Immunity Canvas: CITECT_SCADA

Name| citectscada ---|--- CVE| CVE-2008-2639 Exploit Pack| CANVAS Description| CitectSCADA ODBC Buffer Overflow Notes| CVE Name: CVE-2008-2639 VENDOR: Citect Repeatability: References: http://www.coresecurity.com/content/citect-scada-odbc-service-vulnerability CVE Url:...

Immunity Canvas: JAFCMS_INCLUDE

Name| jafcmsinclude ---|--- CVE| CVE-2008-1609 Exploit Pack| CANVAS Description| Jaf-CMS Remote File include Notes| CVE Name: CVE-2008-1609 VENDOR: Jaf-CMS Repeatability: Infinite References: http://packetstormsecurity.org/filedesc/jafcms-rfi.txt.html CVE Url: https://vulners.com/cve/CVE-2008-160...

Immunity Canvas: PHPLINKS_INCLUDE

Name| phplinksinclude ---|--- CVE| CVE-2008-0566 Exploit Pack| CANVAS Description| PHPlinks remote file include Notes| CVE Name: CVE-2008-0566 VENDOR: deltascripts.com Repeatability: Infinite References: http://securitydot.net/txt/id/6453/type/vuln/ CVE Url:...

Immunity Canvas: JAVA_DESERIALIZE_WIN32

Name| javadeserializewin32 ---|--- CVE| CVE-2008-5353 Exploit Pack| CANVAS Description| Java ZoneInfo deserialize exploit HTTP MOSDEF WIN32 Notes| CVE Name: CVE-2008-5353 VENDOR: Sun Repeatability: Infinite client side - no crash References:...

Immunity Canvas: FLASH_DUKE

Name| flashduke ---|--- CVE| CVE-2007-0071 Exploit Pack| CANVAS Description| Adobe Flash Player DefineSceneAndFrameLabelData Tag Overflow Notes| CVE Name: CVE-2007-0071 VENDOR: Adobe VersionsAffected: Adobe Flash Player 9.0.115.0 and below Repeatability: References:...

Immunity Canvas: MS07_067

Name| ms07067 ---|--- CVE| CVE-2007-5587 Exploit Pack| CANVAS Description| Macrovision SecDrv.sys Arbitrary Overwrite Notes| References: www.microsoft.com/technet/security/Bulletin/MS07-067.mspx CVE Name: CVE-2007-5587 VENDOR: Microsoft MSADV: MS07-067 Date public: 10/17/07 CVE Url:...

Immunity Canvas: PHPSITEBACKUP_INCLUDE

Name| phpsitebackupinclude ---|--- CVE| CVE-2007-2199 Exploit Pack| CANVAS Description| phpSiteBack Include Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: phpsitebackup CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2199 CVE Name: CVE-2007-2199...

Immunity Canvas: WFTPD

Name| wftpd ---|--- CVE| CVE-2006-4318 Exploit Pack| CANVAS Description| wFTPD Notes| CVE Name: CVE-2006-4318 VENDOR: Texas Imperial Software CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4318 CVSS: 6.5...

Immunity Canvas: WINGATE_HTTPPROXY

Name| wingatehttpproxy ---|--- CVE| CVE-2006-2926 Exploit Pack| CANVAS Description| Wingate 6.1.1 remote exploit Notes| CVE Name: CVE-2006-2926 VENDOR: Wingate.com Repeatability: You get one shot References: CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2926 Date public:...

Immunity Canvas: MS05_017

Name| ms05017 ---|--- CVE| CVE-2005-0059 Exploit Pack| CANVAS Description| Microsoft Message Queuing Service Overflow Notes| CVE Name: CVE-2005-0059 VENDOR: Microsoft MSADV: MS05-017 Repeatability: One shot Note: Windows XP needs a valid Username and Password. References:...

Immunity Canvas: DTSPCD

Name| dtspcd ---|--- CVE| CVE-2001-0803 Exploit Pack| CANVAS Description| dtspcd Notes| References: http://xforce.iss.net/alerts/advise101.php http://www.kb.cert.org/vuls/id/172583 CVE Name: CVE-2001-0803 VENDOR: Sun Date public: Nov 06, 2001 CERT Advisory:...

