Apache Struts includeParams Remote Code Execution

##

# This file is part of the Metasploit Framework and may be subject to

# redistribution and commercial restrictions. Please see the Metasploit

# web site for more information on licensing and terms of use.

#   http://metasploit.com/

##




EXPLOIT HERE

Java Applet ProviderSkeleton Insecure Invoke Method Exploit

##

# This file is part of the Metasploit Framework and may be subject to

# redistribution and commercial restrictions. Please see the Metasploit

# web site for more information on licensing and terms of use.

#   http://metasploit.com/

##




EXPLOIT HERE

PCMan’s FTP Server 2.0 – Remote Buffer Overflow Exploit

xploit Title: PCMan's FTP Server 2.0 Remote Buffer Overflow Exploit

# Date: 2013/6/26

# Exploit Author: Chako

# Vendor Homepage: http://pcman.openfoundry.org/

# Software Download Link: https://files.secureserver.net/1sMltFOsytirTG

# Version: 2.0

# Tested on: Windows 7 SP1 English




EXPLOIT HERE

Carberp Web Panel C2 Backdoor Remote PHP Code Execution

#

# This file is part of the Metasploit Framework and may be subject to

# redistribution and commercial restrictions. Please see the Metasploit

# web site for more information on licensing and terms of use.

#   http://metasploit.com/

##




EXPLOIT HERE

PCMan’s FTP Server 2.0.7 – Buffer Overflow Exploit

#

# Title************************PCMan FTP Server v2.0.7 Remote Root Shell Exploit - USER Command

# Discovered and Reported******June 2013

# Discovered/Exploited By******Jacob Holcomb/Gimppy, Security Analyst @ Independent Security Evaluators

# Exploit/Advisory*************http://infosec42.blogspot.com/

# Software*********************PCMan FTP Server v2.0.7 (Listens on TCP/21)

# Tested Commands*************USER (Other commands were not tested and may be vulnerable)

# CVE**************************PCMan FTP Server v2.0.7 Buffer Overflow: Pending

#




EXPLOIT HERE

FreeBSD 9 Address Space Manipulation Privilege Escalation

##

# This file is part of the Metasploit Framework and may be subject to

# redistribution and commercial restrictions. Please see the Metasploit

# web site for more information on licensing and terms of use.

#   http://metasploit.com/

##




EXPLOIT HERE

AudioCoder 0.8.22 – Direct Retn Buffer Overflow

# Title: AudioCoder 0.8.22 - Direct Retn Buffer OverFlow

# version: 0.8.22 build 5506 (built on May 27 2013, 00:22:49)

# link: http://www.downloadbestsoft-mirror2.com/programs/AudioCoder-0.8.22.5506.exe

# Platform: Windows XP sp3

# Date: June 21th, 2013

# Author: onying (@onyiing)

# Blog : http://itsecuritynewbie.blogspot.com/

# Thanks to: Information Security Shinobi Camp | http://www.is2c-dojo.com 




EXPLOIT HERE

Novell Client 4.91 SP4 nwfs.sys Local Privilege Escalation

##

# This file is part of the Metasploit Framework and may be subject to

# redistribution and commercial restrictions. Please see the Metasploit

# web site for more information on licensing and terms of use.

#   http://metasploit.com/

##




EXPLOIT HERE

Barracuda SSL VPN 680Vx 2.3.3.193 – Script Injection Vulnerabilities

Barracuda SSL VPN 680Vx 2.3.3.193 Multiple Script Injection Vulnerabilities

  

  

Vendor: Barracuda Networks, Inc.

Product web page: https://www.barracuda.com

Affected version: 2.3.3.193, Model: V680

  

Summary: The Barracuda SSL VPN is a powerful plug-and-play appliance

purpose-built to provide remote users with secure access to internal

network resources.

  

Desc: Barracuda SSL VPN suffers from multiple stored XSS vulnerabilities

when parsing user input to several parameters via POST method. Attackers

can exploit these weaknesses to execute arbitrary HTML and script code in

a user's browser session.

  

Tested on: Linux 2.4.x, Jetty Web Server




EXPLOIT HERE

GLPI 0.83.9 ‘unserialize()’ Function Remote Code Execution Vulnerability

Source: http://www.securityfocus.com/bid/60823/info

  

GLPI is prone to a remote PHP code-execution vulnerability.

  

An attacker can exploit this issue to inject and execute arbitrary PHP code in the context of the affected application. This may facilitate a compromise of the application and the underlying system; other attacks are also possible.

  

GLPI 0.83.9 is vulnerable; other versions may also be affected.

  

An attacker can exploit this issue using a web browser.

  

The following example URI is available:

  

http://www.example.com/glpi/front/ticket.form.php?id=1&_predefined_fields=[XXXX]