Immunity Canvas: MYSQL_LOGIN_REMOTE

Name| mysqlloginremote ---|--- CVE| CVE-2012-2122 Exploit Pack| CANVAS Description| MySQL authentication bypass Notes| CVE Name: CVE-2012-2122 OSVDB: http://www.osvdb.org/displayvuln.php?osvdbid=??? Notes: Mysql authentication can be bypassed by bruteforcing a wrong password until the server miss...

Immunity Canvas: ACROBAT_NEWPLAYER

Name| acrobatnewplayer ---|--- CVE| CVE-2009-4324 Exploit Pack| CANVAS Description| acrobatnewplayer Notes| CVE Name: CVE-2009-4324 VersionsAffected: Acrobat Reader =8.1.7 and =9.2 Repeatability: References: http://blogs.adobe.com/psirt/2009/12/newadobereaderandacrobatv.html Date public: 12/14/20...

Immunity Canvas: JOOMLARADIOV5_INCLUDE

Name| joomlaradiov5include ---|--- CVE| CVE-2007-4923 Exploit Pack| CANVAS Description| Joomla Radio v5 Component Remote File Inclusion Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: Joomla CVE Url: https://vulners.com/cve/CVE-2007-4923 CVE Name: CVE-2007-4923...

Immunity Canvas: MERCURIMAPSUBSCRIBE

Name| MercurImapSubscribe ---|--- CVE| CVE-2007-1579 Exploit Pack| CANVAS Description| Mercur Imap SUBSCRIBE stack overflow Notes| CVE Name: CVE-2007-1579 VENDOR: Mercur CVE Url: https://vulners.com/cve/CVE-2007-1579 CVSS: 10.0...

Immunity Canvas: NDPROXY

Name| ndproxy ---|--- CVE| CVE-2013-5065 Exploit Pack| CANVAS Description| NDProxy Notes| References: https://technet.microsoft.com/en-us/security/advisory/2914486 CVE Name: CVE-2013-5065 VENDOR: Microsoft Date public: 11/28/2013 CVE Url:...

Immunity Canvas: JAVA_DOCBASE

Name| javadocbase ---|--- CVE| CVE-2010-3552 Exploit Pack| CANVAS Description| Java IE Plugin "docparam" Overflow Notes| CVE Name: CVE-2010-3552 Vendor: Oracle Notes: This exploit can only be used from clientd. Tested on: Windows XP Professional SP3 EN under IE 8 updated. Windows XP Home SP3 EN...

Immunity Canvas: SMB2_NEGOTIATE_REMOTE

Name| smb2negotiateremote ---|--- CVE| CVE-2009-3103 Exploit Pack| CANVAS Description| SMB2 Negotiate Pointer Dereference Vulnerability Notes| CVE Name: CVE-2009-3103 VENDOR: Microsoft MSADV: MS09-050 VersionsAffected: Repeatability: One shot References: http://blog.48bits.com/?p=510,...

Immunity Canvas: MS09_032

Name| ms09032 ---|--- CVE| CVE-2008-0015 Exploit Pack| CANVAS Description| Microsoft DirectShow msvidctl.dll Vulnerability Notes| CVE Name: CVE-2008-0015 Vendor: Microsoft Notes: Tested against a Windows XP SP2 & SP3 English, German & Simplified Chinese with IE 6. IE 7 asks for confirmation befor...

Immunity Canvas: MS08_001

Name| ms08001 ---|--- CVE| CVE-2007-0069 Exploit Pack| CANVAS Description| Windows TCP/IP IGMPv3 Overflow Notes| CVE Name: CVE-2007-0069 VENDOR: Microsoft NOTES: Due to the complexity of the bug, this exploit will never be 100% reliable. This version of the exploit will only work against non MP...

Immunity Canvas: PLONE

Name| plone ---|--- CVE| CVE-2011-3587 Exploit Pack| CANVAS Description| Plone Zope Remote Command Execution Notes| CVE Name: CVE-2011-3587 Notes: Vulnerable versions include: Plone 4.0 through 4.0.9; Plone 4.1; Plone 4.2 a1 and a2; Zope 2.12.x and Zope 2.13.x. Repeatability: Infinite CVE Url:...