Immunity Canvas: JAVA_RHINO

Name| javarhino ---|--- CVE| CVE-2011-3544 Exploit Pack| CANVAS Description| javarhino Notes| CVE Name: CVE-2011-3544 VENDOR: Sun OSVDB: http://osvdb.org/show/osvdb/76500 Repeatability: Infinite client side - no crash References: http://schierlm.users.sourceforge.net/CVE-2011-3544.html CVE Url:...

Immunity Canvas: CVE_2010_3856

Name| CVE20103856 ---|--- CVE| CVE-2010-3856 Exploit Pack| CANVAS Description| CVE20103856 Notes| CVE Name: CVE-2010-3856 VENDOR: Linux NOTES: See the FD post for a ton of details, try this exploit on RedHat derived distributions, this may also work against Ubuntu. If it fails but you think the...

Immunity Canvas: IE_HELP

Name| iehelp ---|--- CVE| CVE-2010-0483 Exploit Pack| CANVAS Description| iehelp Notes| CVE Name: CVE-2010-0483 VENDOR: Microsoft Notes: Use from httpserver with name iehelp. Options are: message - Message of the MessageBox to be displayed to the user default: "Press F1 to stop this" Must not be...

Immunity Canvas: IE_COMMENTS

Name| iecomments ---|--- CVE| CVE-2010-0244 Exploit Pack| CANVAS Description| iecomments Notes| CVE Name: CVE-2010-0244 VENDOR: Microsoft MSADV: MS10-0?? VersionsAffected: Repeatability: References: http://www.microsoft.com/technet/security/bulletin/ms10-002.mspx Date public: 12/25/2009...

Immunity Canvas: SMB2_NEGOTIATE_LOCAL

Name| smb2negotiatelocal ---|--- CVE| CVE-2009-3103 Exploit Pack| CANVAS Description| SMB2 Negotiate Pointer Dereference Vulnerability Notes| CVE Name: CVE-2009-3103 VENDOR: Microsoft VersionsAffected: Repeatability: One shot References: http://blog.48bits.com/?p=510,...

Immunity Canvas: GRAPE_INCLUDE

Name| grapeinclude ---|--- CVE| CVE-2008-1963 Exploit Pack| CANVAS Description| Grape Web Statistics Remote File include Notes| CVE Name: CVE-2008-1963 VENDOR: Quate Repeatability: Infinite References: http://www.securityfocus.com/bid/28838 CVE Url: https://vulners.com/cve/CVE-2008-1963 CVSS: 7.5...

Immunity Canvas: IEPDF

Name| iepdf ---|--- CVE| CVE-2007-3896 Exploit Pack| CANVAS Description| Microsoft IE 7 url-handling error MS07-061 Notes| CVE Name: CVE-2007-3896 VENDOR: Microsoft MSADV: MS07-061 Repeatability: Infinite client side - no crash MSRC: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3896...

Immunity Canvas: MKNOBOARD_INCLUDE

Name| mknoboardinclude ---|--- CVE| CVE-2007-3813 Exploit Pack| CANVAS Description| MkNoBoard Include Notes| CVSS: 4.3 Repeatability: Infinite VENDOR: mkportal.it CVE Url: https://vulners.com/cve/CVE-2007-3813 CVE Name: CVE-2007-3813...

Immunity Canvas: LIMESURVEY_INCLUDE

Name| limesurveyinclude ---|--- CVE| CVE-2007-3632 Exploit Pack| CANVAS Description| LimeSurvey Include Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: Limesurvey.org CVE Url: https://vulners.com/cve/CVE-2007-3632 CVE Name: CVE-2007-3632...

Immunity Canvas: MS06_071

Name| ms06071 ---|--- CVE| CVE-2006-5745 Exploit Pack| CANVAS Description| Microsoft XML Core Services 4.0 Vulnerability Notes| CVE Name: CVE-2006-5745 VENDOR: Microsoft MSADV: MS06-071 VersionsAffected: Repeatability: Infinite References:...

