Immunity Canvas: PHPNEWS_INCLUDE

Name| phpnewsinclude ---|--- CVE| CVE-2007-4232 Exploit Pack| CANVAS Description| PHPNews 0.93 Remote Include Notes| Repeatability: Infinite VENDOR: crear.de CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4232 CVE Name: CVE-2007-4232...

Immunity Canvas: MKNOBOARD_INCLUDE

Name| mknoboardinclude ---|--- CVE| CVE-2007-3813 Exploit Pack| CANVAS Description| MkNoBoard Include Notes| CVSS: 4.3 Repeatability: Infinite VENDOR: mkportal.it CVE Url: https://vulners.com/cve/CVE-2007-3813 CVE Name: CVE-2007-3813...

Immunity Canvas: TM_SPROTECT

Name| tmsprotect ---|--- CVE| CVE-2007-1070 Exploit Pack| CANVAS Description| Trend Micro ServerProtect RPC Overflow Notes| CVE Name: CVE-2007-1070 VENDOR: Trend Micro Notes: Platforms Tested: References: http://www.tippingpoint.com/security/advisories/TSRT-07-01.html CVE Url:...

Immunity Canvas: MS06_071

Name| ms06071 ---|--- CVE| CVE-2006-5745 Exploit Pack| CANVAS Description| Microsoft XML Core Services 4.0 Vulnerability Notes| CVE Name: CVE-2006-5745 VENDOR: Microsoft MSADV: MS06-071 VersionsAffected: Repeatability: Infinite References:...

Immunity Canvas: MS04_031

Name| ms04031 ---|--- CVE| CVE-2004-0206 Exploit Pack| CANVAS Description| Microsoft Windows NetDDE RPC Overflow Notes| CVE Name: CVE-2004-0206 VENDOR: Microsoft MSADV: MS04-031 VersionsAffected: Repeatability: References: http://www.microsoft.com/technet/security/Bulletin/MS04-031.mspx CVE Url:...

Immunity Canvas: SADMIND

Name| sadmind ---|--- CVE| CVE-2003-0722 Exploit Pack| CANVAS Description| sadmind Notes| References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F56740 CVE Name: CVE-2003-0722 VENDOR: Sun Date public: Sep 16, 2003 CERT Advisory: CVE Url:...

Immunity Canvas: ORACLE8LISTENER_WIN32

Name| oracle8listenerwin32 ---|--- CVE| CVE-2001-0499 Exploit Pack| CANVAS Description| Oracle8i TNS Listener stack overflow Notes| References: http://otn.oracle.com/deploy/security/pdf/nainet8bof.pdf CVE Name: CVE-2001-0499 VENDOR: Oracle Repeatability: Single shot Date public: 27-06-2001 CERT...

Immunity Canvas: ACROBAT_TOOLBUTTON

Name| acrobattoolbutton ---|--- CVE| CVE-2013-3346 Exploit Pack| CANVAS Description| acrobattoolbutton Notes| CVE Name: CVE-2013-3346 VENDOR: Adobe NOTES: This exploit has been tested on: - Windows XP SP3 EN Acrobat Reader 11.0.2/11.0.1/10.1.4/10.1.2/10.1.1/10.1.0 Vulnerable versions include: =...

Immunity Canvas: AIXCMSD

Name| aixcmsd ---|--- CVE| CVE-2009-3699 Exploit Pack| CANVAS Description| rpc.cmsd remote root exploit AIX Notes| CVE Name: CVE-2009-3699 Versions Affected: AIX 5.x / AIX 6.x Notes: Repeatability: Unlimited OSVBD: 58726 References:...

Immunity Canvas: MS09_022_LOADDLL

Name| ms09022loaddll ---|--- CVE| CVE-2009-0230 Exploit Pack| CANVAS Description| Microsoft Windows Print Spooler Arbitrary DLL Loading Notes| CVE Name: CVE-2009-0230 VENDOR: Microsoft MSADV: MS09-022-LOADDLL Repeatability: One shot Note: Valid credentials of a user with "Manage Printer" privileg...

