remote

Sygate Personal Firewall 5.6 build 2808 – ActiveX with DEP Bypass

Sygate Personal Firewall 5.6 build 2808 ActiveX exploit w/ DEP bypass

Nginx 0.7.65/0.8.39 (dev) – Source Disclosure / Download

TITLE: NGINX [ENGINE X] SERVER http://nginx.org/en/ [ref-1]

Nginx 0.8.36 – Source Disclosure / Denial of Service

Issue 1: (Remote Source Disclosure)

Microsoft Help and Support Center – ‘/sysinfo/sysinfomain.htm’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/40721/info

Microsoft Windows Help Centre Handles – Malformed Escape Sequences Incorrectly (MS03-044)

Microsoft Windows Help Centre Handles Malformed Escape Sequences Incorrectly

Juniper Networks SA2000 SSL VPN Appliance – ‘welcome.cgi’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/41664/info

Adobe Flash / Reader – Live Malware

# Exploit-DB Note - Live POC originally found at http://qoop.org/security/poc/cve-2010-1297/

McAfee Unified Threat Management Firewall 4.0.6 – ‘page’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/40708/info

Apple Mac OSX EvoCam Web Server 3.6.6/3.6.7 – Remote Buffer Overflow

#!/usr/bin/python

Motorola Surfboard Cable Modem – Directory Traversal

# Exploit Title: Motorola SURFBoard Cable Modem Directory Traversal

XFTP 3.0 Build 0239 – ‘Filename’ Remote Buffer Overflow

#!/usr/bin/python

GoAheaad WebServer – Source Code Disclosure

# Exploit Title: GoAheaad Webserver Source Code Disclosure Vulnerability

Nginx 0.6.36 – Directory Traversal

# Exploit Title: nginx [engine x] http server

Home FTP Server 1.10.2.143 – Directory Traversal

source: https://www.securityfocus.com/bid/40419/info

Brekeke PBX 2.4.4.8 – ‘pbx/gate’ Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/40407/info

Home FTP Server 1.10.3 (build 144) – Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/40405/info

Worldweaver DX Studio Player 3.0.29 – ‘shell.execute()’ Command Execution (Metasploit)

##

Cisco DPC2100 2.0.2 r1256-060303 – Multiple Security Bypass / Cross-Site Request Forgery Vulnerabilities

source: https://www.securityfocus.com/bid/40346/info

U.S.Robotics USR5463 0.06 Firmware – ‘setup_ddns.exe’ HTML Injection

source: https://www.securityfocus.com/bid/40292/info

ComponentOne VSFlexGrid 7/8 – ‘Archive()’ method Remote Buffer Overflow

# Tilte: ComponentOne VSFlexGrid v. 7 & 8 "Archive()" method Remote Buffer Overflow Exploit

McAfee Email Gateway 6.7.1 – ‘systemWebAdminConfig.do’ Remote Security Bypass

source: https://www.securityfocus.com/bid/40255/info

CommuniCrypt Mail 1.16 – ‘ANSMTP.dll/AOSMTP.dll’ ActiveX

Google Chrome 4.1.249.1059 – Cross Origin Bypass in Google URL (GURL)

# Google Chrome 4.1.249.1059 Cross Origin Bypass in Google URL (GURL)

TeamViewer 5.0.8232 – Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/40242/info

Apple Safari 4.0.5 – ‘parent.close()’ Memory Corruption (ASLR + DEP Bypass)

Download:

PHP 5.3.x < 5.3.2 - 'ext/phar/stream.c' / 'ext/phar/dirstream.c' Multiple Format String Vulnerabilities

source: https://www.securityfocus.com/bid/40173/info

GameCore 2.5 – ‘GameID’ Integer Overflow

source: https://www.securityfocus.com/bid/40155/info

Symantec Alert Management System Intel Alert Originator Service – Remote Buffer Overflow (Metasploit)

##

WFTPD Server 3.30 – Multiple Vulnerabilities

#include

Zervit Web Server 0.4 – Directory Traversals

###################################################################

Zervit Web Server 0.4 – Source Disclosure/Download

###################################################################

MiniWebsvr 0.0.10 – Directory Traversal / Listing

###################################################################

AgentX++ Master – AgentX::receive_agentx Stack Buffer Overflow (Metasploit)

##

Apple Safari 4.0.5 – ‘parent.close()’ Memory Corruption Code Execution

Alt + F4 :)

Mereo 1.9.1 – Directory Traversal

source: https://www.securityfocus.com/bid/40053/info

BigAnt Server 2.2 – Remote Buffer Overflow (Metasploit)

##

Knox Arkeia Backup Client Type 77 (OSX) – Remote Overflow (Metasploit)

##

MySQL yaSSL (Linux) – SSL Hello Message Buffer Overflow (Metasploit)

##

Novell NetWare – LSASS CIFS.NLM Driver Stack Buffer Overflow (Metasploit)

##

Symantec Remote Management – Remote Buffer Overflow (Metasploit)

##

SoftiaCom wMailServer 1.0 – Remote Buffer Overflow (Metasploit)

##

YahooPOPs (YPOPS) 0.6 – Remote Buffer Overflow (Metasploit)

##

GoodTech Telnet Server 5.0.6 – Remote Buffer Overflow (Metasploit)

##

Novell NetMail 3.52d – NMAP STOR Buffer Overflow (Metasploit)

##

TrackerCam – PHP Argument Buffer Overflow (Metasploit)

##

HP OpenView Network Node Manager (OV NNM) – ‘OpenView5.exe’ CGI Buffer Overflow (Metasploit)

##

Belkin Bulldog Plus – Web Service Buffer Overflow (Metasploit)

##

HP OpenView Network Node Manager (OV NNM) – ‘Toolbar.exe’ CGI Buffer Overflow (Metasploit)

##

MaxDB WebDBM – GET Buffer Overflow (Metasploit)

##

Now SMS/Mms Gateway – Remote Buffer Overflow (Metasploit)

##