Immunity Canvas: LINUX_RDS

Name| linuxrds ---|--- CVE| CVE-2010-3904 Exploit Pack| CANVAS Description| linuxrds Notes| References: 'http://www.vsecurity.com/resources/advisory/20101019-1/' Date public: 2010-10-19 VENDOR: Linux CVE Url: https://vulners.com/cve/CVE-2010-3904 CVE Name: CVE-2010-3904...

Immunity Canvas: MS_ENABLEEUDC

Name| msenableeudc ---|--- CVE| CVE-2010-4398 Exploit Pack| CANVAS Description| Windows EnableEUDC Privilege Escalation Exploit Notes| Repeatability: Notes: Tested on Windows 7 x86/64. VENDOR: Microsoft CVE Name: CVE-2010-4398...

Immunity Canvas: IE_SETUSERCLIP

Name| iesetuserclip ---|--- CVE| CVE-2010-3962 Exploit Pack| CANVAS Description| iesetuserclip Notes| Date public: 11/04/2010 Notes: This bug was discovered in the wild. IE6, 7 and 8 are vulnerable to this bug, but because of its behaviour some versions will not be exploitable. The only full...

Immunity Canvas: ADOBE_FLASH_BUTTON

Name| adobeflashbutton ---|--- CVE| CVE-2010-3654 Exploit Pack| CANVAS Description| adobeflashbutton Notes| CVE Name: CVE-2010-3654 VENDOR: Adobe NOTES: Exploitation through an PDF file is more reliable than with a direct HTML/Flash exploit VersionsAffected: Adobe Acrobat Reader 9.4.0...

Immunity Canvas: FIREFOX_APPENDCHILD

Name| firefoxappendchild ---|--- CVE| CVE-2010-3765 Exploit Pack| CANVAS Description| firefoxappendchild Notes| CVE Name: CVE-2010-3765 VENDOR: Mozilla Notes: Interleaving document.write and appendChild can lead to duplicate text frames and overrunning of text run buffers. This exploit can only b...

Immunity Canvas: ADOBE_SHOCKWAVE_RCSLCHUNK

Name| adobeshockwavercslchunk ---|--- CVE| CVE-2010-3653 Exploit Pack| CANVAS Description| adobeshockwavercslchunk Notes| CVE Name: CVE-2010-3653 Vendor: Adobe Notes: This exploit can only be used from clientd. Tested on: Windows XP Professional SP3 EN with IE 7. Windows XP Home SP3 EN with IE7...

Immunity Canvas: MS_KBLAYOUT

Name| mskblayout ---|--- CVE| CVE-2010-2744 Exploit Pack| CANVAS Description| MSKBLAYOUT Notes| CVE Name: CVE-2010-2744 VENDOR: Microsoft Notes: This is one of the vulnerabilities used by the Stuxnet work to elevate its privileges on Windows XP and Windows 2000. It may cause some minor side effec...

SmarterMail 7.x LDAP Injection

Vendor: smartertools.com SmarterMail 7.x 7.2.3925 Date: 2010-10-01 Author : David Hoyt sqlhacker – Hoyt LLC Contact : [email protected] Home : http://cloudscan.me Dork : insite: SmarterMail Enterprise 7.2 Bug : LDAP Injection + Cross Site Scripting STORED Tested on : SmarterMail 7.x 7.2.3925 //...

SmarterMail 7.x Cross Site Scripting

Source URL http://cloudscan.blogspot.com/2010/10/vendor-smartertoolscom-smartermail-7x.html Vendor: smartertools.com SmarterMail 7.x 7.2.3925 Date: 2010-10-01 Author : David Hoyt sqlhacker – Hoyt LLC Contact : [email protected] Home : http://cloudscan.me Dork : insite: SmarterMail Enterprise 7.1 B...

SmarterMail 7.x (7.2.3925) Stored Cross Site Scripting Vulnerability

Exploit for php platform in category web applications ==================================================================== SmarterMail 7.x 7.2.3925 Stored Cross Site Scripting Vulnerability ==================================================================== Vendor: smartertools.com SmarterMail 7...

