Immunity Canvas: IE_COMMENTS

Name| iecomments ---|--- CVE| CVE-2010-0244 Exploit Pack| CANVAS Description| iecomments Notes| CVE Name: CVE-2010-0244 VENDOR: Microsoft MSADV: MS10-0?? VersionsAffected: Repeatability: References: http://www.microsoft.com/technet/security/bulletin/ms10-002.mspx Date public: 12/25/2009...

Immunity Canvas: GRAPE_INCLUDE

Name| grapeinclude ---|--- CVE| CVE-2008-1963 Exploit Pack| CANVAS Description| Grape Web Statistics Remote File include Notes| CVE Name: CVE-2008-1963 VENDOR: Quate Repeatability: Infinite References: http://www.securityfocus.com/bid/28838 CVE Url: https://vulners.com/cve/CVE-2008-1963 CVSS: 7.5...

Immunity Canvas: WFTPD

Name| wftpd ---|--- CVE| CVE-2006-4318 Exploit Pack| CANVAS Description| wFTPD Notes| CVE Name: CVE-2006-4318 VENDOR: Texas Imperial Software CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4318 CVSS: 6.5...

Immunity Canvas: WINGATE_HTTPPROXY

Name| wingatehttpproxy ---|--- CVE| CVE-2006-2926 Exploit Pack| CANVAS Description| Wingate 6.1.1 remote exploit Notes| CVE Name: CVE-2006-2926 VENDOR: Wingate.com Repeatability: You get one shot References: CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2926 Date public:...

Immunity Canvas: JAVA_JAXWS

Name| javajaxws ---|--- CVE| CVE-2012-5076 Exploit Pack| CANVAS Description| Java Applet JAX-WS Remote Code Execution Notes| CVE Name: CVE-2012-5076 VENDOR: Sun Notes: Affected versions JDK and JRE 7 Update 7 and earlier Tested on: - Windows XP SP3 with JDK/JRE 7 update 6 To run from command line...

Immunity Canvas: JAVA_RHINO

Name| javarhino ---|--- CVE| CVE-2011-3544 Exploit Pack| CANVAS Description| javarhino Notes| CVE Name: CVE-2011-3544 VENDOR: Sun OSVDB: http://osvdb.org/show/osvdb/76500 Repeatability: Infinite client side - no crash References: http://schierlm.users.sourceforge.net/CVE-2011-3544.html CVE Url:...

Immunity Canvas: IE_HELP

Name| iehelp ---|--- CVE| CVE-2010-0483 Exploit Pack| CANVAS Description| iehelp Notes| CVE Name: CVE-2010-0483 VENDOR: Microsoft Notes: Use from httpserver with name iehelp. Options are: message - Message of the MessageBox to be displayed to the user default: "Press F1 to stop this" Must not be...

Immunity Canvas: SAFARI_FILE_STEALING

Name| safarifilestealing ---|--- CVE| CVE-2008-4216 Exploit Pack| CANVAS Description| Safari 3.2 File Stealing Notes| A Warning: Due to the nature of this exploit, a file error.html will be left behind on the target system CVE Name: CVE-2008-4216 VENDOR: Apple NOTES: There are a lot of things...

Immunity Canvas: FIREFOX_DEFINESETTER

Name| firefoxdefinesetter ---|--- CVE| CVE-2008-2798 Exploit Pack| CANVAS Description| Firefox = 2.0.0.14 Javascript defineSetter Memory Corruption Notes| CVE Name: CVE-2008-2798 VENDOR: Mozilla Repeatability: Infinite client side - crash the browser CVS URL:...

Immunity Canvas: JAFCMS_INCLUDE

Name| jafcmsinclude ---|--- CVE| CVE-2008-1609 Exploit Pack| CANVAS Description| Jaf-CMS Remote File include Notes| CVE Name: CVE-2008-1609 VENDOR: Jaf-CMS Repeatability: Infinite References: http://packetstormsecurity.org/filedesc/jafcms-rfi.txt.html CVE Url: https://vulners.com/cve/CVE-2008-160...

