remote

rpc.pcnfsd – Remote Format String

#include

EasyFTP Server 1.7.0.11 – ‘CWD’ (Authenticated) Remote Buffer Overflow

# Exploit Title: Easy FTP Server v1.7.0.11 CWD Command Remote Buffer Overflow Exploit (Post Auth)

EasyFTP Server 1.7.0.11 – ‘LIST’ (Authenticated) Remote Buffer Overflow

#!/usr/bin/python

EasyFTP Server 1.7.0.11 – ‘MKD’ (Authenticated) Remote Buffer Overflow

#!/usr/bin/python

Netscape Browser 9.0.0.6 – Clickjacking

Netscape

Apple Safari 4.0.2 – Clickjacking

Safari

Opera Browser 10.60 – Clickjacking

Opera

Avant Browser 11.7 build 45 – Clickjacking

Avant Browser

SAP DB 7.4 – WebTools Buffer Overflow (Metasploit)

##

Microsoft Internet Explorer – Daxctle.OCX KeyFrame Method Heap Buffer Overflow (MS06-067) (Metasploit)

##

Samba 2.2.8 (Linux x86) – ‘trans2open’ Remote Overflow (Metasploit)

##

Samba 3.0.24 (Linux) – ‘lsa_io_trans_names’ Heap Overflow (Metasploit)

##

IPSwitch WhatsUp Gold 8.03 – Remote Buffer Overflow (Metasploit)

##

Struts2/XWork < 2.2.0 - Remote Command Execution

Friday, July 9, 2010

Oracle WebLogic Server 10.3.3 – Encoded URL

source: https://www.securityfocus.com/bid/41620/info

Oracle Business Process Management 10.3.2 – Cross-Site Scripting

source: https://www.securityfocus.com/bid/41617/info

Free Download Manager 2.5 Build 758 – Remote Control Server Buffer Overflow (Metasploit)

##

eDirectory 8.7.3 – iMonitor Remote Stack Buffer Overflow (Metasploit)

##

Asterisk Recording Interface 0.7.15/0.10 – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/41571/info

NaviCOPA Web Server 2.0.1 – URL Handling Buffer Overflow (Metasploit)

##

InterSystems Cache – UtilConfigHome.csp Argument Buffer Overflow (Metasploit)

##

Blue Coat WinProxy – Host Header Overflow (Metasploit)

##

Microsoft Internet Explorer – ‘Aurora’ Memory Corruption (MS10-002) (Metasploit)

##

Microsoft Internet Explorer 7 – CFunctionPointer Uninitialized Memory Corruption (MS09-002) (Metasploit)

##

Microsoft Internet Explorer – Style getElementsByTagName Memory Corruption (MS09-072) (Metasploit)

##

Image22 ActiveX 1.1.1 – Remote Buffer Overflow

dotDefender – Cross-Site Scripting Security Bypass

source: https://www.securityfocus.com/bid/41560/info

RSP MP3 Player OCX 3.2 – ActiveX Buffer Overflow

Sun Java Web Server 7.0 u7 – Remote Overflow (DEP Bypass)

# Exploit Title: [SJWSexv2]

BadBlue 2.72b – PassThru Buffer Overflow (Metasploit)

##

BEA Weblogic – Transfer-Encoding Buffer Overflow (Metasploit)

##

Real Player 12.0.0.879 – Code Execution

# Exploit Title: Real Player 12.0.0.879 0day for WinXP

UFO: Alien Invasion 2.2.1 (OSX Snow Leopard) – IRC Client Remote Code Execution (ROP)

#!/usr/bin/python

FathFTP 1.7 – ActiveX Buffer Overflow

EA Battlefield 2 / Battlefield 2142 – Multiple Arbitrary File Upload Vulnerabilities

Source:

Alt-N SecurityGateway 1.0.1 – ‘Username’ Remote Buffer Overflow (Metasploit)

##

Apache (Windows x86) – Chunked Encoding (Metasploit)

##

MailEnable – Authorisation Header Buffer Overflow (Metasploit)

##

BadBlue 2.5 – ‘ext.dll’ Remote Buffer Overflow (Metasploit)

##

Microsoft IIS – ISAPI ‘w3who.dll’ Query String Overflow (Metasploit)

##

Hero DVD Remote 1.0 – Remote Buffer Overflow

# Exploit Title : Hero DVD Remote Buffer Overflow Exploit

Apple Mac OSX EvoCam Web Server (Snow Leopard) – ROP Remote Overflow

#!/usr/bin/python

minerCPP 0.4b – Remote Buffer Overflow / Format String

#!/usr/bin/env python

id Software id Tech 4 Engine – ‘key’ Packet Remote Code Execution

source: https://www.securityfocus.com/bid/41460/info

UFO: Alien Invasion 2.2.1 (Windows 7) – Remote Buffer Overflow (ASLR + DEP Bypass)

#!/usr/bin/python

Registry OCX 1.5 – ActiveX Buffer Overflow

# Tested on: Windows XP SP3 IE6/7

System V Derived /bin/login – Extraneous Arguments Buffer Overflow (Metasploit)

##

Zabbix Agent – ‘net.tcp.listen’ Command Injection (Metasploit)

##

HP OpenView Network Node Manager (OV NNM) – ‘connectedNodes.ovp’l Remote Command Execution (Metasploit)

##

Borland Interbase – ‘INET_connect()’ Remote Buffer Overflow (Metasploit)

##