Immunity Canvas: MAILENABLE

Name| mailenable ---|--- CVE| CVE-2005-2223 Exploit Pack| CANVAS Description| MailEnable SMTP Stack Overflow Notes| CVE Name: CVE-2005-2223 VENDOR: MailEnable Post-exploitaion: Platforms Tested: Windows 2003 Standard edition base & up2date MailEnable 1.72 Windows 2003 Standard edition up2date...

Immunity Canvas: CA_LIC

Name| calic ---|--- CVE| CVE-2005-0581 Exploit Pack| CANVAS Description| CA License Overflow Notes| CVSS: 4.6 Repeatability: This is a one shot exploit. VENDOR: Computer Associates CVE Url: https://vulners.com/cve/CVE-2005-0581 CVE Name: CVE-2005-0581...

Immunity Canvas: MYSQL_AUTH_BYPASS

Name| mysqlauthbypass ---|--- CVE| CVE-2004-0627 Exploit Pack| CANVAS Description| MySQL authentication bypass Notes| CVE Name: CVE-2004-0627 OSVDB: http://www.osvdb.org/displayvuln.php?osvdbid=7475 Notes: Mysql authentication can be bypass by a special crafted password with zeroed-strings...

Immunity Canvas: CVE_2013_3881

Name| CVE20133881 ---|--- CVE| CVE-2013-3881 Exploit Pack| CANVAS Description| Win32k NULL Page Exploit Notes| Repeatability: Notes: This vulnerability only affects Intel x86 based versions of Windows 7 This module automatically migrates to lsass.exe . Tested on: Windows 7 Ultimate N VENDOR:...

Immunity Canvas: ACROBAT_TOOLBUTTON

Name| acrobattoolbutton ---|--- CVE| CVE-2013-3346 Exploit Pack| CANVAS Description| acrobattoolbutton Notes| CVE Name: CVE-2013-3346 VENDOR: Adobe NOTES: This exploit has been tested on: - Windows XP SP3 EN Acrobat Reader 11.0.2/11.0.1/10.1.4/10.1.2/10.1.1/10.1.0 Vulnerable versions include: =...

Immunity Canvas: JAVA_MBEANINSTANTIATOR_FINDCLASS

Name| javaMBeanInstantiatorfindClass ---|--- CVE| CVE-2013-0422 Exploit Pack| CANVAS Description| javaMBeanInstantiatorfindClass Notes| CVE Name: CVE-2013-0422 VENDOR: Sun Notes: Affected versions JDK and JRE 7 Update 10 and earlier Tested on: - Windows 7 with JDK/JRE 7 update 10 To run from...

Immunity Canvas: MS12_037

Name| ms12037 ---|--- CVE| CVE-2012-1876 Exploit Pack| CANVAS Description| MS12-037 Microsoft Internet Explorer Fixed Table Col Span Heap Overflow Notes| CVE Name: CVE-2012-1876 VENDOR: Microsoft Notes: Some information regarding this exploit: - It uses an information leak so does not depend of...

Immunity Canvas: MS08_025

Name| ms08025 ---|--- CVE| CVE-2008-1084 Exploit Pack| CANVAS Description| Win32k ClientLoadMenu Privilege Escalation Notes| CVE Name: CVE-2008-1084 VENDOR: Microsoft MSADV: MS08-025 Repeatability: One Shot MSRC: http://www.microsoft.com/technet/security/Bulletin/MS08-025.mspx CVS URL:...

Immunity Canvas: MS07_065

Name| ms07065 ---|--- CVE| CVE-2007-3039 Exploit Pack| CANVAS Description| Microsoft Message Queuing Service Overflow Notes| CVE Name: CVE-2007-3039 VENDOR: Microsoft MSADV: MS07-065 Repeatability: One shot Note: Windows XP needs a valid Username and Password. According to the SWI Weblog: " There...