Immunity Canvas: WPBACKUP_INCLUDE

Name| wpbackupinclude ---|--- CVE| CVE-2007-5800 Exploit Pack| CANVAS Description| WordPress plugin BackUpWordPress = 0.4.2b Remote File Inclusion Notes| CVE Name: CVE-2007-5800 VENDOR: WordPress Repeatability: Infinite References:...

Immunity Canvas: MS07_029

Name| ms07029 ---|--- CVE| CVE-2007-1748 Exploit Pack| CANVAS Description| Microsoft DNS Server RPC Interface Overflow Notes| References: http://www.microsoft.com/technet/security/Bulletin/ms07-029.mspx CVE Name: CVE-2007-1748 VENDOR: Microsoft Notes: MSADV: MS07-029 Date public: 04/04/2007 CVE...

Immunity Canvas: CMSD_XDRARRAY

Name| cmsdxdrarray ---|--- CVE| CVE-2002-0391 Exploit Pack| CANVAS Description| cmsdxdrarray Notes| References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F46122 CVE Name: CVE-2002-0391 VENDOR: Sun Date public: Jul 30, 2002 CERT Advisory: http://www.cert.org/advisories/CA-2002-25.ht...

Immunity Canvas: ORACLE_FORMS_RCE

Name| oracleformsrce ---|--- CVE| CVE-2014-4278 Exploit Pack| CANVAS Description| Oracle Forms 10g Unauthenticated Remote Code Execution Notes| Info: https://securitytracker.com/id/1031042 Repeatability: Infinite VENDOR: Oracle CVE Url: https://vulners.com/cve/CVE-2014-4278 CVE Name: CVE-2014-427...

Immunity Canvas: IE_CDISPLAYPOINTER

Name| iecdisplaypointer ---|--- CVE| CVE-2013-3897 Exploit Pack| CANVAS Description| iecdisplaypointer Notes| CVE Name: CVE-2013-3897 VENDOR: Microsoft Notes: VersionsAffected: 8 Repeatability: Infinite References:...

Immunity Canvas: MS11_003

Name| ms11003 ---|--- CVE| CVE-2010-3971 Exploit Pack| CANVAS Description| IE7 recursive import css vulnerability Notes| CVE Name: CVE-2010-3971 MSADV: MS11-003 Repeatability: Infinite...

Immunity Canvas: MS07_067

Name| ms07067 ---|--- CVE| CVE-2007-5587 Exploit Pack| CANVAS Description| Macrovision SecDrv.sys Arbitrary Overwrite Notes| References: www.microsoft.com/technet/security/Bulletin/MS07-067.mspx CVE Name: CVE-2007-5587 VENDOR: Microsoft MSADV: MS07-067 Date public: 10/17/07 CVE Url:...

Immunity Canvas: PHPSITEBACKUP_INCLUDE

Name| phpsitebackupinclude ---|--- CVE| CVE-2007-2199 Exploit Pack| CANVAS Description| phpSiteBack Include Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: phpsitebackup CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2199 CVE Name: CVE-2007-2199...

Immunity Canvas: GDIWRITE4

Name| GDIWrite4 ---|--- CVE| CVE-2006-5758 Exploit Pack| CANVAS Description| GDIWrite4 MS07-017 Notes| CVE Name: CVE-2006-5758 VENDOR: Microsoft Notes: This exploit will auto-target based on reading a kernel file on Windows 2000 or XP. It will generate a target fingerprint when you run the...

Immunity Canvas: DTSPCD

Name| dtspcd ---|--- CVE| CVE-2001-0803 Exploit Pack| CANVAS Description| dtspcd Notes| References: http://xforce.iss.net/alerts/advise101.php http://www.kb.cert.org/vuls/id/172583 CVE Name: CVE-2001-0803 VENDOR: Sun Date public: Nov 06, 2001 CERT Advisory:...

