Immunity Canvas: MS09_061_CAS

Name| ms09061cas ---|--- CVE| CVE-2009-0091 Exploit Pack| CANVAS Description| MS09-061 Microsoft .NET CAS Type Verification Vulnerability Notes| URL: http://www.microsoft.com/technet/security/Bulletin/MS09-061.mspx CVE Name: CVE-2009-0091 VENDOR: Microsoft CVE Url:...

SMB2 Exploit Fitted into Metasploit; Attacks Likely

Fully functional exploit code for the still unpatched Windows SMB v2 vulnerability has been released to the public domain via the freely available Metasploit point-and-click attack tool, raising the likelihood for remote in-the-wild code execution attacks. The exploit, created and released by...

Remote exploit released for Windows Vista SMB2 worm hole

Security researchers at penetration testing firm Immunity have created a reliable remote exploit capable of spawning a worm through an unpatched security hole in Microsoft’s dominant Windows operating system. A team of exploit writers led by Kostya Kortchinsky attacked the known SMB v2...

Immunity Canvas: NGINX

Name| nginx ---|--- CVE| CVE-2009-2629 Exploit Pack| CANVAS Description| Jinx Notes| CVE Name: CVE-2009-2629 VENDOR: nginx Notes: Use -O execshield:0 against Ubuntu targets - the default is to assume you want execshield avoidance. Repeatability: Infinite References:...

Immunity Canvas: SMB2_NEGOTIATE_REMOTE

Name| smb2negotiateremote ---|--- CVE| CVE-2009-3103 Exploit Pack| CANVAS Description| SMB2 Negotiate Pointer Dereference Vulnerability Notes| CVE Name: CVE-2009-3103 VENDOR: Microsoft MSADV: MS09-050 VersionsAffected: Repeatability: One shot References: http://blog.48bits.com/?p=510,...

Immunity Canvas: IISFTP_NLST

Name| iisftpnlst ---|--- CVE| CVE-2009-3023 Exploit Pack| CANVAS Description| IISFTPNLST Notes| CVE Name: CVE-2009-3023 VENDOR: Microsoft References: http://lists.grok.org.uk/pipermail/full-disclosure/2009-August/070467.html CVE Url: https://vulners.com/cve/CVE-2009-3023 Date public: 08/31/09 CVS...

Immunity Canvas: PROTO_OPS_NULL

Name| protoopsnull ---|--- CVE| CVE-2009-2692 / CVE-2009-2698 Exploit Pack| CANVAS Description| protoopsnull / udpsendmsg Notes| References: 'http://blog.cr0.org/2009/08/linux-null-pointer-dereference-due-to.html' Date public: VENDOR: Linux CVE Url: https://vulners.com/cve/CVE-2009-2692 CVE Name:...

Immunity Canvas: FCKEDITOR

Name| FCKEditor ---|--- CVE| CVE-2009-2265 Exploit Pack| CANVAS Description| FCKEditor Notes| CVE Name: CVE-2009-2265 VENDOR: Known Vunlerable Versions: 'ColdFusion MX 8 - 8.01', 'osCMax =2.0', 'RunCMS =1.3a', 'Falt4 CMS', 'Many more to come!' Notes: This exploit has two different variants - one...

Immunity Canvas: NAGIOS_PING

Name| nagiosping ---|--- CVE| CVE-2009-2288 Exploit Pack| CANVAS Description| nagiosping Notes| CVE Name: CVE-2009-2288 VENDOR: http://www.nagios.org/ CVEUrl: https://vulners.com/cve/CVE-2009-2288 Notes: statuswml.cgi in Nagios before 3.1.1 allows remote attackers to execute arbitrary commands vi...

Immunity Canvas: ZENCART_REMOTE

Name| zencartremote ---|--- CVE| CVE-2009-2255 Exploit Pack| CANVAS Description| zencartremote Notes| Repeatability: Infinite CVE URL: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-2255 VENDOR: www.zen-cart.com/ CVSS: 6.8 CVE Name: CVE-2009-2255...