Immunity Canvas: IZICONTENTS_INCLUDE

Name| izicontentsinclude ---|--- CVE| CVE-2007-5054 Exploit Pack| CANVAS Description| iziContents Remote file inclusion Notes| CVSS: 7.5 Repeatability: Infinite VENDOR: iziContents CVE Url: https://vulners.com/cve/CVE-2007-5054 CVE Name: CVE-2007-5054...

Immunity Canvas: MKNOBOARD_INCLUDE

Name| mknoboardinclude ---|--- CVE| CVE-2007-3813 Exploit Pack| CANVAS Description| MkNoBoard Include Notes| CVSS: 4.3 Repeatability: Infinite VENDOR: mkportal.it CVE Url: https://vulners.com/cve/CVE-2007-3813 CVE Name: CVE-2007-3813...

Immunity Canvas: GROUPWISE_WEBACCESS

Name| groupwisewebaccess ---|--- CVE| CVE-2007-2171 Exploit Pack| CANVAS Description| Novell GroupWise WebAccess Base64 Decoding Stack Overflow Notes| CVE Name: CVE-2007-2171 VENDOR: Novell VersionsAffected: Repeatability: References: http://www.zerodayinitiative.com/advisories/ZDI-07-015.html CV...

Immunity Canvas: MS_ENABLEEUDC

Name| msenableeudc ---|--- CVE| CVE-2010-4398 Exploit Pack| CANVAS Description| Windows EnableEUDC Privilege Escalation Exploit Notes| Repeatability: Notes: Tested on Windows 7 x86/64. VENDOR: Microsoft CVE Name: CVE-2010-4398...

Immunity Canvas: MS09_022_LOADDLL

Name| ms09022loaddll ---|--- CVE| CVE-2009-0230 Exploit Pack| CANVAS Description| Microsoft Windows Print Spooler Arbitrary DLL Loading Notes| CVE Name: CVE-2009-0230 VENDOR: Microsoft MSADV: MS09-022-LOADDLL Repeatability: One shot Note: Valid credentials of a user with "Manage Printer" privileg...

Immunity Canvas: JOOMLADADAMAIL_RFI

Name| joomladadamailrfi ---|--- CVE| CVE-2008-6221 Exploit Pack| CANVAS Description| Joomla comdadamail Remote File Include Notes| CVSS: 7.5 Repeatability: Infinite VENDOR: Joomla CVE Url: https://vulners.com/cve/CVE-2008-6221 CVE Name: CVE-2008-6221...

Immunity Canvas: MSSQL_REPLWRITETOVARBIN

Name| mssqlreplwritetovarbin ---|--- CVE| CVE-2008-5416 Exploit Pack| CANVAS Description| replwritetovarbin stored procedure overflow. Notes| CVE Name: CVE-2008-5416 VENDOR: Microsoft Notes: Exploit only works against non-DEP enabled targets. Repeatability: One-shot MSADV: MS09-004 References:...

Immunity Canvas: PORTALLWEBPHP_INCLUDE

Name| portallwebphpinclude ---|--- CVE| CVE-2008-0645 Exploit Pack| CANVAS Description| Portail Web Php remote file include Notes| CVE Name: CVE-2008-0645 VENDOR: Portail Web Repeatability: Infinite References: http://www.securityfocus.com/bid/27616 CVE Url:...

Immunity Canvas: IEPDF

Name| iepdf ---|--- CVE| CVE-2007-3896 Exploit Pack| CANVAS Description| Microsoft IE 7 url-handling error MS07-061 Notes| CVE Name: CVE-2007-3896 VENDOR: Microsoft MSADV: MS07-061 Repeatability: Infinite client side - no crash MSRC: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3896...

Immunity Canvas: PHPWCMS_INCLUDE

Name| phpwcmsinclude ---|--- CVE| CVE-2007-5185 Exploit Pack| CANVAS Description| phpwcms remote file include Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: phpwcms CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5185 CVE Name: CVE-2007-5185...

Immunity Canvas: PHPNEWS_INCLUDE

Name| phpnewsinclude ---|--- CVE| CVE-2007-4232 Exploit Pack| CANVAS Description| PHPNews 0.93 Remote Include Notes| Repeatability: Infinite VENDOR: crear.de CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4232 CVE Name: CVE-2007-4232...

