remote

Microsoft Internet Explorer 8 – CSS Parser

#!/usr/bin/env ruby

Microsoft Internet Explorer – DHTML Behaviour Use-After-Free (MS10-018) (Metasploit)

##

Apache Tomcat Manager – Application Deployer (Authenticated) Code Execution (Metasploit)

##

Axis2 / SAP BusinessObjects – (Authenticated) Code Execution (via SOAP) (Metasploit)

##

Axis2 – (Authenticated) Code Execution (via REST) (Metasploit)

##

Crystal Reports Viewer 12.0.0.549 – ‘PrintControl.dll’ ActiveX

Exim 4.63 – Remote Command Execution

#Exim 4.63 (RedHat/Centos/Debian) Remote Root Exploit by Kingcope

Helix Server 14.0.1.571 – Administration Interface Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/45340/info

Litespeed Web Server 4.0.17 with PHP (FreeBSD) – Remote Overflow

# LiteSpeed Web Server 4.0.17 w/ PHP Remote Exploit for FreeBSD

Mozilla Firefox/Thunderbird/SeaMonkey – Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/45353/info

VMware Tools – Update OS Command Injection

VMware Tools update OS Command Injection

RDM Embedded Lock Manager < 9.x - 'lm_tcp' Service Buffer Overflow

source: https://www.securityfocus.com/bid/45245/info

Freefloat FTP Server – Directory Traversal

source: https://www.securityfocus.com/bid/45218/info

UnrealIRCd 3.2.8.1 – Backdoor Command Execution (Metasploit)

##

Freefloat FTP Server – Remote Buffer Overflow

# Exploit Title: Freefloat FTP Server Buffer Overflow Vulnerability

ProFTPd-1.3.3c – Backdoor Command Execution (Metasploit)

##

Viscom Image Viewer CP Gold 6 – ActiveX ‘TifMergeMultiFiles()’ Remote Buffer Overflow

iOS iFTPStorage 1.3 – Directory Traversal

#############################################

ProFTPd 1.3.2 rc3 < 1.3.3b (FreeBSD) - Telnet IAC Buffer Overflow (Metasploit)

##

Microsoft Windows – (Authenticated) User Code Execution (Metasploit)

##

ProFTPd 1.3.3c – Compromised Source Backdoor Remote Code Execution

== ProFTPD Compromise Report ==

Viscom Image Viewer CP Gold 5.5 – ‘Image2PDF()’ Remote Buffer Overflow (Metasploit)

# Image Viewer CP gold v5.5 Buffer Overflow

EnjoySAP SAP GUI – ActiveX Control Arbitrary File Download (Metasploit)

##

J-Integra 2.11 – ActiveX SetIdentity() Buffer Overflow

J-Integra 2.11 – Remote Code Execution

POP Peeper 3.4 – UIDL Buffer Overflow (Metasploit)

##

SAP Business One License Manager 2005 – Remote Buffer Overflow (Metasploit)

##

DATAC RealWin SCADA Server 2.0 (Build 6.1.8.10) – SCPC_INITIALIZE_RF Buffer Overflow (Metasploit)

##

DATAC RealWin SCADA Server 2.0 (Build 6.1.8.10) – SCPC_INITIALIZE Buffer Overflow (Metasploit)

##

WU-FTPD – Site EXEC/INDEX Format String (Metasploit)

##

HP LaserJet – Directory Traversal in PJL Interface

n.runs AG

VMware 2 Web Server – Directory Traversal

# Exploit Title:VMware 2 Web Server Directory Traversal

D-Link DIR-300 – WiFi Key Security Bypass

source: https://www.securityfocus.com/bid/45038/info

Adobe RoboHelp Server 8 – Arbitrary File Upload / Execution (Metasploit)

##

Hewlett-Packard (HP) Power Manager Administration – Remote Buffer Overflow (Metasploit)

##

Symantec Altiris Deployment Solution – ActiveX Control Arbitrary File Download and Execute (Metasploit)

##

America Online ICQ – ActiveX Control Arbitrary File Download and Execute (Metasploit)

##

Zenturi ProgramChecker – ActiveX Control Arbitrary File Download (Metasploit)

##

Symantec AppStream LaunchObj – ActiveX Control Arbitrary File Download and Execute (Metasploit)

##

Microsoft Visual Studio – Msmask32.ocx ActiveX Buffer Overflow (MS08-070) (Metasploit)

##

Realtek Media Player Playlist – Remote Buffer Overflow (Metasploit)

##

DATAC RealWin SCADA Server 2.0 (Build 6.1.8.10) – SCPC_TXTEVENT Buffer Overflow (Metasploit)

##

Novell NetIdentity Agent – XTIERRPCPIPE Named Pipe Buffer Overflow (Metasploit)

##

Oracle 10gR2 – TNS Listener AUTH_SESSKEY Buffer Overflow (Metasploit)

##

Oracle 8i – TNS Listener SERVICE_NAME Buffer Overflow (Metasploit)

##

Oracle 8i – TNS Listener ‘ARGUMENTS’ Remote Buffer Overflow (Metasploit)

##

Motorola Timbuktu Pro – Directory Traversal / Arbitrary File Upload (Metasploit)

##

Wireshark – LWRES Dissector getaddrsbyname_request Buffer Overflow (Loop) (Metasploit)

##

PoPToP – Negative Read Overflow (Metasploit)

##

ImageShack Toolbar 4.8.3.75 – Remote Code Execution

Sploit #1