Immunity Canvas: MS_KBLAYOUT

Name| mskblayout ---|--- CVE| CVE-2010-2744 Exploit Pack| CANVAS Description| MSKBLAYOUT Notes| CVE Name: CVE-2010-2744 VENDOR: Microsoft Notes: This is one of the vulnerabilities used by the Stuxnet work to elevate its privileges on Windows XP and Windows 2000. It may cause some minor side effec...

Immunity Canvas: PACERCMS_EXEC

Name| pacercmsexec ---|--- CVE| CVE-2007-5056 Exploit Pack| CANVAS Description| PacerCMS 0.6 Remote Code Execution Notes| CVE Name: CVE-2007-5056 VENDOR: PacerCMS Repeatability: Infinite References: http://secunia.com/advisories/28859/ CVE Url:...

Immunity Canvas: SOLARIS_SAMBA

Name| solarissamba ---|--- CVE| CVE-2007-2446 Exploit Pack| CANVAS Description| SAMBA apilsalookupsids Notes| CVE Name: CVE-2007-2446 VENDOR: Sun and Samba Platforms Tested: Solaris 9 with default SAMBA 2.2.8a, Solaris 8 with sunfreeware SAMBA 3.0.10 Date public: 5/15/2007 CVE Url:...

Immunity Canvas: ERROR_REPORTING_LPE

Name| errorreportinglpe ---|--- CVE| CVE-2019-1315 Exploit Pack| CANVAS Description| Windows Error Reporting Manager arbitrary file move LPE Notes| CVE Name: CVE-2019-1315 Notes: Repeatability: Once IMPORTANT: This Local Privilege Escalation exploit module only works without internet conection Th...

Immunity Canvas: STRUTS2_DEFAULT_ACTION_MAPPER

Name| struts2defaultactionmapper ---|--- CVE| CVE-2013-2251 Exploit Pack| CANVAS Description| Apache Struts 2.0.0 - 2.3.15 RCE Notes| References: https://cwiki.apache.org/confluence/display/WW/S2-016 Repeatability: Infinite VENDOR: Apache CVE Url: https://vulners.com/cve/CVE-2013-2251 CVE Name:...

Immunity Canvas: FIREFOX_UTF8

Name| firefoxutf8 ---|--- CVE| CVE-2008-0016 Exploit Pack| CANVAS Description| firefoxutf8 Notes| CVE Name: CVE-2008-0016 VENDOR: Mozilla Repeatability: One Shot Note: CVE Url: https://vulners.com/cve/CVE-2008-0016 Date public: 09/25/2008 CVSS: 10.0...

Immunity Canvas: CVE_2004_1329

Name| CVE20041329 ---|--- CVE| CVE-2004-1329 Exploit Pack| CANVAS Description| CVE-2004-1329: DIAGNOSTICS environment handling Notes| CVE Name: CVE-2004-1329 VENDOR: IBM VersionsAffected: 5.X Repeatability: unlimited CVE URL: https://vulners.com/cve/CVE-2004-1329 CVSS: 7.2...

Immunity Canvas: CONFLUENCE_MACRO_LFI

Name| confluencemacrolfi ---|--- CVE| CVE-2019-3396 Exploit Pack| CANVAS Description| Confluence Server and Data Center - LFI CVE-2019-3396 Notes| Repeatability: NOTES: A Default behavior =================== By default, this module attempts to automatically locate and then fetch the confluence...

Immunity Canvas: AURORA_FLASH

Name| auroraflash ---|--- CVE| CVE-2010-0249 Exploit Pack| CANVAS Description| Aurora vulnerability with ActionScript JIT spraying for IE8 and Windows 7 Notes| CVE Name: CVE-2010-0249 VENDOR: Microsoft VersionsAffected: Repeatability: References: MS10-002 CVE Url: Date public: 01/21/2001 CVSS: 9....

Immunity Canvas: JOOMLAFLASHFUN_INCLUDE

Name| joomlaflashfuninclude ---|--- CVE| CVE-2007-4955 Exploit Pack| CANVAS Description| Joomla Flashfun Component Remote File Inclusion Notes| CVE Name: CVE-2007-4955 VENDOR: Joomla Repeatability: Infinite References: http://secunia.com/advisories/26799/ CVE Url:...