Immunity Canvas: ZEN

Name| zen ---|--- CVE| CVE-2005-1255 Exploit Pack| CANVAS Description| imailimap Notes| CVE Name: CVE-2005-1255 VENDOR: IPSwitch VersionsAffected: IMail 8.13 Repeatability: This is a one shot exploit. CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1255 CVSS: 10.0...

Immunity Canvas: MS04_031

Name| ms04031 ---|--- CVE| CVE-2004-0206 Exploit Pack| CANVAS Description| Microsoft Windows NetDDE RPC Overflow Notes| CVE Name: CVE-2004-0206 VENDOR: Microsoft MSADV: MS04-031 VersionsAffected: Repeatability: References: http://www.microsoft.com/technet/security/Bulletin/MS04-031.mspx CVE Url:...

Immunity Canvas: ESET_EPFWNDIS

Name| ESETEpFwNDIS ---|--- CVE| CVE-2014-4973 Exploit Pack| CANVAS Description| EpFwNDIS.sys Trusted Value Vulnerability Notes| Repeatability: Infinite Notes: This module exploits a vulnerability on the ESET Personal Firewall NDIS filter EpFwNdis.sys driver. The Firewall Module Build 1183 2014021...

Immunity Canvas: VBOX_GUEST

Name| vboxguest ---|--- CVE| CVE-2014-2477 Exploit Pack| CANVAS Description| VBoxGuest.sys Privilege Escalation Notes| References: https://www.korelogic.com/Resources/Advisories/KL-001-2014-001.txt CVE Name: CVE-2014-2477 Notes: Exploit has been tested successfully on: - Windows XP Professional...

Immunity Canvas: NOVELL_NICM

Name| novellnicm ---|--- CVE| CVE-2013-3956 Exploit Pack| CANVAS Description| nicm.sys Privilege Escalation Notes| CVE Name: CVE-2013-3956 Notes: The IOCTL handler for the nicm.sys driver in Novell Client IR5 does not validate pointers from usermode buffers. When passing in the IOCTL 0x143B6B an...

Immunity Canvas: FLASH_NEWFUNCTION

Name| flashnewfunction ---|--- CVE| CVE-2010-1297 Exploit Pack| CANVAS Description| Adobe Acrobat Flash Invalid newfunction call Notes| CVE Name: CVE-2010-1297 VENDOR: Adobe NOTES: Exploitation through an PDF file is more reliable than with a direct HTML/Flash exploit VersionsAffected: Acrobat 9....

Immunity Canvas: MS09_061_CAS

Name| ms09061cas ---|--- CVE| CVE-2009-0091 Exploit Pack| CANVAS Description| MS09-061 Microsoft .NET CAS Type Verification Vulnerability Notes| URL: http://www.microsoft.com/technet/security/Bulletin/MS09-061.mspx CVE Name: CVE-2009-0091 VENDOR: Microsoft CVE Url:...

Immunity Canvas: ACROBAT_JBIG

Name| acrobatjbig ---|--- CVE| CVE-2009-0658 Exploit Pack| CANVAS Description| Adobe Acrobat Reader 9.0 JBIG Parser Stack Overwrite Notes| CVE Name: CVE-2009-0658 VENDOR: Adobe Notes: Not to be used from IE via the HTTP Server as memory moves around too much. Instead, generate a PDF file and emai...

Immunity Canvas: MS08_049

Name| ms08049 ---|--- CVE| CVE-2008-1457 Exploit Pack| CANVAS Description| EventSystem Service Overflow Notes| CVE Name: CVE-2008-1457 VENDOR: Microsoft Notes: Due to the fact that the svchost.exe instance where the EventSystem service is running is DEP protected, and that all loaded DLLs have GS...

Immunity Canvas: NETRISK_INCLUDE

Name| netriskinclude ---|--- CVE| CVE-2008-0144 Exploit Pack| CANVAS Description| netRisk remote file include Notes| CVE Name: CVE-2008-0144 VENDOR: netRisk Repeatability: Infinite References: http://secunia.com/advisories/28328 CVE Url:...