Immunity Canvas: VBOX_GUEST

Name| vboxguest ---|--- CVE| CVE-2014-2477 Exploit Pack| CANVAS Description| VBoxGuest.sys Privilege Escalation Notes| References: https://www.korelogic.com/Resources/Advisories/KL-001-2014-001.txt CVE Name: CVE-2014-2477 Notes: Exploit has been tested successfully on: - Windows XP Professional...

Immunity Canvas: JAVA_JAXWS

Name| javajaxws ---|--- CVE| CVE-2012-5076 Exploit Pack| CANVAS Description| Java Applet JAX-WS Remote Code Execution Notes| CVE Name: CVE-2012-5076 VENDOR: Sun Notes: Affected versions JDK and JRE 7 Update 7 and earlier Tested on: - Windows XP SP3 with JDK/JRE 7 update 6 To run from command line...

Immunity Canvas: JOOMLACOMPETITIONS_RFI

Name| joomlacompetitionsrfi ---|--- CVE| CVE-2008-5790 Exploit Pack| CANVAS Description| Joomla comcompetitions Remote File Include Notes| CVSS: 7.5 Repeatability: Infinite VENDOR: Joomla CVE Url: https://vulners.com/cve/CVE-2008-5790 CVE Name: CVE-2008-5790...

Immunity Canvas: SAFARI_FILE_STEALING

Name| safarifilestealing ---|--- CVE| CVE-2008-4216 Exploit Pack| CANVAS Description| Safari 3.2 File Stealing Notes| A Warning: Due to the nature of this exploit, a file error.html will be left behind on the target system CVE Name: CVE-2008-4216 VENDOR: Apple NOTES: There are a lot of things...

Immunity Canvas: FIREFOX_DEFINESETTER

Name| firefoxdefinesetter ---|--- CVE| CVE-2008-2798 Exploit Pack| CANVAS Description| Firefox = 2.0.0.14 Javascript defineSetter Memory Corruption Notes| CVE Name: CVE-2008-2798 VENDOR: Mozilla Repeatability: Infinite client side - crash the browser CVS URL:...

Immunity Canvas: WPBACKUP_INCLUDE

Name| wpbackupinclude ---|--- CVE| CVE-2007-5800 Exploit Pack| CANVAS Description| WordPress plugin BackUpWordPress = 0.4.2b Remote File Inclusion Notes| CVE Name: CVE-2007-5800 VENDOR: WordPress Repeatability: Infinite References:...

Immunity Canvas: IE7WMP

Name| ie7wmp ---|--- CVE| CVE-2007-3896 Exploit Pack| CANVAS Description| Microsoft IE 7 url-handling error MS07-061 Notes| CVE Name: CVE-2007-3896 VENDOR: Microsoft MSADV: MS07-061 Repeatability: Infinite client side - no crash MSRC: http://www.microsoft.com/technet/security/bulletin/MS07-061.ms...

Immunity Canvas: AIMSTATS_EXEC

Name| aimstatsexec ---|--- CVE| CVE-2007-2167 Exploit Pack| CANVAS Description| Aimstat exec Notes| References: None CVE Name: CVE-2007-2167 Vendor: x-pose Notes: Try using nc -e /bin/sh as your command and having a nc -vlp Repeatability: Infinite Date public: 04/19/07 CERT Advisory: None CVE Url...

Immunity Canvas: MS07_029

Name| ms07029 ---|--- CVE| CVE-2007-1748 Exploit Pack| CANVAS Description| Microsoft DNS Server RPC Interface Overflow Notes| References: http://www.microsoft.com/technet/security/Bulletin/ms07-029.mspx CVE Name: CVE-2007-1748 VENDOR: Microsoft Notes: MSADV: MS07-029 Date public: 04/04/2007 CVE...