Immunity Canvas: JOOMLACOMPETITIONS_RFI

Name| joomlacompetitionsrfi ---|--- CVE| CVE-2008-5790 Exploit Pack| CANVAS Description| Joomla comcompetitions Remote File Include Notes| CVSS: 7.5 Repeatability: Infinite VENDOR: Joomla CVE Url: https://vulners.com/cve/CVE-2008-5790 CVE Name: CVE-2008-5790...

Immunity Canvas: MSSQL_REPLWRITETOVARBIN

Name| mssqlreplwritetovarbin ---|--- CVE| CVE-2008-5416 Exploit Pack| CANVAS Description| replwritetovarbin stored procedure overflow. Notes| CVE Name: CVE-2008-5416 VENDOR: Microsoft Notes: Exploit only works against non-DEP enabled targets. Repeatability: One-shot MSADV: MS09-004 References:...

Immunity Canvas: PORTALLWEBPHP_INCLUDE

Name| portallwebphpinclude ---|--- CVE| CVE-2008-0645 Exploit Pack| CANVAS Description| Portail Web Php remote file include Notes| CVE Name: CVE-2008-0645 VENDOR: Portail Web Repeatability: Infinite References: http://www.securityfocus.com/bid/27616 CVE Url:...

Immunity Canvas: JOOMLACHRONOFORMS_INCLUDE

Name| joomlachronoformsinclude ---|--- CVE| CVE-2008-0567 Exploit Pack| CANVAS Description| Joomla Chronoforms Component Remote File Inclusion Notes| CVE Name: CVE-2008-0567 VENDOR: Joomla Repeatability: Infinite References: http://securityreason.com/exploitalert/3292 CVE Url:...

Immunity Canvas: SMALLAXE_INCLUDE

Name| smallaxeinclude ---|--- CVE| CVE-2008-0376 Exploit Pack| CANVAS Description| Smallaxe remote file include Notes| CVE Name: CVE-2008-0376 VENDOR: SmallAxe Solutions Repeatability: Infinite References: http://securityreason.com/exploitalert/3207 CVE Url:...

Immunity Canvas: VPORTAL_INCLUDE

Name| vportalinclude ---|--- CVE| CVE-2007-5842 Exploit Pack| CANVAS Description| Vortex Portal remote file include Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: igamingcms.com CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5842 CVE Name: CVE-2007-5842...

Immunity Canvas: JOOMLAMOSMEDIA_INCLUDE

Name| joomlamosmediainclude ---|--- CVE| CVE-2007-5362 Exploit Pack| CANVAS Description| Joomla mosMedia Component Remote File Inclusion Notes| CVE Name: CVE-2007-5362 VENDOR: Joomla Repeatability: Infinite References: http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-5362 CVE Url:...

Immunity Canvas: IEPDF

Name| iepdf ---|--- CVE| CVE-2007-3896 Exploit Pack| CANVAS Description| Microsoft IE 7 url-handling error MS07-061 Notes| CVE Name: CVE-2007-3896 VENDOR: Microsoft MSADV: MS07-061 Repeatability: Infinite client side - no crash MSRC: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3896...

Immunity Canvas: GROUPWISE_WEBACCESS

Name| groupwisewebaccess ---|--- CVE| CVE-2007-2171 Exploit Pack| CANVAS Description| Novell GroupWise WebAccess Base64 Decoding Stack Overflow Notes| CVE Name: CVE-2007-2171 VENDOR: Novell VersionsAffected: Repeatability: References: http://www.zerodayinitiative.com/advisories/ZDI-07-015.html CV...

Immunity Canvas: AIMSTATS_EXEC

Name| aimstatsexec ---|--- CVE| CVE-2007-2167 Exploit Pack| CANVAS Description| Aimstat exec Notes| References: None CVE Name: CVE-2007-2167 Vendor: x-pose Notes: Try using nc -e /bin/sh as your command and having a nc -vlp Repeatability: Infinite Date public: 04/19/07 CERT Advisory: None CVE Url...