SmarterMail 7.x (7.2.3925) LDAP Injection Vulnerability

Exploit for php platform in category web applications ======================================================= SmarterMail 7.x 7.2.3925 LDAP Injection Vulnerability ======================================================= Vendor: smartertools.com SmarterMail 7.x 7.2.3925 Date: 2010-10-01 Author :...

SmarterMail 7.2.3925 - LDAP Injection

SmarterMail 7.2.3925 - LDAP Injection Vendor: smartertools.com SmarterMail 7.x 7.2.3925 Date: 2010-10-01 Author : David Hoyt sqlhacker – Hoyt LLC Contact : [email protected] Home : http://cloudscan.me Dork : insite: SmarterMail Enterprise 7.2 Bug : LDAP Injection + Cross Site Scripting STORED Test...

Immunity Canvas: MS10_061

Name| ms10061 ---|--- CVE| CVE-2010-2729 Exploit Pack| CANVAS Description| Microsoft Windows Print Spooler Arbitrary File Creation Notes| CVE Name: CVE-2010-2729 VENDOR: Microsoft MSADV: MS10-061 Repeatability: Note: Please refer to the Microsoft URLs to know exactly the conditions for when this...

Immunity Canvas: FLASH_WILD2

Name| flashwild2 ---|--- CVE| CVE-2010-2884 Exploit Pack| CANVAS Description| Flash 0day CVE-2010-2884 Notes| CVE Name: CVE-2010-2884 VENDOR: Adobe VersionsAffected: Repeatability: Date public: Not public/0day CVE Url: CVSS: 9.3...

Immunity Canvas: CVE_2010_1807

Name| CVE20101807 ---|--- CVE| CVE-2010-1807 Exploit Pack| CANVAS Description| Android 2.0/2.1 webkit parsefloat Notes| CVE Name: CVE-2010-1807 VENDOR: Google Repeatability: Infinite client side - no crash References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-1807 CVE Url:...

Immunity Canvas: ACROBAT_TTF_SING

Name| acrobatttfsing ---|--- CVE| CVE-2010-2883 Exploit Pack| CANVAS Description| Acrobat Reader TTF Bug Notes| CVE Name: CVE-2010-2883 Notes: VersionsAffected: Acrobat Reader = 9.3.4 Repeatability: References: http://contagiodump.blogspot.com/2010/09/cve-david-leadbetters-one-point-lesson.html...

Immunity Canvas: QUICK_PUNK

Name| quickpunk ---|--- CVE| CVE-2010-1818 Exploit Pack| CANVAS Description| quickpunk Notes| CVE Name: CVE-2010-1818 VENDOR: Apple Notes: Abyssec 0day VersionsAffected: 7.6.5 Repeatability: Infinite References: 'http://zerodayinitiative.com/advisories/ZDI-10-168/' CVE Url:...

Immunity Canvas: TRENDMICRO_SETOWNED

Name| trendmicrosetowned ---|--- CVE| CVE-2010-3189 Exploit Pack| CANVAS Description| trendmicrosetowned Notes| CVE Name: CVE-2010-3189 VENDOR: Trend Micro Notes: abyssec 0day VersionsAffected: Last Repeatability: Infinite References: 'None' CVE Url: https://vulners.com/cve/CVE-2010-3189 Date...

Immunity Canvas: MS10_059

Name| ms10059 ---|--- CVE| CVE-2010-2554 Exploit Pack| CANVAS Description| ms10059 Notes| References: http://www.microsoft.com/technet/security/bulletin/MS10-059.mspx CVE Name: CVE-2010-2554 VENDOR: Microsoft Notes: This exploit gain SYSTEM from NETWORKSERVICE or DefaultAppPool user by duplicatin...

Immunity Canvas: MS10_048

Name| ms10048 ---|--- CVE| CVE-2010-1897 Exploit Pack| CANVAS Description| ms10048 Notes| CVE Name: CVE-2010-1897 VENDOR: Microsoft Notes: Reliably exploits Windows XP through Windows 7 32-bit. When executed, this will get a callback that runs as Local/SYSTEM. This also exploits Windows 7 x64...