Immunity Canvas: MS07_004

Name| ms07004 ---|--- CVE| CVE-2007-0024 Exploit Pack| CANVAS Description| Microsoft Windows VML recolorinfo Bug Notes| CVE Name: CVE-2007-0024 VENDOR: Microsoft MSADV: MS07-004 VersionsAffected: Repeatability: References: http://www.microsoft.com/technet/security/Bulletin/MS07-004.mspx CVE Url:...

Immunity Canvas: RAILS_ACCEPT_READFILE

Name| railsacceptreadfile ---|--- CVE| CVE-2019-5418 Exploit Pack| CANVAS Description| Ruby on Rails Arbitrary File Read CVE-2019-5418 Notes| CVE Name: CVE-2019-5418 VENDOR: Rails NOTES: The vulnerability resides in Action View in combination with calls to 'render file:' in a controller. You need...

Immunity Canvas: ORACLE_FORMS_RCE

Name| oracleformsrce ---|--- CVE| CVE-2014-4278 Exploit Pack| CANVAS Description| Oracle Forms 10g Unauthenticated Remote Code Execution Notes| Info: https://securitytracker.com/id/1031042 Repeatability: Infinite VENDOR: Oracle CVE Url: https://vulners.com/cve/CVE-2014-4278 CVE Name: CVE-2014-427...

Immunity Canvas: CVE_2014_5460

Name| CVE20145460 ---|--- CVE| CVE-2014-5460 Exploit Pack| CANVAS Description| CVE-2014-5460 Notes| CVE Name: CVE-2014-5460 VENDOR: Tribulant Changelog: https://wordpress.org/plugins/slideshow-gallery/changelog/ Notes: If the Suhosin-Patch is installed typically announced in the PHP banner the...

Immunity Canvas: CVE_2013_3881

Name| CVE20133881 ---|--- CVE| CVE-2013-3881 Exploit Pack| CANVAS Description| Win32k NULL Page Exploit Notes| Repeatability: Notes: This vulnerability only affects Intel x86 based versions of Windows 7 This module automatically migrates to lsass.exe . Tested on: Windows 7 Ultimate N VENDOR:...

Immunity Canvas: MS12_005

Name| ms12005 ---|--- CVE| CVE-2012-0013 Exploit Pack| CANVAS Description| MS12-005: MS Office 2007-2010 Shell Object Packager file extension bypass Notes| Repeatability: Infinite Notes: The issue we exploit here was fixed silently alongside the ClickOnce issues in the MS12-005 patch but allows f...

Immunity Canvas: CPCOMMERCE_RFI

Name| cpcommercerfi ---|--- CVE| CVE-2009-1936 Exploit Pack| CANVAS Description| cpCommerce 1.2.x Remote File Include Notes| CVE Name: CVE-2009-1936 VENDOR: cpCommerce Repeatability: Infinite CVE Url: https://vulners.com/cve/CVE-2009-1936 References: 'http://www.securityfocus.com/bid/35103' CVSS:...

Immunity Canvas: WPSNIPLETS_RFI

Name| wpsnipletsrfi ---|--- CVE| CVE-2008-1059 Exploit Pack| CANVAS Description| WordPress Plugin Sniplets 1.1.2 Remote File Include Notes| CVE Name: CVE-2008-1059 VENDOR: WordPress Repeatability: Infinite CVE Url: http://cve.mitre.org/cgi-bin/cvename.cgi?name=2008-1059 References: None CVSS: 7.5...

Immunity Canvas: MS07_065

Name| ms07065 ---|--- CVE| CVE-2007-3039 Exploit Pack| CANVAS Description| Microsoft Message Queuing Service Overflow Notes| CVE Name: CVE-2007-3039 VENDOR: Microsoft MSADV: MS07-065 Repeatability: One shot Note: Windows XP needs a valid Username and Password. According to the SWI Weblog: " There...

Immunity Canvas: MU

Name| mu ---|--- CVE| CVE-2007-3744 Exploit Pack| CANVAS Description| MacOS X 10.4 mDNSResponder UPNP Remote Root Exploit Notes| CVE Name: CVE-2007-3744 Notes: If the target port is not specified, it will be located automatically. This exploit will attempt to bypass the built-in OS X firewall by...

