remote

SmarterMail 7.1.3876 – Directory Traversal

# Note: Fixed by the vendor in version 7.2.3925

Novell iPrint Client Browser Plugin – ‘call-back-url’ Remote Stack Overflow

'''

YelloSoft Pinky 1.0 – Directory Traversal

source: https://www.securityfocus.com/bid/43358/info

Axigen Webmail 1.0.1 – Directory Traversal

source: https://www.securityfocus.com/bid/43230/info

Integard Pro 2.2.0.9026 – Windows 7 ROP-Code (Metasploit)

# Exploit Title: Integard Pro 2.2.0.9026 (Win7 ROP-Code Metasploit Module)

Mozilla Firefox 3.6.8 – ‘Math.random()’ Cross Domain Information Disclosure

// source: https://www.securityfocus.com/bid/43222/info

IBM Lotus Domino iCalendar – Email Address Stack Buffer Overflow

source: http://labs.mwrinfosecurity.com/advisories/lotus_domino_ical_stack_buffer_overflow/

Novell iPrint Client Browser Plugin – ExecuteRequest debug Stack Overflow

YOPS – Web Server Remote Command Execution

[DCA-00015]

Integard Home and Pro 2 – Remote HTTP Buffer Overflow

class Metasploit3 < Msf::Exploit::Remote

weborf 0.12.2 – Directory Traversal

Title: Weborf httpd

Microsoft MPEG Layer-3 – Remote Command Execution

'''

Samba 3.3.12 (Linux x86) – ‘chain_reply’ Memory Corruption (Metasploit)

##

Microsoft Movie Maker – Remote Code Execution (MS10-016)

'''

Trend Micro Internet Security Pro 2010 – ActiveX ‘extSetOwner()’ Remote Code Execution (2)

Accton-based switches (3com / Dell / SMC / Foundry / EdgeCore) – Backdoor Password

On the 15th of august 2009, at the HAR2009 conference, the existence of a backdoor password in Accton-based switches ...

tftp desktop 2.5 – Directory Traversal

+------------------------------------------------------------------------+

TFTPDWIN 0.4.2 – Directory Traversal

+------------------------------------------------------------------------+

Adobe Acrobat Reader and Flash Player – ‘newclass’ Invalid Pointer

'''

UltraVNC 1.0.8.2 – DLL Loading Arbitrary Code Execution

// source: https://www.securityfocus.com/bid/42846/info

Bloodshed Dev-C++ 4.9.9.2 – Multiple EXE Loading Arbitrary Code Executions

// source: https://www.securityfocus.com/bid/42737/info

SquirrelMail PGP Plugin – Command Execution (SMTP) (Metasploit)

##

httpdx – ‘tolog()’ Format String (Metasploit) (2)

##

Xitami Web Server 2.5c2 – If-Modified-Since Overflow (Metasploit)

##

httpdx – ‘tolog()’ Format String (Metasploit) (1)

##

Microsoft Internet Explorer – Object Type (MS03-020) (Metasploit)

##

Mercur Messaging 2005 – IMAP Login Buffer Overflow (Metasploit)

##

Eureka Email Client 2.2q – ERR Remote Buffer Overflow (Metasploit) (2)

##

NetTransport Download Manager 2.90.510 – Remote Buffer Overflow (Metasploit)

##

Microsoft RRAS Service – RASMAN Registry Overflow (MS06-025) (Metasploit)

##

Microsoft Services – ‘nwapi32.dll’ (MS06-066) (Metasploit)

##

NTP daemon readvar – Remote Buffer Overflow (Metasploit)

##

Deepin TFTP Server 1.25 – Directory Traversal

#Software : Deepin TFTP Server Directory Traversal Vulnerability Software Version : v1.25

Nagios XI – ‘users.php’ SQL Injection

source: https://www.securityfocus.com/bid/42661/info

Nagios XI – ‘login.php’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/42604/info

Flock Browser 3.0.0 – Malformed Bookmark HTML Injection

source: https://www.securityfocus.com/bid/42556/info

Enemy Territory: Quake Wars 1.5.12642.33243 – Remote Buffer Overflow

source! https://www.securityfocus.com/bid/40991/info

Samba 3.0.20 < 3.0.25rc3 - 'Username' map script' Command Execution (Metasploit)

##

EasyFTP Server 1.7.0.11 – list.html path Stack Buffer Overflow (Metasploit)

##

Microsoft Windows – ‘srv2.sys’ SMB Negotiate ProcessID Function Table Dereference (MS09-050)

Microsoft SRV2.SYS SMB Negotiate ProcessID Function Table Dereference

Microsoft Internet Explorer 8 – ‘toStaticHTML()’ HTML Sanitization Bypass

source: https://www.securityfocus.com/bid/42467/info

123 FlashChat 7.8 – Multiple Vulnerabilities

|------------------------------------------------------------------|

Adobe ColdFusion – Directory Traversal

# Working GET request courtesy of carnal0wnage:

Microsoft Windows Kerberos – ‘Pass The Ticket’ Replay Security Bypass

source: https://www.securityfocus.com/bid/42435/info

ServletExec – Directory Traversal / Authentication Bypass

source: https://www.securityfocus.com/bid/42411/info

Microsoft Windows – ANI LoadAniIcon() Chunk Size Stack Buffer Overflow (HTTP) (MS07-017) (Metasploit)

##

Portable Document Format – Specification Signature Collision

source: https://www.securityfocus.com/bid/42377/info

EasyFTP Server 1.7.0.11 – (Authenticated) Multiple Commands Remote Buffer Overflows

# Exploit Title: Easy FTP Server v1.7.0.11 Multiple Command Buffer Overflow

RSP MP3 Player – OCX ActiveX Buffer Overflow HeapSpray

. . . \ /

Easy FTP 1.7.0.11 – ‘NLST’ / ‘NLST -al’ / ‘APPE’ / ‘RETR’ / ‘SIZE’ / ‘XCWD’ Remote Buffer Overflow

# Exploit Title: Easy FTP Server v1.7.0.11 NLST , NLST -al, APPE, RETR , SIZE and XCWD Commands Remote Buffer Overfl...