Immunity Canvas: MS03_049

Name| ms03049 ---|--- CVE| CVE-2003-0812 Exploit Pack| CANVAS Description| Microsoft Windows Workstation Service RPC Overflow Notes| CVE Name: CVE-2003-0812 VENDOR: Microsoft Notes: This exploit will crash the service if XP SP1a is running under Virtual PC or Virtual Server Microsoft's...

Immunity Canvas: WEBMIN

Name| webmin ---|--- CVE| CVE-2005-3912 Exploit Pack| CANVAS Description| Webmin Remote Exploit Notes| CVE Name: CVE-2005-3912 VENDOR: Webmin.com OSVDB: Repeatability: References: http://www.dyadsecurity.com/webmin-0001.html - http://www.dyadsecurity.com/perl-0002.html CVE Url:...

Immunity Canvas: GAPPLE_CLIENT

Name| gappleclient ---|--- CVE| CVE-2005-0045 Exploit Pack| CANVAS Description| GREENAPPLE MS05-011 Notes| CVE Name: CVE-2005-0045 VENDOR: Microsoft Pre-exploitation: Requires CANVAS to be run as root/administrator MSADV: MS05-011 MSRC:...

Immunity Canvas: MS04_011_LSASS

Name| ms04011lsass ---|--- CVE| CVE-2003-0533 Exploit Pack| CANVAS Description| Microsoft Windows LsaSs RPC Overflow Notes| CVE Name: CVE-2003-0533 VENDOR: Microsoft MSADV: MS04-011-LSASS VersionsAffected: Repeatability: References: http://www.microsoft.com/technet/security/Bulletin/MS04-011.mspx...

Immunity Canvas: SAMBA_TRANS2

Name| sambatrans2 ---|--- CVE| CVE-2003-0201 Exploit Pack| CANVAS Description| sambatrans2 Notes| References: http://www.redhat.com/support/errata/RHSA-2003-137.html CVE Name: CVE-2003-0201 VENDOR: Samba Date public: Apr 07, 2003 CERT Advisory: Versions Tested: Red Hat Linux release 8.0 Psyche:...

Immunity Canvas: JAVA_ATOMICREFERENCEARRAY

Name| javaAtomicReferenceArray ---|--- CVE| CVE-2012-0507 Exploit Pack| CANVAS Description| Java AtomicReferenceArray Type Confusion Sandbox Bypass Notes| CVE Name: CVE-2012-0507 VENDOR: Sun Notes: There is a Type Confusion vulnerability in java.util.concurrent.atomic.AtomicReferenceArray class...

Immunity Canvas: CVE_2010_4452

Name| CVE20104452 ---|--- CVE| CVE-2010-4452 Exploit Pack| CANVAS Description| CVE20104452 Notes| CVE Name: CVE-2010-4452 VENDOR: Oracle NOTES: This exploit will work against Java plugin bundled with Oracle/SUN JDK/JRE = 6 Update 23. Target operating systems are Windows all versions and Ubuntu...

Immunity Canvas: JAVA_DESERIALIZE2

Name| javadeserialize2 ---|--- CVE| CVE-2010-0094 Exploit Pack| CANVAS Description| javadeserialize2 Notes| CVE Name: CVE-2010-0094 VENDOR: Sun OSVDB: http://osvdb.org/show/osvdb/63484 Repeatability: Infinite client side - no crash References:...

Immunity Canvas: ACROBAT_U3D_MESH

Name| acrobatu3dmesh ---|--- CVE| CVE-2009-3953 Exploit Pack| CANVAS Description| acrobatu3dmesh Notes| CVE Name: CVE-2009-3953 Notes: This exploit works on Windows XP without DEP. DEP defaults to "opt-in" on Windows XP SP2/3. IE8 and modern Firefox will opt-in to DEP, causing this exploit to fai...

Immunity Canvas: ERROR_REPORTING_LPE

Name| errorreportinglpe ---|--- CVE| CVE-2019-1315 Exploit Pack| CANVAS Description| Windows Error Reporting Manager arbitrary file move LPE Notes| CVE Name: CVE-2019-1315 Notes: Repeatability: Once IMPORTANT: This Local Privilege Escalation exploit module only works without internet conection Th...