Immunity Canvas: MS09_002

Name| ms09002 ---|--- CVE| CVE-2009-0075 Exploit Pack| CANVAS Description| MS09002 Notes| CVE Name: CVE-2009-0075 VENDOR: Microsoft Notes: This does not require a fromcreatethread listener. Repeatability: One shot MSADV: MS09-002 References: http://isc.sans.org/diary.html?storyid=5884&rss CVE Url...

Immunity Canvas: VSPLOIT_WINPROX

Name| vsploitwinprox ---|--- CVE| CVE-2007-0796 Exploit Pack| CANVAS Description| WINPROXY Notes| CVE Name: CVE-2007-0796 Repeatability: References: CVE Url: http://cve.mitre.org/cgi-bin/cvename.cgi?name=2007-0796 Date public: CVSS: 7.5...

Immunity Canvas: CAM

Name| cam ---|--- CVE| CVE-2004-1812 Exploit Pack| CANVAS Description| TNG - cam.exe Notes| CVE Name: CVE-2004-1812 VENDOR: Computer Associates VersionsAffected: run camstat: Version 1.05 Jun 8 2000 13:22 TNSVER.exe reports 2.4 Repeatability: This is a one shot exploit. Patch: Patched by...

Immunity Canvas: GALLERY1_INCLUDE

Name| gallery1include ---|--- CVE| CVE-2002-1412 Exploit Pack| CANVAS Description| Gallery 1.2.5 = Remote File Include Notes| CVSS: 7.5 Repeatability: Infinite VENDOR: GNU CVE Url: https://vulners.com/cve/CVE-2002-1412 CVE Name: CVE-2002-1412...

Immunity Canvas: MS14_070

Name| ms14070 ---|--- CVE| CVE-2014-4076 Exploit Pack| CANVAS Description| ms14070 Notes| References: https://technet.microsoft.com/en-us/library/security/ms14-070.aspx CVE Name: CVE-2014-4076 VENDOR: Microsoft NOTES: Tested on: - Windows 2003 Standard Edition x86 SP2 English Usage: Win32/MOSDEF$...

Immunity Canvas: LINUX_PTRACE_SETREGS

Name| linuxptracesetregs ---|--- CVE| CVE-2013-0871 Exploit Pack| CANVAS Description| linuxptracesetregs local root Notes| Repeatability: Infinite Notes: Vulnerable kernels = 3.5 64-bit only. Tested on: - Ubuntu 12.10 64bit - Ubuntu 12.04 64bit - Debian 6 64bit Besides running the module inside...

Immunity Canvas: FS_PIPE_RACE_TO_NULL

Name| fspiperacetonull ---|--- CVE| CVE-2009-3547 Exploit Pack| CANVAS Description| fspiperacetonull local root Notes| Repeatability: Infinite NOTES: Tested on Ubuntu 9.04 32-bit, Ubuntu 9.10 32-bit, kernels 2.6.28|29|30|31 Vulnerable kernels = 2.6.31 32bit. VENDOR: Linux CVE Url:...

Immunity Canvas: SOLARIS_TELNET

Name| solaristelnet ---|--- CVE| CVE-2007-0882 Exploit Pack| CANVAS Description| solaristelnet Notes| References: 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-102802-1', 'http://blogs.sun.com/tpenta/entry/theintelnetdvulnerabilityexploit', 'http://blogs.zdnet.com/security/?p=31',...

Immunity Canvas: MS03_007

Name| ms03007 ---|--- CVE| CVE-2003-0109 Exploit Pack| CANVAS Description| Microsoft IIS 5.0 WebDav Overflow Notes| CVE Name: CVE-2003-0109 VENDOR: Microsoft MSADV: MS03-007 Repeatability: Repeatable References: http://www.microsoft.com/technet/security/bulletin/MS03-007.mspx CVE Url:...

Immunity Canvas: MSSQLHELLO

Name| mssqlhello ---|--- CVE| CVE-2002-1123 Exploit Pack| CANVAS Description| MSSQL Hello Stack Overflow MS02-056 Notes| References: 'http://marc.theaimsgroup.com/?l=bugtraq&m=102865925419469&w=2', 'http://marc.theaimsgroup.com/?l=bugtraq&m=102873609025020&w=2',...