Immunity Canvas: RAILS_ACCEPT_READFILE

Name| railsacceptreadfile ---|--- CVE| CVE-2019-5418 Exploit Pack| CANVAS Description| Ruby on Rails Arbitrary File Read CVE-2019-5418 Notes| CVE Name: CVE-2019-5418 VENDOR: Rails NOTES: The vulnerability resides in Action View in combination with calls to 'render file:' in a controller. You need...

Immunity Canvas: ACROBAT_XFA

Name| acrobatxfa ---|--- CVE| CVE-2013-0640 Exploit Pack| CANVAS Description| Adobe Acrobat Reader XFA =10.X Notes| CVE Name: CVE-2013-0640 VENDOR: Adobe VersionsAffected: 10.X and below Repeatability: CVE Url: https://vulners.com/cve/CVE-2013-0640 CERT Advisory: None CVSS: 9.3...

Immunity Canvas: CVE_2010_3856

Name| CVE20103856 ---|--- CVE| CVE-2010-3856 Exploit Pack| CANVAS Description| CVE20103856 Notes| CVE Name: CVE-2010-3856 VENDOR: Linux NOTES: See the FD post for a ton of details, try this exploit on RedHat derived distributions, this may also work against Ubuntu. If it fails but you think the...

Immunity Canvas: PHPDJ_INCLUDE

Name| phpdjinclude ---|--- CVE| CVE-2007-5574 Exploit Pack| CANVAS Description| phpDJ remote file include Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: phpdj CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5574 CVE Name: CVE-2007-5574...

Immunity Canvas: IE7WMP

Name| ie7wmp ---|--- CVE| CVE-2007-3896 Exploit Pack| CANVAS Description| Microsoft IE 7 url-handling error MS07-061 Notes| CVE Name: CVE-2007-3896 VENDOR: Microsoft MSADV: MS07-061 Repeatability: Infinite client side - no crash MSRC: http://www.microsoft.com/technet/security/bulletin/MS07-061.ms...

Immunity Canvas: LIMESURVEY_INCLUDE

Name| limesurveyinclude ---|--- CVE| CVE-2007-3632 Exploit Pack| CANVAS Description| LimeSurvey Include Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: Limesurvey.org CVE Url: https://vulners.com/cve/CVE-2007-3632 CVE Name: CVE-2007-3632...

Immunity Canvas: DB2_JDBC

Name| db2jdbc ---|--- CVE| CVE-2007-2582 Exploit Pack| CANVAS Description| IBM DB2 JDBC Applet Server Overflow Notes| References: http://www.zerodayinitiative.com/advisories/ZDI-07-056.html CVE Name: CVE-2007-2582 VENDOR: IBM Notes: Repeatability: Date public: 10/10/07 CVE Url:...

Immunity Canvas: WORDTUBE_REMOTE

Name| wordtuberemote ---|--- CVE| CVE-2007-2481 Exploit Pack| CANVAS Description| WordPress Plugin WordTube Remote Include Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: alexrabe.boelinger.com CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2481 CVE Name: CVE-2007-2481...

Immunity Canvas: MS06_071

Name| ms06071 ---|--- CVE| CVE-2006-5745 Exploit Pack| CANVAS Description| Microsoft XML Core Services 4.0 Vulnerability Notes| CVE Name: CVE-2006-5745 VENDOR: Microsoft MSADV: MS06-071 VersionsAffected: Repeatability: Infinite References:...

Immunity Canvas: MS12_005

Name| ms12005 ---|--- CVE| CVE-2012-0013 Exploit Pack| CANVAS Description| MS12-005: MS Office 2007-2010 Shell Object Packager file extension bypass Notes| Repeatability: Infinite Notes: The issue we exploit here was fixed silently alongside the ClickOnce issues in the MS12-005 patch but allows f...

Immunity Canvas: SAFARI_FILE_STEALING2

Name| safarifilestealing2 ---|--- CVE| CVE-2009-1699 Exploit Pack| CANVAS Description| Safari 3.2 XSL File Stealing Notes| CVE Name: CVE-2009-1699 VENDOR: Apple Reference: http://scary.beasts.org/security/CESA-2009-006.html Arugments: After you have placed your single file in the correct...

