’ Open Redirection

source: https://www.securityfocus.com/bid/38852/info

mplayer 4.4.1 – Null Pointer Dereference (PoC)

# Exploit Title: mplayer NULL

VariCAD 2010-2.05 EN – Local Buffer Overflow

# Exploit Title: VariCAD 2010-2.05 EN Local buffer overflow :)

Dojo Toolkit 1.4.1 – ‘/doh/runner.html’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/38739/info

Dojo Toolkit 1.4.1 – ‘/dijit/tests/_testCommon.js?theme’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/38739/info

(Multiple Products) – ‘banner.swf’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/38732/info

Embedthis Appweb 3.1.2 – Remote Denial of Service

#!/usr/bin/perl

DirectAdmin 1.33.6 – ‘CMD_DB_VIEW’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/38721/info

PHP (Multiple Functions) – Local Denial of Service

com_invoke()

FreeBSD / OpenBSD – ‘ftpd’ Null Pointer Dereference Denial of Service

The FreeBSD and OpenBSD 'ftpd' service is prone to a denial-of-service vulnerability because of a NULL-pointer derefe...

SUPERAntiSpyware 4.34.1000 and SuperAdBlocker 4.6.1000 – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/38645/info

Friendly Technologies TR-069 ACS 2.8.9 – Login SQL Injection

source: https://www.securityfocus.com/bid/38634/info

Apache SpamAssassin Milter Plugin 0.3.1 – Remote Command Execution

Description: The Spamassassin Milter plugin suffers from a remote root command execution vulnerability. Full exploit ...

(Tod Miller’s) Sudo/SudoEdit 1.6.9p21/1.7.2p4 – Local Privilege Escalation

#!/bin/sh

Flare 0.6 – Local Heap Overflow Denial of Service

# Exploit Title: Flare

Six Apart Vox – ‘search’ Page Cross-Site Scripting

source: https://www.securityfocus.com/bid/38575/info

Adobe Flash Player 10.1.51 – Local File Access Information Disclosure

source: https://www.securityfocus.com/bid/38517/info

IBM Lotus Domino 7.0.2 – ‘readme.nsf’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/38481/info

Oracle Siebel 7.7/7.8 – ‘/loyalty_enu/start.swe’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/38456/info

Mozilla Firefox 3.6 – Denial of Service (2)

Apple Safari 4.0.4 / Google Chrome 4.0.249 – CSS style Stack Overflow Denial of Service (PoC)

Apple Safari 4.0.4 & Google Chrome 4.0.249 CSS style Stack Overflow

Mozilla Firefox 3.6 – URL Spoofing

# Tested on: Windows XP SP2/3

Adobe (Multiple Products) – XML External Entity / XML Injection

( , ) (,

cPanel – Multiple Cross-Site Request Forgery Vulnerabilities

Create Database:

IBM Websphere Portal 6.0.1.5 Build wp6015 – Portlet Palette Search HTML Injection

source: https://www.securityfocus.com/bid/38360/info

PortWise SSL VPN 4.6 – ‘reloadFrame’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/38308/info

Apple iTunes 9.0.1 – ‘.pls’ Handling Buffer Overflow

# Exploit Title: iTunes .pls file handling buffer overflow

Multiple Browsers – Address bar Characters

#################################################################

Video Games Rentals Script – SQL Injection

# Exploit Title: video games rentals Script SQL injection Vulnerability

RSA – SecurID Cross-Site Scripting

Discovered 12-11-2008

X-Cart Pro 4.0.13 – SQL Injection

X-Cart Pro v4.0.13 SQL Injection Proof of Concept

Cisco Collaboration Server 5 – Cross-Site Scripting / Source Code Disclosure

Cisco Collaboration Server 5 XSS, Source Code Disclosure

LDAP – Injection

[+] Vurnerebility: LDAP Injection

Mongoose 2.8 – Space String Remote File Disclosure

source: https://www.securityfocus.com/bid/38145/info

JDownloader – ‘JDExternInterface.java’ Remote Code Execution

source: https://www.securityfocus.com/bid/38143/info

Mozilla Firefox 3.5.x and SeaMonkey 2.0.1 – Remote Denial of Service

source: https://www.securityfocus.com/bid/38132/info

Oracle 11g – Multiple Privilege Escalation Vulnerabilities

source: https://www.securityfocus.com/bid/38115/info

Oracle 10g – Multiple Privilege Escalation Vulnerabilities

source: https://www.securityfocus.com/bid/38115/info

IBM DB2 – ‘kuddb2’ Remote Denial of Service

source: https://www.securityfocus.com/bid/38018/info

Ingres Database 9.3 – Heap Buffer Overflow

source: https://www.securityfocus.com/bid/38001/info