Immunity Canvas: JAVA_RMI_SERVICE

Name| javarmiservice ---|--- CVE| NO-CVE Exploit Pack| CANVAS Description| javarmiservice Notes| References: 'https://docs.oracle.com/javase/8/docs/platform/rmi/spec/rmi-protocol3.html', 'https://docs.oracle.com/javase/7/docs/platform/rmi/spec/rmi-protocol3.html',...

Immunity Canvas: MS_NTVDM

Name| msntvdm ---|--- CVE| CVE-2010-0232 Exploit Pack| CANVAS Description| NtVdmControl-KiTrap0d local Notes| CVE Name: CVE-2010-0232 VENDOR: Microsoft Notes: This exploit gets you LOCAL/SYSTEM on vulnerable versions of Windows which is essentially all of them. It needs a writable directory to...

Immunity Canvas: PROTO_OPS_NULL

Name| protoopsnull ---|--- CVE| CVE-2009-2692 / CVE-2009-2698 Exploit Pack| CANVAS Description| protoopsnull / udpsendmsg Notes| References: 'http://blog.cr0.org/2009/08/linux-null-pointer-dereference-due-to.html' Date public: VENDOR: Linux CVE Url: https://vulners.com/cve/CVE-2009-2692 CVE Name:...

Immunity Canvas: ACROBAT_FLASH

Name| acrobatflash ---|--- CVE| CVE-2009-1862 Exploit Pack| CANVAS Description| Adobe Acrobat Flash Uninitialized object Notes| CVE Name: CVE-2009-1862 VENDOR: Adobe NOTES: Exploitation through an PDF file is more reliable than with a direct HTML/Flash exploit VersionsAffected: 10.0 and below...

Immunity Canvas: MS05_043

Name| ms05043 ---|--- CVE| CVE-2005-1984 Exploit Pack| CANVAS Description| Windows Print Spooler Overflow Notes| References: http://www.microsoft.com/technet/security/Bulletin/MS05-043.mspx CVE Name: CVE-2005-1984 VENDOR: Microsoft MSADV: MS05-043 Repeatability: One shot Note: Run setthreadtoken0...

Immunity Canvas: OPENSSL_KEYLEN

Name| opensslkeylen ---|--- CVE| CVE-2002-0656 Exploit Pack| CANVAS Description| OpenSSL keyarglen Overflow Notes| References: http://www.openssl.org/news/secadv20020730.txt CVE Name: CVE-2002-0656 VENDOR: OpenSSL Repeatability: Multiple WARNING: On busy webservers it might require couple of...

Immunity Canvas: MAPTRACE

Name| maptrace ---|--- CVE| CVE-2013-2171 Exploit Pack| CANVAS Description| maptrace: MMAP/PTRACE privilege escalation Notes| CVE Name: CVE-2013-2171 VENDOR: Intel,FreeBSD Notes: Tested on FreeBSD 9.0-RC3 and FreeBSD 9.0-RELEASE AMD64 To test this exploit from CANVAS use the...

Immunity Canvas: CVE_2012_1182_NONX

Name| CVE20121182NONX ---|--- CVE| CVE-2012-1182 Exploit Pack| CANVAS Description| CVE-2012-1182-NONX Notes| References: http://www.samba.org CVE Name: CVE-2012-1182 VENDOR: Samba Repeatability: Repeatable Date public: 04/10/2012 CVE Url: N/A CVSS: 0.0...

Immunity Canvas: TIKIWIKI_EXEC

Name| tikiwikiexec ---|--- CVE| CVE-2007-5423 Exploit Pack| CANVAS Description| TikiWiki function create exploit Notes| CVSS: 7.5 Repeatability: Infinite VENDOR: Tikiwiki CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5423 CVE Name: CVE-2007-5423...

Immunity Canvas: MS06_055

Name| ms06055 ---|--- CVE| CVE-2006-4868 Exploit Pack| CANVAS Description| Internet Explorer Vector Markup Language Overflow Notes| CVE Name: CVE-2006-4868 VENDOR: Microsoft MSADV: MS06-055 VersionsAffected: Repeatability: Infinite References:...