Immunity Canvas: CPCOMMERCE_RFI

Name| cpcommercerfi ---|--- CVE| CVE-2009-1936 Exploit Pack| CANVAS Description| cpCommerce 1.2.x Remote File Include Notes| CVE Name: CVE-2009-1936 VENDOR: cpCommerce Repeatability: Infinite CVE Url: https://vulners.com/cve/CVE-2009-1936 References: 'http://www.securityfocus.com/bid/35103' CVSS:...

Immunity Canvas: JOOMLACOMPETITIONS_RFI

Name| joomlacompetitionsrfi ---|--- CVE| CVE-2008-5790 Exploit Pack| CANVAS Description| Joomla comcompetitions Remote File Include Notes| CVSS: 7.5 Repeatability: Infinite VENDOR: Joomla CVE Url: https://vulners.com/cve/CVE-2008-5790 CVE Name: CVE-2008-5790...

Immunity Canvas: WPSNIPLETS_RFI

Name| wpsnipletsrfi ---|--- CVE| CVE-2008-1059 Exploit Pack| CANVAS Description| WordPress Plugin Sniplets 1.1.2 Remote File Include Notes| CVE Name: CVE-2008-1059 VENDOR: WordPress Repeatability: Infinite CVE Url: http://cve.mitre.org/cgi-bin/cvename.cgi?name=2008-1059 References: None CVSS: 7.5...

Immunity Canvas: PHPBBPLUS_INCLUDE

Name| phpbbplusinclude ---|--- CVE| CVE-2007-5009 Exploit Pack| CANVAS Description| phpBBplus Remote file inclusion Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: phpbbplus.net CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5009 CVE Name: CVE-2007-5009...

Immunity Canvas: MU

Name| mu ---|--- CVE| CVE-2007-3744 Exploit Pack| CANVAS Description| MacOS X 10.4 mDNSResponder UPNP Remote Root Exploit Notes| CVE Name: CVE-2007-3744 Notes: If the target port is not specified, it will be located automatically. This exploit will attempt to bypass the built-in OS X firewall by...

Immunity Canvas: AIMSTATS_EXEC

Name| aimstatsexec ---|--- CVE| CVE-2007-2167 Exploit Pack| CANVAS Description| Aimstat exec Notes| References: None CVE Name: CVE-2007-2167 Vendor: x-pose Notes: Try using nc -e /bin/sh as your command and having a nc -vlp Repeatability: Infinite Date public: 04/19/07 CERT Advisory: None CVE Url...

Immunity Canvas: TM_SPROTECT

Name| tmsprotect ---|--- CVE| CVE-2007-1070 Exploit Pack| CANVAS Description| Trend Micro ServerProtect RPC Overflow Notes| CVE Name: CVE-2007-1070 VENDOR: Trend Micro Notes: Platforms Tested: References: http://www.tippingpoint.com/security/advisories/TSRT-07-01.html CVE Url:...

Immunity Canvas: MS07_004

Name| ms07004 ---|--- CVE| CVE-2007-0024 Exploit Pack| CANVAS Description| Microsoft Windows VML recolorinfo Bug Notes| CVE Name: CVE-2007-0024 VENDOR: Microsoft MSADV: MS07-004 VersionsAffected: Repeatability: References: http://www.microsoft.com/technet/security/Bulletin/MS07-004.mspx CVE Url:...

Immunity Canvas: PROCFS

Name| PROCFS ---|--- CVE| CVE-2006-3626 Exploit Pack| CANVAS Description| PROCFS Notes| CVSS: 6.2 Date public: VENDOR: Linux CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3626 CVE Name: CVE-2006-3626...