Immunity Canvas: LSGB_EXEC

Name| lsgbexec ---|--- CVE| CVE-2007-2093 Exploit Pack| CANVAS Description| Limesoft GuestBook exec Notes| CVE Name: CVE-2007-2093 VENDOR: Limesoftware.co.uk Notes: Try using nc -e /bin/sh as your command and having a nc -vlp Repeatability: Infinite CVE Url:...

Immunity Canvas: MS06_025

Name| ms06025 ---|--- CVE| CVE-2006-2371 Exploit Pack| CANVAS Description| RasMan RPC Server Signedness Bug Notes| CVE Name: CVE-2006-2371 VENDOR: Microsoft Notes: If you choose the wrong version to attack, RasMan may stop responding with MSRPC Pipe Not Available errors, and will most likely not...

Immunity Canvas: NETBACKUP_JAVAUI

Name| netbackupjavaui ---|--- CVE| CVE-2005-2715 Exploit Pack| CANVAS Description| VERITAS NetBackup Java User Interface Format String Notes| CVE Name: CVE-2005-2715 VENDOR: Symantec VersionsAffected: Repeatability: References: http://www.zerodayinitiative.com/advisories/ZDI-05-001.html CVE Url:...

Immunity Canvas: CA_LIC

Name| calic ---|--- CVE| CVE-2005-0581 Exploit Pack| CANVAS Description| CA License Overflow Notes| CVSS: 4.6 Repeatability: This is a one shot exploit. VENDOR: Computer Associates CVE Url: https://vulners.com/cve/CVE-2005-0581 CVE Name: CVE-2005-0581...

Immunity Canvas: MYSQL_AUTH_BYPASS

Name| mysqlauthbypass ---|--- CVE| CVE-2004-0627 Exploit Pack| CANVAS Description| MySQL authentication bypass Notes| CVE Name: CVE-2004-0627 OSVDB: http://www.osvdb.org/displayvuln.php?osvdbid=7475 Notes: Mysql authentication can be bypass by a special crafted password with zeroed-strings...

Immunity Canvas: ESET_EPFWNDIS

Name| ESETEpFwNDIS ---|--- CVE| CVE-2014-4973 Exploit Pack| CANVAS Description| EpFwNDIS.sys Trusted Value Vulnerability Notes| Repeatability: Infinite Notes: This module exploits a vulnerability on the ESET Personal Firewall NDIS filter EpFwNdis.sys driver. The Firewall Module Build 1183 2014021...

Immunity Canvas: RECVMMSG

Name| recvmmsg ---|--- CVE| CVE-2014-0038 Exploit Pack| CANVAS Description| recvmmsg local root Notes| Repeatability: Infinite Notes: Tested on: - Ubuntu 13.10 x8664 3.11.0-12-generic VENDOR: GNU/Linux CVE Url: https://vulners.com/cve/CVE-2014-0038 CVE Name: CVE-2014-0038...

Immunity Canvas: CVE_2013_3881

Name| CVE20133881 ---|--- CVE| CVE-2013-3881 Exploit Pack| CANVAS Description| Win32k NULL Page Exploit Notes| Repeatability: Notes: This vulnerability only affects Intel x86 based versions of Windows 7 This module automatically migrates to lsass.exe . Tested on: Windows 7 Ultimate N VENDOR:...

Immunity Canvas: MS_ENABLEEUDC

Name| msenableeudc ---|--- CVE| CVE-2010-4398 Exploit Pack| CANVAS Description| Windows EnableEUDC Privilege Escalation Exploit Notes| Repeatability: Notes: Tested on Windows 7 x86/64. VENDOR: Microsoft CVE Name: CVE-2010-4398...

Immunity Canvas: IE_PEERS_SETATTRIBUTE

Name| iepeerssetattribute ---|--- CVE| CVE-2010-0806 Exploit Pack| CANVAS Description| iepeerssetattribute Notes| CVE Name: CVE-2010-0806 VENDOR: Microsoft Notes: This is the iepeers exploit for IE 6/7, first discovered in the wild in March, 2010. It will work on both DEP and non-DEP machines and...

