remote

Wireshark – LWRES Dissector getaddrsbyname_request Buffer Overflow (Metasploit)

##

Accellion File Transfer – ‘Appliance web_client_user_guide.html?lang’ Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/38176/info

Microsoft Windows Vista/2008 – ICMPv6 Router Advertisement Remote Code Execution

source: https://www.securityfocus.com/bid/38061/info

Mongoose 2.8 – Space String Remote File Disclosure

source: https://www.securityfocus.com/bid/38145/info

JDownloader – ‘JDExternInterface.java’ Remote Code Execution

source: https://www.securityfocus.com/bid/38143/info

GeFest Web Home Server 1.0 – Directory Traversal

source: https://www.securityfocus.com/bid/38141/info

Oracle 11g – Multiple Privilege Escalation Vulnerabilities

source: https://www.securityfocus.com/bid/38115/info

Oracle 10g – Multiple Privilege Escalation Vulnerabilities

source: https://www.securityfocus.com/bid/38115/info

Sterlite SAM300 AX Router – ‘Stat_Radio’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/39928/info

Samba 3.4.5 – Symlink Directory Traversal

source: https://www.securityfocus.com/bid/38111/info

Samba 3.4.5 – Symlink Directory Traversal (Metasploit)

source: https://www.securityfocus.com/bid/38111/info

UplusFTP Server 1.7.0.12 – Remote Buffer Overflow

#!/usr/bin/python

TVUPlayer 2.4.4.9beta1 – ‘PlayerOcx.ocx’ ActiveX Control Arbitrary File Overwrite

source: https://www.securityfocus.com/bid/39956/info

Vermillion FTP Deamon 1.31 – Remote Buffer Overflow

# Exploit Title: Vermillion FTP Deamon Remote BOF Exploit

COMTREND CT-507 IT ADSL Router – ‘scvrtsrv.cmd’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/38004/info

SAP BusinessObjects 12 – URI redirection / Cross-Site Scripting

source: https://www.securityfocus.com/bid/37972/info

HP System Management Homepage 3.0.2 – ‘servercert’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/37968/info

CamShot 1.2 – Overwrite (SEH)

# CamShot SEH overwrite by tecnik

Cisco Secure Desktop 3.x – ‘translation’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/37960/info

AOL 9.5 – Phobos.Playlist ‘Import()’ Remote Buffer Overflow (Metasploit)

##

Google Chrome 3.0 – Style Sheet redirection Information Disclosure

source: https://www.securityfocus.com/bid/37917/info

IntelliTamper 2.07/2.08 – Remote Buffer Overflow (SEH)

# IntelliTamper 2.07/2.08 (SEH) Remote Buffer Overflow

Sun Java System Web Server 6.1/7.0 – Digest Authentication Remote Buffer Overflow

source: https://www.securityfocus.com/bid/37896/info

Microsoft Internet Explorer 8 – URI Validation Remote Code Execution

source: https://www.securityfocus.com/bid/37884/info

EFS Easy Chat Server – Universal Buffer Overflow (SEH) (Metasploit)

##

AOL 9.5 – ActiveX Heap Spray

AOL 9.5 ActiveX 0day Exploit (heap spray)

Pidgin MSN 2.6.4 – File Download

#!/usr/bin/env python

SurgeFTP 2.x – ‘surgeftpmgr.cgi’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/37844/info

Zenoss 2.3.3 – Multiple Cross-Site Request Forgery Vulnerabilities

source: https://www.securityfocus.com/bid/37843/info

EFS Software Easy Chat Server 2.2 – Remote Buffer Overflow

#!/usr/bin/ruby

Novatel Wireless MiFi 2352 – Password Information Disclosure

source: https://www.securityfocus.com/bid/37962/info

Trend Micro Web-Deployment – ActiveX Remote Execution

# Exploit Title: TrendMicro Web-Deployment ActiveX Remote Exec 0day POC

Adobe GetPlus get_atlcom 1.6.2.48 – ActiveX Remote Execution

Microsoft Internet Explorer 6 – ‘Aurora’ Memory Corruption (MS10-002)

#

Microsoft Internet Explorer – ‘wshom.ocx’ ActiveX Control Remote Code Execution

#######################################################################

SystemTap 1.0 – ‘stat-server’ Arbitrary Command Injection

source: https://www.securityfocus.com/bid/37842/info

Zend Framework 1.9.6 – Multiple Input Validation Vulnerabilities / Security Bypass

source: https://www.securityfocus.com/bid/37809/info

Apple iTunes 8.1.x – ‘daap’ Remote Buffer Overflow

#include

BOA Web Server 0.94.x – Terminal Escape Sequence in Logs Command Injection

source: https://www.securityfocus.com/bid/37718/info

Orion Application Server 2.0.7 – ‘Terminal Escape Sequence in Logs’ Command Injection

source: https://www.securityfocus.com/bid/37717/info

Yaws 1.55 – ‘Logs’ Terminal Escape Sequence Command Injection

source: https://www.securityfocus.com/bid/37716/info

Cherokee 0.99.30 – Terminal Escape Sequence in Logs Command Injection

source: https://www.securityfocus.com/bid/37715/info

mini_httpd 1.18 – HTTP Request Escape Sequence Terminal Command Injection

source: https://www.securityfocus.com/bid/37714/info

thttpd 2.24 – HTTP Request Escape Sequence Terminal Command Injection

source: https://www.securityfocus.com/bid/37714/info

Varnish 2.0.6 – ‘Terminal Escape Sequence in Logs’ Command Injection

source: https://www.securityfocus.com/bid/37713/info

AOLServer Terminal 4.5.1 – Escape Sequence in Logs Command Injection

source: https://www.securityfocus.com/bid/37712/info

Nginx 0.7.64 – Terminal Escape Sequence in Logs Command Injection

source: https://www.securityfocus.com/bid/37711/info

Ruby 1.9.1 – WEBrick ‘Terminal Escape Sequence in Logs’ Command Injection

source: https://www.securityfocus.com/bid/37710/info

2^6 TCP Control Bit – Fuzzer (No ECN or CWR)

#!/usr/bin/perl

Mozilla Firefox 3.5.8 – Style Sheet redirection Information Disclosure

source: https://www.securityfocus.com/bid/38369/info