Immunity Canvas: SUGARCRM_FILEUPLOAD

Name| sugarcrmfileupload ---|--- CVE| CVE-2009-2146 Exploit Pack| CANVAS Description| sugarcrmfileupload Notes| CVE Name: CVE-2009-2146 VENDOR: http://www.sugarcrm.com Notes: Tested on SugarCRM 5.2.0c. This exploits needs a valid username and password for SugarCRM to exploit as the vulnerability...

Immunity Canvas: SAFARI_FILE_STEALING2

Name| safarifilestealing2 ---|--- CVE| CVE-2009-1699 Exploit Pack| CANVAS Description| Safari 3.2 XSL File Stealing Notes| CVE Name: CVE-2009-1699 VENDOR: Apple Reference: http://scary.beasts.org/security/CESA-2009-006.html Arugments: After you have placed your single file in the correct...

Immunity Canvas: DOKUWIKI_EXEC2

Name| dokuwikiexec2 ---|--- CVE| CVE-2009-1960 Exploit Pack| CANVAS Description| DokuWiki 2009-02-14 Globals overwrite / Code execeution Notes| References: 'www.securityfocus.com/bid/35095' CVE Name: CVE-2009-1960 Repeatability: Infinite CVE Url:...

Immunity Canvas: CPCOMMERCE_RFI

Name| cpcommercerfi ---|--- CVE| CVE-2009-1936 Exploit Pack| CANVAS Description| cpCommerce 1.2.x Remote File Include Notes| CVE Name: CVE-2009-1936 VENDOR: cpCommerce Repeatability: Infinite CVE Url: https://vulners.com/cve/CVE-2009-1936 References: 'http://www.securityfocus.com/bid/35103' CVSS:...

Immunity Canvas: PLUCK_LFI

Name| plucklfi ---|--- CVE| CVE-2009-1765 Exploit Pack| CANVAS Description| Pluck 4.6.2 Local File Include Notes| CVE Name: CVE-2009-1765 VENDOR: Pluck Repeatability: Infinite CVE Url: http://cve.mitre.org/cgi-bin/cvename.cgi?name=2009-1765 References: 'http://www.milw0rm.com/exploits/8715' CVSS:...

Immunity Canvas: STRAWBERRY_LFI

Name| strawberrylfi ---|--- CVE| CVE-2009-1774 Exploit Pack| CANVAS Description| Strawberry 1.1.1 Local File Include Notes| References: 'http://osvdb.org/show/osvdb/54721' Repeatability: Infinite VENDOR: StrawBerry CVE Url: http://cve.mitre.org/cgi-bin/cvename.cgi?name=2009-1774 CVE Name:...

Immunity Canvas: QUICKTEAM_RFI

Name| quickteamrfi ---|--- CVE| CVE-2009-1551 Exploit Pack| CANVAS Description| QuickTeam Remote File Include Notes| CVE Name: CVE-2009-1551 VENDOR: quickteam Repeatability: Infinite CVE Url: http://cve.mitre.org/cgi-bin/cvename.cgi?name=2009-1551 References: 'http://osvdb.org/show/osvdb/54217'...

Immunity Canvas: SYMANTEC_IAO

Name| symanteciao ---|--- CVE| CVE-2009-1430 Exploit Pack| CANVAS Description| Symantec Alert Management System 2 Overflow Notes| CVE Name: CVE-2009-1430 VENDOR: Symantec VersionsAffected: Repeatability: References: http://www.zerodayinitiative.com/advisories/ZDI-09-018/ CVE Url:...

Immunity Canvas: UDEVD

Name| udevd ---|--- CVE| CVE-2009-1185 Exploit Pack| CANVAS Description| udevd Notes| References: 'http://c-skills.blogspot.com/2009/04/udev-trickery-cve-2009-1185-and-cve.html' CVE Name: CVE-2009-1185 VENDOR: Linux Notes: Date public: 04-17-2009 CVE Url:...

Immunity Canvas: ACUTECP_RFI

Name| acutecprfi ---|--- CVE| CVE-2009-1247 Exploit Pack| CANVAS Description| AcuteCP Remote File Include Notes| CVSS: 7.5 Repeatability: Infinite VENDOR: Acutecp CVE Url: https://vulners.com/cve/CVE-2009-1247 CVE Name: CVE-2009-1247...