Immunity Canvas: VPORTAL_INCLUDE

Name| vportalinclude ---|--- CVE| CVE-2007-5842 Exploit Pack| CANVAS Description| Vortex Portal remote file include Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: igamingcms.com CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5842 CVE Name: CVE-2007-5842...

Immunity Canvas: JOOMLAMOSMEDIA_INCLUDE

Name| joomlamosmediainclude ---|--- CVE| CVE-2007-5362 Exploit Pack| CANVAS Description| Joomla mosMedia Component Remote File Inclusion Notes| CVE Name: CVE-2007-5362 VENDOR: Joomla Repeatability: Infinite References: http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-5362 CVE Url:...

Immunity Canvas: SNORTRPC

Name| snortrpc ---|--- CVE| CVE-2006-5276 Exploit Pack| CANVAS Description| Snort RPC Notes| CVE Name: CVE-2006-5276 VENDOR: SourceFire Notes: This version of the exploit needs to connect to a port 139 Note that it does not need to be an actual Netbios target. Something like a netcat listener wil...

Immunity Canvas: MS06_025

Name| ms06025 ---|--- CVE| CVE-2006-2371 Exploit Pack| CANVAS Description| RasMan RPC Server Signedness Bug Notes| CVE Name: CVE-2006-2371 VENDOR: Microsoft Notes: If you choose the wrong version to attack, RasMan may stop responding with MSRPC Pipe Not Available errors, and will most likely not...

Immunity Canvas: NETBACKUP_JAVAUI

Name| netbackupjavaui ---|--- CVE| CVE-2005-2715 Exploit Pack| CANVAS Description| VERITAS NetBackup Java User Interface Format String Notes| CVE Name: CVE-2005-2715 VENDOR: Symantec VersionsAffected: Repeatability: References: http://www.zerodayinitiative.com/advisories/ZDI-05-001.html CVE Url:...

Immunity Canvas: SADMIND

Name| sadmind ---|--- CVE| CVE-2003-0722 Exploit Pack| CANVAS Description| sadmind Notes| References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F56740 CVE Name: CVE-2003-0722 VENDOR: Sun Date public: Sep 16, 2003 CERT Advisory: CVE Url:...

Immunity Canvas: MS03_001

Name| ms03001 ---|--- CVE| CVE-2003-0003 Exploit Pack| CANVAS Description| Microsoft Windows RPC Locator Overflow Notes| CVE Name: CVE-2003-0003 VENDOR: Microsoft MSADV: MS03-001 VersionsAffected: Repeatability: References: http://www.microsoft.com/technet/security/Bulletin/MS03-001.mspx CVE Url:...

Immunity Canvas: ORACLE8LISTENER_WIN32

Name| oracle8listenerwin32 ---|--- CVE| CVE-2001-0499 Exploit Pack| CANVAS Description| Oracle8i TNS Listener stack overflow Notes| References: http://otn.oracle.com/deploy/security/pdf/nainet8bof.pdf CVE Name: CVE-2001-0499 VENDOR: Oracle Repeatability: Single shot Date public: 27-06-2001 CERT...

Immunity Canvas: RCONFIG_AJAXSERVER_RCE

Name| rconfigajaxserverrce ---|--- CVE| CVE-2019-16662 Exploit Pack| CANVAS Description| rconfigajaxserverrce Notes| CVE Name: CVE-2019-16662 VENDOR: rConfig NOTES: The current exploit initializes a tcp server to serve the mosdef callback port 8080 IMPORTANT: In the path textfield you need the pa...

Immunity Canvas: FLASH_APSB11_18

Name| flashAPSB1118 ---|--- CVE| CVE-2011-2110 Exploit Pack| CANVAS Description| flashAPSB1118 Notes| CVE Name: CVE-2011-2110 VENDOR: Adobe Notes: This is an exploit found in the wild, targeting Windows Flash player versions 10.3.181.23 and earlier. VersionsAffected: Windows Flash Player versions...