Immunity Canvas: IE_SETUSERCLIP

Name| iesetuserclip ---|--- CVE| CVE-2010-3962 Exploit Pack| CANVAS Description| iesetuserclip Notes| Date public: 11/04/2010 Notes: This bug was discovered in the wild. IE6, 7 and 8 are vulnerable to this bug, but because of its behaviour some versions will not be exploitable. The only full...

Immunity Canvas: MS09_032

Name| ms09032 ---|--- CVE| CVE-2008-0015 Exploit Pack| CANVAS Description| Microsoft DirectShow msvidctl.dll Vulnerability Notes| CVE Name: CVE-2008-0015 Vendor: Microsoft Notes: Tested against a Windows XP SP2 & SP3 English, German & Simplified Chinese with IE 6. IE 7 asks for confirmation befor...

Immunity Canvas: MERCURIMAPSUBSCRIBE

Name| MercurImapSubscribe ---|--- CVE| CVE-2007-1579 Exploit Pack| CANVAS Description| Mercur Imap SUBSCRIBE stack overflow Notes| CVE Name: CVE-2007-1579 VENDOR: Mercur CVE Url: https://vulners.com/cve/CVE-2007-1579 CVSS: 10.0...

Immunity Canvas: FUZZYLIME_INCLUDE

Name| fuzzylimeinclude ---|--- CVE| CVE-2008-1405 Exploit Pack| CANVAS Description| fuzzylime cms = 3.01 Remote File include Notes| CVE Name: CVE-2008-1405 VENDOR: FuzzyLime Repeatability: Infinite References: http://www.securityfocus.com/bid/28838 CVE Url: https://vulners.com/cve/CVE-2008-1405...

Immunity Canvas: VSPLOIT_WINPROX

Name| vsploitwinprox ---|--- CVE| CVE-2007-0796 Exploit Pack| CANVAS Description| WINPROXY Notes| CVE Name: CVE-2007-0796 Repeatability: References: CVE Url: http://cve.mitre.org/cgi-bin/cvename.cgi?name=2007-0796 Date public: CVSS: 7.5...

Immunity Canvas: 3COMTFTP

Name| 3comtftp ---|--- CVE| CVE-2006-6183 Exploit Pack| CANVAS Description| 3comTFTP Notes| CVE Name: CVE-2006-6183 VENDOR: 3com Notes: This exploit should work against 3ComTFTPD version 2.0.1 - the current version is called 3ComDaemon version 2.0.10, which is a completely different program...

Immunity Canvas: ICECAST

Name| icecast ---|--- CVE| CVE-2004-1561 Exploit Pack| CANVAS Description| ICECAST exploit Notes| CVSS: 7.5 Date public: September of 2004 VENDOR: Icecast.org CVE Url: https://vulners.com/cve/CVE-2004-1561 CVE Name: CVE-2004-1561...

Immunity Canvas: CONFLUENCE_MACRO_LFI

Name| confluencemacrolfi ---|--- CVE| CVE-2019-3396 Exploit Pack| CANVAS Description| Confluence Server and Data Center - LFI CVE-2019-3396 Notes| Repeatability: NOTES: A Default behavior =================== By default, this module attempts to automatically locate and then fetch the confluence...

Immunity Canvas: DRUPAL_NAME_SQLI_CALLBACK

Name| drupalnamesqlicallback ---|--- CVE| CVE-2014-3704 Exploit Pack| CANVAS Description| Drupal injection exploit Notes| CVE Name: CVE-2014-3704 VENDOR: drupal.org Notes: This exploit tries to open a php callback to canvas by injecting php code in Drupal's login block through the database sql...

Immunity Canvas: MS_KBLAYOUT

Name| mskblayout ---|--- CVE| CVE-2010-2744 Exploit Pack| CANVAS Description| MSKBLAYOUT Notes| CVE Name: CVE-2010-2744 VENDOR: Microsoft Notes: This is one of the vulnerabilities used by the Stuxnet work to elevate its privileges on Windows XP and Windows 2000. It may cause some minor side effec...

