remote

Opera historysearch – Cross-Site Scripting (Metasploit)

##

Apple iTunes 8.1.1 (Mac OSX) – ITms Overflow (Metasploit)

##

IBM OmniFind – ‘command’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/44940/info

D-Link DIR-300 – Multiple Security Bypass Vulnerabilities

source: https://www.securityfocus.com/bid/44743/info

pfSense – ‘interfaces.php?if’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/45272/info

pfSense – ‘status_graph.php?if’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/45272/info

pfSense – ‘pkg.php?xml’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/45272/info

pfSense – ‘pkg_edit.php?id’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/45272/info

Silo 2.1.1 – ‘wintab32.dll’ DLL Loading Arbitrary Code Execution

// source: https://www.securityfocus.com/bid/44726/info

PHP 5.3.x – ‘mb_strcut()’ Information Disclosure

# source: https://www.securityfocus.com/bid/44727/info

filecopa ftp server 6.01 – Directory Traversal

# Exploit title: FileCOPA FTP Server 6.01 directory traversal

ProFTPd IAC 1.3.x – Remote Command Execution

# Exploit Title: ProFTPD IAC Remote Root Exploit

Femitter FTP Server 1.04 – Directory Traversal

# Exploit Title: Fermitter Server FTP Directory Traversal

AT-TFTP Server 1.8 – Directory Traversal

# _ ____ __ __ ___

pfSense 2 Beta 4 – ‘graph.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/44738/info

MOXA MediaDBPlayback – ActiveX Control Buffer Overflow (Metasploit)

##

Quick Tftp Server Pro 2.1 – Directory Traversal

# _ ____ __ __ ___

WinTFTP Server Pro 3.1 – Directory Traversal

# _ ____ __ __ ___

Google Android 2.0 < 2.1 - Code Execution (Reverse Shell 10.0.2.2:2222/TCP)

woot

CA BrightStor ARCserve for Laptops & Desktops LGServer – Multiple Commands Buffer Overflows (Metasploit)

##

Microsoft Internet Explorer 6/7/8 – Memory Corruption

# Internet Explorer Memory Corruption 0day Vulnerability CVE-2010-3962

Webster HTTP Server – GET Buffer Overflow (Metasploit)

##

CA BrightStor ARCserve License Service – ‘GCR NETWORK’ Remote Buffer Overflow (Metasploit)

##

CA BrightStor ARCserve for Laptops & Desktops LGServer – Remote Buffer Overflow (Metasploit) (3)

##

CA BrightStor ARCserve for Laptops & Desktops LGServer – Remote Buffer Overflow (Metasploit) (2)

##

VideoLAN VLC Media Player 1.1.x – Calling Convention Remote Buffer Overflow

source: https://www.securityfocus.com/bid/44909/info

Apache Shiro – Directory Traversal

source: https://www.securityfocus.com/bid/44616/info

BroadWorks – Call Detail Record Security Bypass

source: https://www.securityfocus.com/bid/44597/info

Home File Share Server 0.7.2 32 – Directory Traversal

source: https://www.securityfocus.com/bid/44580/info

Project Jug 1.0.0 – Directory Traversal

source: https://www.securityfocus.com/bid/44569/info

Mongoose Web Server 2.11 – Directory Traversal

# Exploit Title: Mongoose 2.11 Directory Traversal

Yaws 1.89 – Directory Traversal

# Exploit Title: Yaws 1.89 Directory Traversal

Buffy 1.3 – Directory Traversal

SmallFTPd 1.0.3 – Directory Traversal

# _ ____ __ __ ___

Home FTP Server 1.11.1.149 – ‘RETR’/’DELE’/’RMD’ Directory Traversal

Mozilla Firefox 3.6.8 < 3.6.11 - Interleaving 'document.write' / 'appendChild' Remote Overflow

Home FTP Server 1.11.1.149 – (Authenticated) Directory Traversal

# Exploit Title: Home FTP Server Directory Traversal

XBMC 9.04.1r20672 – ‘soap_action_name’ POST UPnP ‘sscanf’ Remote Buffer Overflow

#!/usr/bin/env python

DATAC RealWin SCADA Server 1.06 – Remote Buffer Overflow

# Exploit Title: RealWin SCADA System SEH Overwrite

MinaliC WebServer 1.0 – Remote Source Disclosure / File Download

###################################################################

MinaliC WebServer 1.0 – Directory Traversal

------------------------------------------------------------------------

NitroView ESM – ‘ess.pm’ Remote Command Execution

source: https://www.securityfocus.com/bid/44421/info

NitroSecurity ESM 8.4.0a – Remote Code Execution

-- Product description:

Microsoft Windows Vista – ‘lpksetup.exe oci.dll’ DLL Loading Arbitrary Code Execution

// source: https://www.securityfocus.com/bid/44414/info

Oracle VM Server Virtual Server Agent – Command Injection (Metasploit)

##

Adobe Shockwave Player – rcsL Memory Corruption (Metasploit)

##

Sawmill Enterprise < 8.1.7.3 - Multiple Vulnerabilities

SEC Consult Security Advisory < 20101021-0 >

Adobe Shockwave Player – ‘rcsL chunk’ Memory Corruption

Abysssec Inc Public Advisory

Microsoft ASP.NET – Auto-Decryptor File Download (MS10-070)

#!/usr/bin/ruby -w

Oracle JRE – java.net.URLConnection class Same-of-Origin ‘SOP’ Policy Bypass

Description