Immunity Canvas: MS06_014

Name| ms06014 ---|--- CVE| CVE-2006-0003 Exploit Pack| CANVAS Description| RDS Datastore MS06-014 Notes| CVE Name: CVE-2006-0003 VENDOR: Microsoft MSADV: MS06-014 Repeatability: Infinite client side - no crash MSRC: http://www.microsoft.com/technet/security/Bulletin/MS06-014.mspx CVE Url:...

Immunity Canvas: MS03_026

Name| ms03026 ---|--- CVE| CVE-2003-0352 Exploit Pack| CANVAS Description| Microsoft Windows RPC Interface Overflow MS03-026 Notes| CVE Name: CVE-2003-0352 VENDOR: Microsoft MSADV: MS03-026 VersionsAffected: Repeatability: References: http://www.microsoft.com/technet/security/bulletin/MS03-026.ms...

Immunity Canvas: WUFTPD_SEXEC

Name| wuftpdsexec ---|--- CVE| CVE-2000-0573 Exploit Pack| CANVAS Description| WuFTPD SITE EXEC Formatstring Bug Notes| References: http://www.securityfocus.com/bid/1387 CVE Name: CVE-2000-0573 VENDOR: wuftpd.org Repeatability: Multiple tries Date public: 22-06-2000 CERT Advisory:...

Immunity Canvas: LINUX_RDS

Name| linuxrds ---|--- CVE| CVE-2010-3904 Exploit Pack| CANVAS Description| linuxrds Notes| References: 'http://www.vsecurity.com/resources/advisory/20101019-1/' Date public: 2010-10-19 VENDOR: Linux CVE Url: https://vulners.com/cve/CVE-2010-3904 CVE Name: CVE-2010-3904...

Immunity Canvas: ZENCART_REMOTE

Name| zencartremote ---|--- CVE| CVE-2009-2255 Exploit Pack| CANVAS Description| zencartremote Notes| Repeatability: Infinite CVE URL: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-2255 VENDOR: www.zen-cart.com/ CVSS: 6.8 CVE Name: CVE-2009-2255...

Immunity Canvas: JOOMLACLICKHEAT_RFI

Name| joomlaclickheatrfi ---|--- CVE| CVE-2008-5793 Exploit Pack| CANVAS Description| Joomla comclickheat Remote File Include Notes| CVE Name: CVE-2008-5793 VENDOR: Joomla Notes: Web exploits are generally called directly from the GUI by double clicking on the module name and are written for Linu...

Immunity Canvas: ICECAST

Name| icecast ---|--- CVE| CVE-2004-1561 Exploit Pack| CANVAS Description| ICECAST exploit Notes| CVSS: 7.5 Date public: September of 2004 VENDOR: Icecast.org CVE Url: https://vulners.com/cve/CVE-2004-1561 CVE Name: CVE-2004-1561...

Immunity Canvas: NIPRINT

Name| niprint ---|--- CVE| CVE-2003-1141 Exploit Pack| CANVAS Description| NIPrint 4.x remote exploit Notes| CVE Name: CVE-2003-1141 VENDOR: networkinstruments.com Repeatability: You get one shot References: http://www.networkinstruments.com/html/niprint.html CVE Url:...

Immunity Canvas: DRUPAL_NAME_SQLI

Name| drupalnamesqli ---|--- CVE| CVE-2014-3704 Exploit Pack| CANVAS Description| Drupal injection exploit Notes| CVE Name: CVE-2014-3704 VENDOR: drupal.org Notes: This exploit replaces the password of 'Drupal User' with 'Drupal Password'. If uid is specified, 'Drupal User' is ignored...

Immunity Canvas: FIREFOX_APPENDCHILD

Name| firefoxappendchild ---|--- CVE| CVE-2010-3765 Exploit Pack| CANVAS Description| firefoxappendchild Notes| CVE Name: CVE-2010-3765 VENDOR: Mozilla Notes: Interleaving document.write and appendChild can lead to duplicate text frames and overrunning of text run buffers. This exploit can only b...