Immunity Canvas: MS09_061_CAS

Name| ms09061cas ---|--- CVE| CVE-2009-0091 Exploit Pack| CANVAS Description| MS09-061 Microsoft .NET CAS Type Verification Vulnerability Notes| URL: http://www.microsoft.com/technet/security/Bulletin/MS09-061.mspx CVE Name: CVE-2009-0091 VENDOR: Microsoft CVE Url:...

Immunity Canvas: SIGE_INCLUDE

Name| sigeinclude ---|--- CVE| CVE-2007-5781 Exploit Pack| CANVAS Description| SIGE remote file include Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: pfadmin CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5781 CVE Name: CVE-2007-5781...

Immunity Canvas: SEGUE_INCLUDE

Name| segueinclude ---|--- CVE| CVE-2007-5186 Exploit Pack| CANVAS Description| Segue remote file include Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: Segue CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5186 CVE Name: CVE-2007-5186...

Immunity Canvas: IZICONTENTS_INCLUDE

Name| izicontentsinclude ---|--- CVE| CVE-2007-5054 Exploit Pack| CANVAS Description| iziContents Remote file inclusion Notes| CVSS: 7.5 Repeatability: Infinite VENDOR: iziContents CVE Url: https://vulners.com/cve/CVE-2007-5054 CVE Name: CVE-2007-5054...

Immunity Canvas: ZEN

Name| zen ---|--- CVE| CVE-2005-1255 Exploit Pack| CANVAS Description| imailimap Notes| CVE Name: CVE-2005-1255 VENDOR: IPSwitch VersionsAffected: IMail 8.13 Repeatability: This is a one shot exploit. CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1255 CVSS: 10.0...

Immunity Canvas: RAILS_ACCEPT_READFILE

Name| railsacceptreadfile ---|--- CVE| CVE-2019-5418 Exploit Pack| CANVAS Description| Ruby on Rails Arbitrary File Read CVE-2019-5418 Notes| CVE Name: CVE-2019-5418 VENDOR: Rails NOTES: The vulnerability resides in Action View in combination with calls to 'render file:' in a controller. You need...

Immunity Canvas: MS13_056

Name| ms13056 ---|--- CVE| CVE-2013-3174 Exploit Pack| CANVAS Description| MS13056 Notes| CVE Name: CVE-2013-3174 VENDOR: Microsoft NOTES: This exploit has been tested on: - Windows XP SP 3 EN on IE 8 no jsrecon - Windows 7 PRO SP 1 EN x86-64 on IE 8 32bit jsrecon works No webpage open in the...

Immunity Canvas: FLASH_APSB11_18

Name| flashAPSB1118 ---|--- CVE| CVE-2011-2110 Exploit Pack| CANVAS Description| flashAPSB1118 Notes| CVE Name: CVE-2011-2110 VENDOR: Adobe Notes: This is an exploit found in the wild, targeting Windows Flash player versions 10.3.181.23 and earlier. VersionsAffected: Windows Flash Player versions...

Immunity Canvas: MS_TASKSCHEDULER

Name| mstaskscheduler ---|--- CVE| CVE-2010-2743 Exploit Pack| CANVAS Description| MSTASKSCHEDULER Notes| CVE Name: CVE-2010-2743 VENDOR: Microsoft Notes: This is one of the vulnerabilities used by the Stuxnet work to elevate its privileges on Windows Vista and Windows 7. This vulnerability is...

Immunity Canvas: JAVA_METHOD_CHAIN

Name| javamethodchain ---|--- CVE| CVE-2010-0840 Exploit Pack| CANVAS Description| javamethodchain Notes| CVE Name: CVE-2010-0840 VENDOR: Sun Repeatability: Infinite client side - no crash References:...