Immunity Canvas: DB2_JDBC

Name| db2jdbc ---|--- CVE| CVE-2007-2582 Exploit Pack| CANVAS Description| IBM DB2 JDBC Applet Server Overflow Notes| References: http://www.zerodayinitiative.com/advisories/ZDI-07-056.html CVE Name: CVE-2007-2582 VENDOR: IBM Notes: Repeatability: Date public: 10/10/07 CVE Url:...

Immunity Canvas: PROCFS

Name| PROCFS ---|--- CVE| CVE-2006-3626 Exploit Pack| CANVAS Description| PROCFS Notes| CVSS: 6.2 Date public: VENDOR: Linux CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3626 CVE Name: CVE-2006-3626...

Immunity Canvas: CA_LIC

Name| calic ---|--- CVE| CVE-2005-0581 Exploit Pack| CANVAS Description| CA License Overflow Notes| CVSS: 4.6 Repeatability: This is a one shot exploit. VENDOR: Computer Associates CVE Url: https://vulners.com/cve/CVE-2005-0581 CVE Name: CVE-2005-0581...

Immunity Canvas: ACROBAT_TOOLBUTTON

Name| acrobattoolbutton ---|--- CVE| CVE-2013-3346 Exploit Pack| CANVAS Description| acrobattoolbutton Notes| CVE Name: CVE-2013-3346 VENDOR: Adobe NOTES: This exploit has been tested on: - Windows XP SP3 EN Acrobat Reader 11.0.2/11.0.1/10.1.4/10.1.2/10.1.1/10.1.0 Vulnerable versions include: =...

Immunity Canvas: MS10_060

Name| ms10060 ---|--- CVE| CVE-2010-1898 Exploit Pack| CANVAS Description| ms10060 Notes| CVE Name: CVE-2010-1898 VENDOR: Microsoft URL: http://www.microsoft.com/technet/security/bulletin/ms10-060.mspx Notes: This exploit reliably targets .Net 2 through 3.5. DEP/ASLR are not effective at preventi...

Immunity Canvas: FLASH_NEWFUNCTION

Name| flashnewfunction ---|--- CVE| CVE-2010-1297 Exploit Pack| CANVAS Description| Adobe Acrobat Flash Invalid newfunction call Notes| CVE Name: CVE-2010-1297 VENDOR: Adobe NOTES: Exploitation through an PDF file is more reliable than with a direct HTML/Flash exploit VersionsAffected: Acrobat 9....

Immunity Canvas: MS08_025

Name| ms08025 ---|--- CVE| CVE-2008-1084 Exploit Pack| CANVAS Description| Win32k ClientLoadMenu Privilege Escalation Notes| CVE Name: CVE-2008-1084 VENDOR: Microsoft MSADV: MS08-025 Repeatability: One Shot MSRC: http://www.microsoft.com/technet/security/Bulletin/MS08-025.mspx CVS URL:...

Immunity Canvas: WORDTUBE_REMOTE

Name| wordtuberemote ---|--- CVE| CVE-2007-2481 Exploit Pack| CANVAS Description| WordPress Plugin WordTube Remote Include Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: alexrabe.boelinger.com CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2481 CVE Name: CVE-2007-2481...

Immunity Canvas: MAILENABLE

Name| mailenable ---|--- CVE| CVE-2005-2223 Exploit Pack| CANVAS Description| MailEnable SMTP Stack Overflow Notes| CVE Name: CVE-2005-2223 VENDOR: MailEnable Post-exploitaion: Platforms Tested: Windows 2003 Standard edition base & up2date MailEnable 1.72 Windows 2003 Standard edition up2date...

Immunity Canvas: MS13_056

Name| ms13056 ---|--- CVE| CVE-2013-3174 Exploit Pack| CANVAS Description| MS13056 Notes| CVE Name: CVE-2013-3174 VENDOR: Microsoft NOTES: This exploit has been tested on: - Windows XP SP 3 EN on IE 8 no jsrecon - Windows 7 PRO SP 1 EN x86-64 on IE 8 32bit jsrecon works No webpage open in the...