Immunity Canvas: MS08_001

Name| ms08001 ---|--- CVE| CVE-2007-0069 Exploit Pack| CANVAS Description| Windows TCP/IP IGMPv3 Overflow Notes| CVE Name: CVE-2007-0069 VENDOR: Microsoft NOTES: Due to the complexity of the bug, this exploit will never be 100% reliable. This version of the exploit will only work against non MP...

Immunity Canvas: PLONE

Name| plone ---|--- CVE| CVE-2011-3587 Exploit Pack| CANVAS Description| Plone Zope Remote Command Execution Notes| CVE Name: CVE-2011-3587 Notes: Vulnerable versions include: Plone 4.0 through 4.0.9; Plone 4.1; Plone 4.2 a1 and a2; Zope 2.12.x and Zope 2.13.x. Repeatability: Infinite CVE Url:...

Immunity Canvas: AURORA_FLASH

Name| auroraflash ---|--- CVE| CVE-2010-0249 Exploit Pack| CANVAS Description| Aurora vulnerability with ActionScript JIT spraying for IE8 and Windows 7 Notes| CVE Name: CVE-2010-0249 VENDOR: Microsoft VersionsAffected: Repeatability: References: MS10-002 CVE Url: Date public: 01/21/2001 CVSS: 9....

Immunity Canvas: SMB2_NEGOTIATE_REMOTE

Name| smb2negotiateremote ---|--- CVE| CVE-2009-3103 Exploit Pack| CANVAS Description| SMB2 Negotiate Pointer Dereference Vulnerability Notes| CVE Name: CVE-2009-3103 VENDOR: Microsoft MSADV: MS09-050 VersionsAffected: Repeatability: One shot References: http://blog.48bits.com/?p=510,...

Immunity Canvas: SUNLOGIN_PAMH

Name| sunloginpamh ---|--- CVE| CVE-2001-0797 Exploit Pack| CANVAS Description| Sun Login pamh Overflow Notes| References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F41987&zone32=category%3Asecurity CVE Name: CVE-2001-0797 VENDOR: Sun Patch Information: Solaris 2.5.1 patch 106160-0...

Immunity Canvas: MSSQLHELLO

Name| mssqlhello ---|--- CVE| CVE-2002-1123 Exploit Pack| CANVAS Description| MSSQL Hello Stack Overflow MS02-056 Notes| References: 'http://marc.theaimsgroup.com/?l=bugtraq&m=102865925419469&w=2', 'http://marc.theaimsgroup.com/?l=bugtraq&m=102873609025020&w=2',...

Immunity Canvas: CAM

Name| cam ---|--- CVE| CVE-2004-1812 Exploit Pack| CANVAS Description| TNG - cam.exe Notes| CVE Name: CVE-2004-1812 VENDOR: Computer Associates VersionsAffected: run camstat: Version 1.05 Jun 8 2000 13:22 TNSVER.exe reports 2.4 Repeatability: This is a one shot exploit. Patch: Patched by...

Immunity Canvas: NDPROXY

Name| ndproxy ---|--- CVE| CVE-2013-5065 Exploit Pack| CANVAS Description| NDProxy Notes| References: https://technet.microsoft.com/en-us/security/advisory/2914486 CVE Name: CVE-2013-5065 VENDOR: Microsoft Date public: 11/28/2013 CVE Url:...

Immunity Canvas: MS08_078

Name| ms08078 ---|--- CVE| CVE-2008-4844 Exploit Pack| CANVAS Description| MS Internet Explorer XML Parsing Vulnerability Notes| CVE Name: CVE-2008-4844 VENDOR: Microsoft MSADV: MS08-078 Repeatability: One Shot MSRC: http://www.microsoft.com/technet/security/Bulletin/MS08-078.mspx Note: After the...

Immunity Canvas: TIKIWIKI_EXEC

Name| tikiwikiexec ---|--- CVE| CVE-2007-5423 Exploit Pack| CANVAS Description| TikiWiki function create exploit Notes| CVSS: 7.5 Repeatability: Infinite VENDOR: Tikiwiki CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5423 CVE Name: CVE-2007-5423...