Immunity Canvas: IE_PEERS_SETATTRIBUTE

Name| iepeerssetattribute ---|--- CVE| CVE-2010-0806 Exploit Pack| CANVAS Description| iepeerssetattribute Notes| CVE Name: CVE-2010-0806 VENDOR: Microsoft Notes: This is the iepeers exploit for IE 6/7, first discovered in the wild in March, 2010. It will work on both DEP and non-DEP machines and...

Immunity Canvas: OOO_230

Name| ooo230 ---|--- CVE| CVE-2007-4575 Exploit Pack| CANVAS Description| OpenOffice Database 2.3.0 Static Java Execution Notes| CVE Name: CVE-2007-4575 VENDOR: OpenOffice Repeatability: Infinite client side - no crash CVS URL: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4575 Date...

Immunity Canvas: SEGUE_INCLUDE

Name| segueinclude ---|--- CVE| CVE-2007-5186 Exploit Pack| CANVAS Description| Segue remote file include Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: Segue CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5186 CVE Name: CVE-2007-5186...

Immunity Canvas: FRONTACCOUNT_INCLUDE

Name| frontaccountinclude ---|--- CVE| CVE-2007-4279 Exploit Pack| CANVAS Description| FrontAccounting Remote Include Notes| CVSS: 7.5 Repeatability: Infinite VENDOR: Front Accounting CVE Url: https://vulners.com/cve/CVE-2007-4279 CVE Name: CVE-2007-4279...

Immunity Canvas: LMS_INCLUDE

Name| lmsinclude ---|--- CVE| CVE-2007-3325 Exploit Pack| CANVAS Description| LMS Include Notes| CVSS: 7.5 Repeatability: Infinite VENDOR: lms.org.pl CVE Url: https://vulners.com/cve/CVE-2007-3325 CVE Name: CVE-2007-3325...

Immunity Canvas: MSWINSTCP

Name| mswinstcp ---|--- CVE| CVE-2004-1080 Exploit Pack| CANVAS Description| WINS Pointer hijacking exploit MS04-045 Notes| CVE Name: CVE-2004-1080 VENDOR: Microsoft MSADV: MS04-045 MSRC: http://www.microsoft.com/technet/security/bulletin/MS04-045.mspx NOTE: Tested on Win2000 SP Date public: Not...

Immunity Canvas: DESTROYCLASS_UAF_LPE

Name| destroyclassuaflpe ---|--- CVE| CVE-2019-0623 Exploit Pack| CANVAS Description| DestroyClass UAF LPE Notes| CVE Name: CVE-2019-0623 Notes: Tested: - Windows 7 x64 VENDOR: Microsoft CVE Url: https://nvd.nist.gov/vuln/detail/CVE-2019-0623 CVSS: 10.0...

Immunity Canvas: MS13_056

Name| ms13056 ---|--- CVE| CVE-2013-3174 Exploit Pack| CANVAS Description| MS13056 Notes| CVE Name: CVE-2013-3174 VENDOR: Microsoft NOTES: This exploit has been tested on: - Windows XP SP 3 EN on IE 8 no jsrecon - Windows 7 PRO SP 1 EN x86-64 on IE 8 32bit jsrecon works No webpage open in the...

Immunity Canvas: FLASH_WILD2

Name| flashwild2 ---|--- CVE| CVE-2010-2884 Exploit Pack| CANVAS Description| Flash 0day CVE-2010-2884 Notes| CVE Name: CVE-2010-2884 VENDOR: Adobe VersionsAffected: Repeatability: Date public: Not public/0day CVE Url: CVSS: 9.3...

Immunity Canvas: IE_HCP

Name| iehcp ---|--- CVE| CVE-2010-1885 Exploit Pack| CANVAS Description| iehcp Notes| CVE Name: CVE-2010-1885 VENDOR: Microsoft Notes: http://www.microsoft.com/technet/security/Bulletin/MS10-042.mspx Repeatability: Infinite MSADV: MS10-042 Date public: 06/09/2010 CVE Url:...