Immunity Canvas: CVE_2014_5460

Name| CVE20145460 ---|--- CVE| CVE-2014-5460 Exploit Pack| CANVAS Description| CVE-2014-5460 Notes| CVE Name: CVE-2014-5460 VENDOR: Tribulant Changelog: https://wordpress.org/plugins/slideshow-gallery/changelog/ Notes: If the Suhosin-Patch is installed typically announced in the PHP banner the...

Immunity Canvas: ITUNES_10_6_1

Name| Itunes1061 ---|--- CVE| CVE-2012-0677 Exploit Pack| CANVAS Description| Itunes 10.4 to 10.6.1 Buffer Overflow Notes| CVE Name: CVE-2012-0677 VENDOR: Apple Notes: Buffer overflow SEH based for Itunes 10.4 to 10.6.1 on Windows XP SP2 VersionsAffected: Itunes 10.4 to 10.6.1 Repeatability:...

Immunity Canvas: MS10_060

Name| ms10060 ---|--- CVE| CVE-2010-1898 Exploit Pack| CANVAS Description| ms10060 Notes| CVE Name: CVE-2010-1898 VENDOR: Microsoft URL: http://www.microsoft.com/technet/security/bulletin/ms10-060.mspx Notes: This exploit reliably targets .Net 2 through 3.5. DEP/ASLR are not effective at preventi...

Immunity Canvas: MS09_051

Name| ms09051 ---|--- CVE| CVE-2009-0555 Exploit Pack| CANVAS Description| ASFAudiomedia Parsing bug Notes| CVE Name: CVE-2009-0555 VENDOR: Microsoft MSADV: MS09-051 Repeatability: One Shot MSRC: http://www.microsoft.com/technet/security/Bulletin/MS09-051.mspx Note: This is a client-side exploit ...

Immunity Canvas: SMB2_NEGOTIATE_LOCAL

Name| smb2negotiatelocal ---|--- CVE| CVE-2009-3103 Exploit Pack| CANVAS Description| SMB2 Negotiate Pointer Dereference Vulnerability Notes| CVE Name: CVE-2009-3103 VENDOR: Microsoft VersionsAffected: Repeatability: One shot References: http://blog.48bits.com/?p=510,...

Immunity Canvas: MS08_025

Name| ms08025 ---|--- CVE| CVE-2008-1084 Exploit Pack| CANVAS Description| Win32k ClientLoadMenu Privilege Escalation Notes| CVE Name: CVE-2008-1084 VENDOR: Microsoft MSADV: MS08-025 Repeatability: One Shot MSRC: http://www.microsoft.com/technet/security/Bulletin/MS08-025.mspx CVS URL:...

Immunity Canvas: JOOMLACHRONOFORMS_INCLUDE

Name| joomlachronoformsinclude ---|--- CVE| CVE-2008-0567 Exploit Pack| CANVAS Description| Joomla Chronoforms Component Remote File Inclusion Notes| CVE Name: CVE-2008-0567 VENDOR: Joomla Repeatability: Infinite References: http://securityreason.com/exploitalert/3292 CVE Url:...

Immunity Canvas: SMALLAXE_INCLUDE

Name| smallaxeinclude ---|--- CVE| CVE-2008-0376 Exploit Pack| CANVAS Description| Smallaxe remote file include Notes| CVE Name: CVE-2008-0376 VENDOR: SmallAxe Solutions Repeatability: Infinite References: http://securityreason.com/exploitalert/3207 CVE Url:...

Immunity Canvas: CITRIX_METAFRAME

Name| citrixmetaframe ---|--- CVE| CVE-2008-0356 Exploit Pack| CANVAS Description| Citrix IMA Heap Overflow Demo Notes| CVSS: 10.0 Repeatability: This is a one shot exploit. VENDOR: Citrix CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0356 CVE Name: CVE-2008-0356...

Immunity Canvas: XITAMI

Name| xitami ---|--- CVE| CVE-2007-5067 Exploit Pack| CANVAS Description| Xitami Notes| CVE Name: CVE-2007-5067 VENDOR: Xitami CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5067 CVSS: 7.5...