Immunity Canvas: PACERCMS_EXEC

Name| pacercmsexec ---|--- CVE| CVE-2007-5056 Exploit Pack| CANVAS Description| PacerCMS 0.6 Remote Code Execution Notes| CVE Name: CVE-2007-5056 VENDOR: PacerCMS Repeatability: Infinite References: http://secunia.com/advisories/28859/ CVE Url:...

Immunity Canvas: CVE_2004_1329

Name| CVE20041329 ---|--- CVE| CVE-2004-1329 Exploit Pack| CANVAS Description| CVE-2004-1329: DIAGNOSTICS environment handling Notes| CVE Name: CVE-2004-1329 VENDOR: IBM VersionsAffected: 5.X Repeatability: unlimited CVE URL: https://vulners.com/cve/CVE-2004-1329 CVSS: 7.2...

Immunity Canvas: MYSQL_LOGIN_REMOTE

Name| mysqlloginremote ---|--- CVE| CVE-2012-2122 Exploit Pack| CANVAS Description| MySQL authentication bypass Notes| CVE Name: CVE-2012-2122 OSVDB: http://www.osvdb.org/displayvuln.php?osvdbid=??? Notes: Mysql authentication can be bypassed by bruteforcing a wrong password until the server miss...

Immunity Canvas: MS09_002

Name| ms09002 ---|--- CVE| CVE-2009-0075 Exploit Pack| CANVAS Description| MS09002 Notes| CVE Name: CVE-2009-0075 VENDOR: Microsoft Notes: This does not require a fromcreatethread listener. Repeatability: One shot MSADV: MS09-002 References: http://isc.sans.org/diary.html?storyid=5884&rss CVE Url...

Immunity Canvas: ACROBAT_JS

Name| acrobatjs ---|--- CVE| CVE-2007-5659 Exploit Pack| CANVAS Description| Adobe Acrobat Reader Stack Overflow 8.1.1 Notes| CVE Name: CVE-2007-5659 VENDOR: Adobe VersionsAffected: 8.1.1 and Below Repeatability: References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=657...

Immunity Canvas: JOOMLAMP3_INCLUDE

Name| joomlamp3include ---|--- CVE| CVE-2007-5412 Exploit Pack| CANVAS Description| Joomla commp3allopass Component Remote File Inclusion Notes| CVE Name: CVE-2007-5412 VENDOR: Joomla Repeatability: Infinite References: http://securityreason.com/exploitalert/2881 CVE Url:...

Immunity Canvas: JOOMLAFLASHFUN_INCLUDE

Name| joomlaflashfuninclude ---|--- CVE| CVE-2007-4955 Exploit Pack| CANVAS Description| Joomla Flashfun Component Remote File Inclusion Notes| CVE Name: CVE-2007-4955 VENDOR: Joomla Repeatability: Infinite References: http://secunia.com/advisories/26799/ CVE Url:...

Immunity Canvas: GALLERY1_INCLUDE

Name| gallery1include ---|--- CVE| CVE-2002-1412 Exploit Pack| CANVAS Description| Gallery 1.2.5 = Remote File Include Notes| CVSS: 7.5 Repeatability: Infinite VENDOR: GNU CVE Url: https://vulners.com/cve/CVE-2002-1412 CVE Name: CVE-2002-1412...

Immunity Canvas: WUFTPD_SEXEC

Name| wuftpdsexec ---|--- CVE| CVE-2000-0573 Exploit Pack| CANVAS Description| WuFTPD SITE EXEC Formatstring Bug Notes| References: http://www.securityfocus.com/bid/1387 CVE Name: CVE-2000-0573 VENDOR: wuftpd.org Repeatability: Multiple tries Date public: 22-06-2000 CERT Advisory:...

Immunity Canvas: SUN_JAVA_HSBPARSER

Name| sunjavahsbparser ---|--- CVE| CVE-2009-3867 Exploit Pack| CANVAS Description| sunjavahsbparser Notes| URL: http://seclists.org/bugtraq/2009/Nov/37 CVE Name: CVE-2009-3867 VENDOR: Sun CVE Url: http://cve.mitre.org/cgi-bin/cvename.cgi?name=2009-3867...