Immunity Canvas: JOOMLADADAMAIL_RFI

Name| joomladadamailrfi ---|--- CVE| CVE-2008-6221 Exploit Pack| CANVAS Description| Joomla comdadamail Remote File Include Notes| CVSS: 7.5 Repeatability: Infinite VENDOR: Joomla CVE Url: https://vulners.com/cve/CVE-2008-6221 CVE Name: CVE-2008-6221...

Immunity Canvas: ACROBAT_JS3

Name| acrobatjs3 ---|--- CVE| CVE-2008-2992 Exploit Pack| CANVAS Description| Adobe Acrobat Reader Stack Overflow 8.1.2 Notes| CVE Name: CVE-2008-2992 VENDOR: Adobe Notes: Requires a lot of memory 700MB to be allocated by the JS engine in order to have our data at 0x30303030. VersionsAffected:...

Immunity Canvas: MS08_059

Name| ms08059 ---|--- CVE| CVE-2008-3466 Exploit Pack| CANVAS Description| Microsoft Host Integration Server RPC Interface Vulnerability Notes| References: http://www.microsoft.com/technet/security/Bulletin/ms08-059.mspx CVE Name: CVE-2008-3466 VENDOR: Microsoft Notes: MSADV: MS08-059 Date public...

Immunity Canvas: MS08_049

Name| ms08049 ---|--- CVE| CVE-2008-1457 Exploit Pack| CANVAS Description| EventSystem Service Overflow Notes| CVE Name: CVE-2008-1457 VENDOR: Microsoft Notes: Due to the fact that the svchost.exe instance where the EventSystem service is running is DEP protected, and that all loaded DLLs have GS...

Immunity Canvas: OOO_230

Name| ooo230 ---|--- CVE| CVE-2007-4575 Exploit Pack| CANVAS Description| OpenOffice Database 2.3.0 Static Java Execution Notes| CVE Name: CVE-2007-4575 VENDOR: OpenOffice Repeatability: Infinite client side - no crash CVS URL: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4575 Date...

Immunity Canvas: SNORTRPC

Name| snortrpc ---|--- CVE| CVE-2006-5276 Exploit Pack| CANVAS Description| Snort RPC Notes| CVE Name: CVE-2006-5276 VENDOR: SourceFire Notes: This version of the exploit needs to connect to a port 139 Note that it does not need to be an actual Netbios target. Something like a netcat listener wil...

Immunity Canvas: BLOG_PIXELMOTION

Name| blogpixelmotion ---|--- CVE| CVE-2006-5085 Exploit Pack| CANVAS Description| Blog PixelMotion exec Notes| CVSS: 7.5 Repeatability: Infinite VENDOR: Pixel Motion CVE Url: https://vulners.com/cve/CVE-2006-5085 CVE Name: CVE-2006-5085...

Immunity Canvas: MAILENABLE_IMAP

Name| mailenableimap ---|--- CVE| CVE-2005-1015 Exploit Pack| CANVAS Description| mailenableimap Notes| CVE Name: CVE-2005-1015 VENDOR: MailEnable VersionsAffected: MailEnable Enterprise = 1.04 Repeatability: Repeatable. CVE Url: https://vulners.com/cve/CVE-2005-1015 CVSS: 10.0...

Immunity Canvas: MS03_001

Name| ms03001 ---|--- CVE| CVE-2003-0003 Exploit Pack| CANVAS Description| Microsoft Windows RPC Locator Overflow Notes| CVE Name: CVE-2003-0003 VENDOR: Microsoft MSADV: MS03-001 VersionsAffected: Repeatability: References: http://www.microsoft.com/technet/security/Bulletin/MS03-001.mspx CVE Url:...

Immunity Canvas: CVE_2014_5460

Name| CVE20145460 ---|--- CVE| CVE-2014-5460 Exploit Pack| CANVAS Description| CVE-2014-5460 Notes| CVE Name: CVE-2014-5460 VENDOR: Tribulant Changelog: https://wordpress.org/plugins/slideshow-gallery/changelog/ Notes: If the Suhosin-Patch is installed typically announced in the PHP banner the...