remote

MySQL – Remote User Enumeration

# MySQL User Account Enumeration Utility

freeFTPd 1.2.6 – Remote Authentication Bypass

FreeFTPD all versions Remote System Level Exploit Zero-Day -- No username needed, straightforward rooting!

IBM System Director Agent – Remote System Level

IBM System Director Remote System Level Exploit (CVE-2009-0880 extended zeroday)

MySQL 5.1/5.5 (Windows) – ‘MySQLJackpot’ Remote Command Execution

FARLiGHT ELiTE HACKERS LEGACY R3L3ASE

Fortinet FortiWeb (Multiple Appliances) – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/56774/info

Network Shutdown Module 3.21 – ‘sort_values’ Remote PHP Code Injection (Metasploit)

##

Apple QuickTime 7.7.2 – MIME Type Buffer Overflow (Metasploit)

##

Apple QuickTime 7.7.2 – TeXML Style Element font-table Field Stack Buffer Overflow (Metasploit)

##

Twitter for iPhone – Man in the Middle Security

source: https://www.securityfocus.com/bid/56665/info

Greenstone – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/56662/info

NetIQ Privileged User Manager 2.3.1 – ‘ldapagnt_eval()’ Perl Remote Code Execution (Metasploit)

##

Narcissus Image Configuration – Passthru (Metasploit)

##

LAN.FS Messenger 2.4 – Command Execution

Title:

Novell File Reporter (NFR) Agent FSFUI Record – Arbitrary File Upload / Remote Code Execution (Metasploit)

##

Novell NetIQ Privileged User Manager 2.3.1 – ‘ldapagnt.dll’ ldapagnt_eval() Perl Code Evaluation Remote Code Execution

Novell NetIQ Privileged User Manager 2.3.1 ldapagnt.dll ldapagnt_eval()

Novell NetIQ Privileged User Manager 2.3.1 – ‘auth.dll’ pa_modify_accounts() Remote Code Execution

Novell NetIQ Privileged User Manager 2.3.1 auth.dll pa_modify_accounts()

Oracle Database Client System Analyzer – Arbitrary File Upload (Metasploit)

##

Huawei (Multiple Products) – Password Encryption

source: https://www.securityfocus.com/bid/56510/info

Invision Power Board (IP.Board) 3.3.4 – ‘Unserialize()’ PHP Code Execution (Metasploit)

##

Jira Scriptrunner 2.0.7 – Cross-Site Request Forgery / Remote Code Execution (Metasploit)

#[Author] Ben 'highjack' Sheppard

Java Applet – JAX-WS Remote Code Execution (Metasploit)

##

Cryptocat 2.0.22 – Arbitrary Script Injection

source: https://www.securityfocus.com/bid/61093/info

Cryptocat 2.0.21 Chrome Extension – ‘img/keygen.gif’ File Information Disclosure

source: https://www.securityfocus.com/bid/61090/info

WinRM – VBS Remote Code Execution (Metasploit)

##

EMC NetWorker – Format String (Metasploit)

##

Sophos Products – Multiple Vulnerabilities

List, I've completed the second paper in my series analyzing Sophos

BigAnt Server 2.52 SP5 – Remote Stack Overflow ROP-Based (SEH) (ASLR + DEP Bypass)

# Exploit Title: BigAnt Server 2.52 SP5 SEH Stack Overflow ROP-based exploit (ASLR + DEP bypass)

HP Intelligent Management Center UAM – Remote Buffer Overflow (Metasploit)

##

Aladdin Knowledge System Ltd – ‘ChooseFilePath’ Remote Buffer Overflow (Metasploit)

##

Axigen Mail Server – ‘Filename’ Directory Traversal

source: https://www.securityfocus.com/bid/56343/info

Freefloat FTP Server – ‘PUT’ Remote Buffer Overflow

#!/usr/bin/python

HP Operations Agent – Opcode ‘coda.exe’ 0x34 Buffer Overflow (Metasploit)

##

HP Operations Agent – Opcode ‘coda.exe’ 0x8c Buffer Overflow (Metasploit)

##

ManageEngine Security Manager Plus 5.5 build 5505 – SQL Injection (Metasploit)

##

Aladdin Knowledge System Ltd – ‘PrivAgent.ocx’ ChooseFilePath Buffer Overflow

Turbo FTP Server 1.30.823 – PORT Overflow (Metasploit)

##

FirePass 7.0 SSL VPN – ‘refreshURL’ Open Redirection

source: https://www.securityfocus.com/bid/56156/info

ManageEngine Security Manager Plus 5.5 build 5505 – Remote SYSTEM SQL Injection (Metasploit)

##

ManageEngine Security Manager Plus 5.5 build 5505 – Remote Root/SYSTEM SQL Injection

#!/usr/bin/python

ModSecurity – ‘POST’ Security Bypass

source: https://www.securityfocus.com/bid/56096/info

Samsung Kies 2.3.2.12054_20 – Multiple Vulnerabilities

Advisory ID: HTB23099

AjaXplorer – ‘checkInstall.php’ Remote Command Execution (Metasploit)

##

Metasploit < 4.4 - pcap_log Plugin Privilege Escalation (Metasploit)

##

KeyHelp – ActiveX LaunchTriPane Remote Code Execution (Metasploit)

##

QNX QCONN – Remote Command Execution (Metasploit)

##

Webmin 1.580 – ‘/file/show.cgi’ Remote Command Execution (Metasploit)

##

Samba 3.4.16/3.5.14/3.6.4 – SetInformationPolicy AuditEventsInfo Heap Overflow (Metasploit)

##

ZEN Load Balancer Filelog – Command Execution (Metasploit)

##

Avaya IP Office Customer Call Reporter – ‘ImageUpload.ashx’ Remote Command Execution (Metasploit)

##

Oracle Business Transaction Management FlashTunnelService – Remote Code Execution (Metasploit)

##