Immunity Canvas: MS06_014

Name| ms06014 ---|--- CVE| CVE-2006-0003 Exploit Pack| CANVAS Description| RDS Datastore MS06-014 Notes| CVE Name: CVE-2006-0003 VENDOR: Microsoft MSADV: MS06-014 Repeatability: Infinite client side - no crash MSRC: http://www.microsoft.com/technet/security/Bulletin/MS06-014.mspx CVE Url:...

Immunity Canvas: MS05_039

Name| ms05039 ---|--- CVE| CVE-2005-1983 Exploit Pack| CANVAS Description| Microsoft Windows PnP RPC Overflow Notes| CVE Name: CVE-2005-1983 VENDOR: Microsoft MSADV: MS05-039 Repeatability: One shot Note: Windows XP needs a valid username and password References:...

Immunity Canvas: NIPRINT

Name| niprint ---|--- CVE| CVE-2003-1141 Exploit Pack| CANVAS Description| NIPrint 4.x remote exploit Notes| CVE Name: CVE-2003-1141 VENDOR: networkinstruments.com Repeatability: You get one shot References: http://www.networkinstruments.com/html/niprint.html CVE Url:...

Immunity Canvas: JAVA_RMI_SERVICE

Name| javarmiservice ---|--- CVE| NO-CVE Exploit Pack| CANVAS Description| javarmiservice Notes| References: 'https://docs.oracle.com/javase/8/docs/platform/rmi/spec/rmi-protocol3.html', 'https://docs.oracle.com/javase/7/docs/platform/rmi/spec/rmi-protocol3.html',...

Immunity Canvas: FS_PIPE_RACE_TO_NULL

Name| fspiperacetonull ---|--- CVE| CVE-2009-3547 Exploit Pack| CANVAS Description| fspiperacetonull local root Notes| Repeatability: Infinite NOTES: Tested on Ubuntu 9.04 32-bit, Ubuntu 9.10 32-bit, kernels 2.6.28|29|30|31 Vulnerable kernels = 2.6.31 32bit. VENDOR: Linux CVE Url:...

Immunity Canvas: JAVA_FORNAME_GETFIELD

Name| javaforNamegetField ---|--- CVE| CVE-2012-4681 Exploit Pack| CANVAS Description| Java forName/getField Method Invocation Sandbox Bypass Notes| CVE Name: CVE-2012-4681 VENDOR: Sun Notes: There is a method invocation vulnerability using sun.awt.SunToolkit.getField This vulnerability can then ...

Immunity Canvas: ZENCART_REMOTE

Name| zencartremote ---|--- CVE| CVE-2009-2255 Exploit Pack| CANVAS Description| zencartremote Notes| Repeatability: Infinite CVE URL: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-2255 VENDOR: www.zen-cart.com/ CVSS: 6.8 CVE Name: CVE-2009-2255...

Immunity Canvas: LOCALLPC

Name| localLPC ---|--- CVE| CVE-2006-6696 Exploit Pack| CANVAS Description| LPC local MS07-021 Notes| CVE Name: CVE-2006-6696 VENDOR: Microsoft MSADV: MS07-021 CVSS: 6.9 CVE Url: https://vulners.com/cve/CVE-2006-6696 Notes: If you get FFFFFFF that means inetinfo died sorry,...

Immunity Canvas: MS04_011_SSLPCT

Name| ms04011sslpct ---|--- CVE| CVE-2003-0719 Exploit Pack| CANVAS Description| Microsoft SSL PCT Hello Overflow Notes| References: http://www.microsoft.com/technet/security/bulletin/MS04-011.mspx CVE Name: CVE-2003-0719 VENDOR: Microsoft Notes: Repeatability: One shot MSADV: MS04-011-SSL-PCT Da...

Immunity Canvas: OPENSSL_KEYLEN

Name| opensslkeylen ---|--- CVE| CVE-2002-0656 Exploit Pack| CANVAS Description| OpenSSL keyarglen Overflow Notes| References: http://www.openssl.org/news/secadv20020730.txt CVE Name: CVE-2002-0656 VENDOR: OpenSSL Repeatability: Multiple WARNING: On busy webservers it might require couple of...