Immunity Canvas: JOOMLA_MM_RCE

Name| joomlammrce ---|--- CVE| CVE-2013-5576 Exploit Pack| CANVAS Description| joomlammrce Notes| Repeatability: Infinite Notes: This module was tested in a Joomla 3.1.4 on Windows 7. Depending on the configuration of the site this module may require valid credentials in order to exploit the file...

Immunity Canvas: CVE_2013_3881

Name| CVE20133881 ---|--- CVE| CVE-2013-3881 Exploit Pack| CANVAS Description| Win32k NULL Page Exploit Notes| Repeatability: Notes: This vulnerability only affects Intel x86 based versions of Windows 7 This module automatically migrates to lsass.exe . Tested on: Windows 7 Ultimate N VENDOR:...

Immunity Canvas: ACROBAT_TOOLBUTTON

Name| acrobattoolbutton ---|--- CVE| CVE-2013-3346 Exploit Pack| CANVAS Description| acrobattoolbutton Notes| CVE Name: CVE-2013-3346 VENDOR: Adobe NOTES: This exploit has been tested on: - Windows XP SP3 EN Acrobat Reader 11.0.2/11.0.1/10.1.4/10.1.2/10.1.1/10.1.0 Vulnerable versions include: =...

Immunity Canvas: STRUTS2_DEFAULT_ACTION_MAPPER

Name| struts2defaultactionmapper ---|--- CVE| CVE-2013-2251 Exploit Pack| CANVAS Description| Apache Struts 2.0.0 - 2.3.15 RCE Notes| References: https://cwiki.apache.org/confluence/display/WW/S2-016 Repeatability: Infinite VENDOR: Apache CVE Url: https://vulners.com/cve/CVE-2013-2251 CVE Name:...

Immunity Canvas: MS13_056

Name| ms13056 ---|--- CVE| CVE-2013-3174 Exploit Pack| CANVAS Description| MS13056 Notes| CVE Name: CVE-2013-3174 VENDOR: Microsoft NOTES: This exploit has been tested on: - Windows XP SP 3 EN on IE 8 no jsrecon - Windows 7 PRO SP 1 EN x86-64 on IE 8 32bit jsrecon works No webpage open in the...

Immunity Canvas: PERF_SWEVENT_INIT

Name| perfsweventinit ---|--- CVE| CVE-2013-2094 Exploit Pack| CANVAS Description| perfsweventinit local root Notes| Repeatability: Infinite Notes: Tested on: - Ubuntu 12.10 quantal x8664 3.5.0-27-generic VENDOR: GNU/Linux CVE Url: https://vulners.com/cve/CVE-2013-2094 CVE Name: CVE-2013-2094...

Immunity Canvas: SUDO_TIMESTAMP

Name| sudotimestamp ---|--- CVE| CVE-2013-1775 Exploit Pack| CANVAS Description| sudotimestamp: Linux/MacOS timestamp privilege escalation Notes| CVE Name: CVE-2013-1775 VENDOR: Intel, GNU/Linux, Apple Notes: This exploit runs on GNU/Linux and MacOS X. On both systems this exploit requires: - Use...

Immunity Canvas: FS_PIPE_RACE_TO_NULL

Name| fspiperacetonull ---|--- CVE| CVE-2009-3547 Exploit Pack| CANVAS Description| fspiperacetonull local root Notes| Repeatability: Infinite NOTES: Tested on Ubuntu 9.04 32-bit, Ubuntu 9.10 32-bit, kernels 2.6.28|29|30|31 Vulnerable kernels = 2.6.31 32bit. VENDOR: Linux CVE Url:...

Immunity Canvas: LINUX_PTRACE_SETREGS

Name| linuxptracesetregs ---|--- CVE| CVE-2013-0871 Exploit Pack| CANVAS Description| linuxptracesetregs local root Notes| Repeatability: Infinite Notes: Vulnerable kernels = 3.5 64-bit only. Tested on: - Ubuntu 12.10 64bit - Ubuntu 12.04 64bit - Debian 6 64bit Besides running the module inside...

Immunity Canvas: ACROBAT_XFA

Name| acrobatxfa ---|--- CVE| CVE-2013-0640 Exploit Pack| CANVAS Description| Adobe Acrobat Reader XFA =10.X Notes| CVE Name: CVE-2013-0640 VENDOR: Adobe VersionsAffected: 10.X and below Repeatability: CVE Url: https://vulners.com/cve/CVE-2013-0640 CERT Advisory: None CVSS: 9.3...

