<?php
######################################### www.bugreport.ir ########################################
#
# Title: PHP CGI Argument Injection Remote Exploit V0.3 – PHP Version
# Vendor: [...]
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
0 _ __ __ __ [...]
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
0 _ __ __ __ [...]
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
0 _ __ __ __ [...]
##
# This file is part of the Metasploit Framework and may be subject to
# redistribution and commercial restrictions. Please see the Metasploit
# Framework web site for more information on licensing and terms of use.
# http://metasploit.com/framework/
[...]
##
# This file is part of the Metasploit Framework and may be subject to
# redistribution and commercial restrictions. Please see the Metasploit
# Framework web site for more information on licensing and terms of use.
# http://metasploit.com/framework/
##
[...]
# Title: Vanilla About Me Plugin Persistant XSS Vulnerability
# Date: 18/5/12
# Author: Henry Hoggard
# Author URL: henryhoggard.co.uk
# Author Twitter: @henryhoggard
# Software: Vanilla Version 2.0.18.4 + About Me 1.1.1
# http://vanillaforums.org/addon/aboutme-plugin
[...]
DVD-Lab Studio 1.25 DAL File Open Crash
===================================================================================
# Exploit Title:DVD-Lab Studio 1.25 Malicious DAL File Denial of service
# Download link:http://download.cnet.com/DVD-Lab-Studio/3000-7970_4-10391372.html
# Author: Ahmed Elhady Mohamed
# Email : ahmed.elhady.mohamed@gmail.com
# Website: www.infosec4all.tk
[...]
Real-DRAW PRO 5.2.4 Import File Crash
===================================================================================
# Exploit Title:Real-DRAW PRO 5.2.4 Malicious PNG File Denial of service
# Vendor : http://www.mediachance.com/
# Author: Ahmed Elhady Mohamed
# Email : ahmed.elhady.mohamed@gmail.com
# Website: www.infosec4all.tk
[...]
<?php
/*
PHP <= 5.4.3 (com_event_sink) Code Execution Proof of Concept
Found by condis
Website: http://cond.psychodela.pl
Tested on:
PHP 5.3.8 + Windows XP SP3 Professional PL
[...]
<?php
/*
PHP <= 5.4.3 wddx_serialize_* / stream_bucket_* Variant Object Null Ptr Derefernce
Author : condis
Date : 10.04.2012 AD
Website : http://cond.psychodela.pl
—-
Download : http://php.net/downloads.php
Tested on:
[...]
================================================
# Exploit Title: Aholattafun Creative Solutions SQL Injection Vulnerabilities
# Author: Becax
# Home : CrimeIRCD
# Vendor :http://www.aholattafun.com/
———————————————————————!
# Email : tomier2010@yahoo.com
# Category: [webapps]
# Version: n/a
[...]
##
# This file is part of the Metasploit Framework and may be subject to
# redistribution and commercial restrictions. Please see the Metasploit
# Framework web site for more information on licensing and terms of use.
# http://metasploit.com/framework/
[...]
# Exploit Title: Kerio WinRoute Firewall Embedded Web ServerVersion: Source
Code Disclosure
# Google Dork:
# Date: 10.05.2012
# Author: Eugene Salov, Andrey Komarov (Group-IB, http://group-ib.ru)
# Software Link: http://winroute.ru/kerio_winroute_firewall.htm
# Version: prior to 6
[...]
#######################################################################
Application: Sockso
http://sockso.pu-gh.com
Versions: <= 1.5
Platforms: Windows, Mac, Linux
Bug: Persistant XSS
[...]
phpThumb() v1.7.11 (dir & title) Cross-Site Scripting Vulnerability
Vendor: SiliSoftware
Product web page: http://www.silisoftware.com
Affected version: 1.7.11-201108081537
Summary: phpThumb() uses the GD library to create thumbnails from
images (JPEG, PNG, GIF, BMP, etc) on the fly. The output size is
[...]
* Affected product: Linux Kernel 3.3.x <= 3.3.4
2.6.x <= 2.6.35.13
* Impact: code execution / privilege escalation
* Origin: HFS plus file system
* Credit: Timo Warns (PRESENSE Technologies GmbH)
* CVE Identifier: CVE-2012-2319
Summary
[...]
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
0 _ __ __ __ [...]
##
# This file is part of the Metasploit Framework and may be subject to
# redistribution and commercial restrictions. Please see the Metasploit
# web site for more information on licensing and terms of use.
# http://metasploit.com/
[...]
##############################################################################
####
# Advisory: PHP Address Book 7.0.0 Multiple security vulnerabilities
# Advisory ID: SSCHADV2012-013
# Author: Stefan Schurtz
# Affected Software: Successfully tested on PHP Address Book 7.0.0
# Vendor URL: http://sourceforge.net/projects/php-addressbook/
# Vendor Status: informed
[...]