Immunity Canvas: JAVA_MBEANINSTANTIATOR_FINDCLASS

Name| javaMBeanInstantiatorfindClass ---|--- CVE| CVE-2013-0422 Exploit Pack| CANVAS Description| javaMBeanInstantiatorfindClass Notes| CVE Name: CVE-2013-0422 VENDOR: Sun Notes: Affected versions JDK and JRE 7 Update 10 and earlier Tested on: - Windows 7 with JDK/JRE 7 update 10 To run from...

Immunity Canvas: MOINMOIN_RCE

Name| moinmoinrce ---|--- CVE| CVE-2012-6495 Exploit Pack| CANVAS Description| moinmoinrce Notes| CVE Name: CVE-2012-6495 VENDOR: http://moinmoi.in NOTES: This version of the exploit forces a callback by overwriting moin.wsgi. This makes it a one-shot exploit, and if it fails, will result in the...

Immunity Canvas: JAVA_CVE_2012_5088

Name| javaCVE20125088 ---|--- CVE| CVE-2012-5088 Exploit Pack| CANVAS Description| Java MethodHandles.Lookup Remote Code Execution Notes| CVE Name: CVE-2012-5088 VENDOR: Sun Notes: The exploitation technique is abusing bug patched in CVE-2012-5088 which is allowing to use reflection with full...

Immunity Canvas: JAVA_JAXWS

Name| javajaxws ---|--- CVE| CVE-2012-5076 Exploit Pack| CANVAS Description| Java Applet JAX-WS Remote Code Execution Notes| CVE Name: CVE-2012-5076 VENDOR: Sun Notes: Affected versions JDK and JRE 7 Update 7 and earlier Tested on: - Windows XP SP3 with JDK/JRE 7 update 6 To run from command line...

Immunity Canvas: IE_EXECCOMMAND

Name| ieexecCommand ---|--- CVE| CVE-2012-4969 Exploit Pack| CANVAS Description| ieexecCommand Notes| CVE Name: CVE-2012-4969 VENDOR: Microsoft Notes: VersionsAffected: Repeatability: Infinite References: 'http://technet.microsoft.com/en-us/security/advisory/2757760' Date public: 09/17/2012 MSADV...

Immunity Canvas: JAVA_FORNAME_GETFIELD

Name| javaforNamegetField ---|--- CVE| CVE-2012-4681 Exploit Pack| CANVAS Description| Java forName/getField Method Invocation Sandbox Bypass Notes| CVE Name: CVE-2012-4681 VENDOR: Sun Notes: There is a method invocation vulnerability using sun.awt.SunToolkit.getField This vulnerability can then ...

Immunity Canvas: ADOBE_FLASH_OTF_PARSING

Name| adobeflashotfparsing ---|--- CVE| CVE-2012-1535 Exploit Pack| CANVAS Description| adobeflashotfparsing Notes| CVE Name: CVE-2012-1535 VENDOR: Adobe Notes: This exploit takes advantage of a integer overflow that leads to a heap based buffer overflow. The kerntable contains an integer that wh...

Immunity Canvas: MYSQL_LOGIN_REMOTE

Name| mysqlloginremote ---|--- CVE| CVE-2012-2122 Exploit Pack| CANVAS Description| MySQL authentication bypass Notes| CVE Name: CVE-2012-2122 OSVDB: http://www.osvdb.org/displayvuln.php?osvdbid=??? Notes: Mysql authentication can be bypassed by bruteforcing a wrong password until the server miss...

Immunity Canvas: ITUNES_10_6_1

Name| Itunes1061 ---|--- CVE| CVE-2012-0677 Exploit Pack| CANVAS Description| Itunes 10.4 to 10.6.1 Buffer Overflow Notes| CVE Name: CVE-2012-0677 VENDOR: Apple Notes: Buffer overflow SEH based for Itunes 10.4 to 10.6.1 on Windows XP SP2 VersionsAffected: Itunes 10.4 to 10.6.1 Repeatability:...

Immunity Canvas: JAVA_ATOMICREFERENCEARRAY

Name| javaAtomicReferenceArray ---|--- CVE| CVE-2012-0507 Exploit Pack| CANVAS Description| Java AtomicReferenceArray Type Confusion Sandbox Bypass Notes| CVE Name: CVE-2012-0507 VENDOR: Sun Notes: There is a Type Confusion vulnerability in java.util.concurrent.atomic.AtomicReferenceArray class...