Immunity Canvas: PHP_CGI_REMOTE

Name| phpcgiremote ---|--- CVE| CVE-2012-1823 Exploit Pack| CANVAS Description| phpcgiremote Notes| CVE Name: CVE-2012-1823 VENDOR: www.php.net Notes: Also see: http://www.kb.cert.org/vuls/id/520827 Repeatability: Infinite CVE URL: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-1823 CVS...

Immunity Canvas: CVE_2012_1182

Name| CVE20121182 ---|--- CVE| CVE-2012-1182 Exploit Pack| CANVAS Description| CVE-2012-1182 Notes| References: http://www.samba.org CVE Name: CVE-2012-1182 VENDOR: Samba Repeatability: Repeatable Date Public: 04/10/2012 CVE Url: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-CVE-2012-118...

Immunity Canvas: MS12_027

Name| ms12027 ---|--- CVE| CVE-2012-0158 Exploit Pack| CANVAS Description| MS12-027 MSCOMCTL.OCX ActiveX Buffer Overflow Notes| CVE Name: CVE-2012-0158 VENDOR: Microsoft Notes: You shoud manually start a Universal listener for this exploit. The listener IP and PORT should be declared in the modul...

Immunity Canvas: CVE_2012_1182_NONX

Name| CVE20121182NONX ---|--- CVE| CVE-2012-1182 Exploit Pack| CANVAS Description| CVE-2012-1182-NONX Notes| References: http://www.samba.org CVE Name: CVE-2012-1182 VENDOR: Samba Repeatability: Repeatable Date public: 04/10/2012 CVE Url: N/A CVSS: 0.0...

Immunity Canvas: CVE_2011_3176

Name| CVE20113176 ---|--- CVE| CVE-2011-3176 Exploit Pack| CANVAS Description| Novell ZENworks Configuration Management 0x4c Buffer Overflow Notes| CVE Name: CVE-2011-3176 VENDOR: Novell Notes: Tested on ZenWork Configuration Managment 10 SP3 on Windows Server 2003 SP1 This exploit should work an...

Immunity Canvas: CVE_2011_3175

Name| CVE20113175 ---|--- CVE| CVE-2011-3175 Exploit Pack| CANVAS Description| Novell ZENworks Configuration Management 0x6c Buffer Overflow Notes| CVE Name: CVE-2011-3175 VENDOR: Novell Notes: Tested on ZenWork Configuration Managment 10 SP3 on Windows Server 2003 SP1 This exploit should work an...

Immunity Canvas: ADOBE_FLASH_MP4_CPRT

Name| adobeflashmp4cprt ---|--- CVE| CVE-2012-0752 Exploit Pack| CANVAS Description| adobeflashmp4cprt Notes| CVE Name: CVE-2012-0752 Vendor: Adobe Notes: Usage: python ./exploits/clientd/clientd.py -l 192.168.1.109 -d 5555 -O serverport:8080 -O allowedattackmodules:adobeflashmp4cprt -O...

Immunity Canvas: CVE_2012_0056

Name| CVE20120056 ---|--- CVE| CVE-2012-0056 Exploit Pack| CANVAS Description| CVE20120056 linux local root Notes| CVE Name: CVE-2012-0056 VENDOR: Linux Notes: Tested on Ubuntu 11.10 Desktop 32b, kernel 3.0.0-12-generic Repeatability: Infinite CVE Url: https://vulners.com/cve/CVE-2012-0056 NOTES:...

Immunity Canvas: MS12_005

Name| ms12005 ---|--- CVE| CVE-2012-0013 Exploit Pack| CANVAS Description| MS12-005: MS Office 2007-2010 Shell Object Packager file extension bypass Notes| Repeatability: Infinite Notes: The issue we exploit here was fixed silently alongside the ClickOnce issues in the MS12-005 patch but allows f...

Immunity Canvas: MS12_004

Name| ms12004 ---|--- CVE| CVE-2012-0003 Exploit Pack| CANVAS Description| MS12004 Notes| CVE Name: CVE-2012-0003 VENDOR: Microsoft NOTES: This exploit will work on Internet Explorer 8. Repeatability: Single References: http://technet.microsoft.com/en-us/security/bulletin/ms12-004 CVE Url:...

Immunity Canvas: STRUTSCODEINJECTION

Name| strutsCodeInjection ---|--- CVE| CVE-2012-0394 Exploit Pack| CANVAS Description| Struts Code Injector Notes| CVE Name: CVE-2012-0394 VENDOR: Apache Notes: CVE-2012-0394 - Struts = 2.2.1.1 ExceptionDelegator When an exception occurs while applying parameter values to properties, the value is...

Immunity Canvas: FIREFOX_NSSVGVALUE

Name| firefoxnsSVGValue ---|--- CVE| CVE-2011-3658 Exploit Pack| CANVAS Description| firefoxnsSVGValue Notes| CVE Name: CVE-2011-3658 VENDOR: Mozilla Repeatability: One Shot Note: CVE Url: https://vulners.com/cve/CVE-2011-3658 Date public: 09/25/2008...

Immunity Canvas: MS11_098

Name| ms11098 ---|--- CVE| CVE-2011-2018 Exploit Pack| CANVAS Description| MS11-098 Notes| CVE Name: CVE-2011-2018 VENDOR: Microsoft Notes: http://technet.microsoft.com/en-us/security/bulletin/ms11-098 Reliably exploits Windows XP to 7 32-bit only. When executed, this will get a callback that run...

Immunity Canvas: PDF_U3D

Name| pdfu3d ---|--- CVE| CVE-2011-2462 Exploit Pack| CANVAS Description| Adobe Acrobat Reader U3D bug Notes| CVE Name: CVE-2011-2462 VersionsAffected: 9.4 Repeatability: Infinite References: http://www.symantec.com/connect/blogs/new-zero-day-pdf-exploit-used-targeted-attack Date public: 6 Decemb...

Immunity Canvas: JAVA_RHINO

Name| javarhino ---|--- CVE| CVE-2011-3544 Exploit Pack| CANVAS Description| javarhino Notes| CVE Name: CVE-2011-3544 VENDOR: Sun OSVDB: http://osvdb.org/show/osvdb/76500 Repeatability: Infinite client side - no crash References: http://schierlm.users.sourceforge.net/CVE-2011-3544.html CVE Url:...

Immunity Canvas: MS11_080

Name| ms11080 ---|--- CVE| CVE-2011-2005 Exploit Pack| CANVAS Description| MS11-080 Notes| CVE Name: CVE-2011-2005 VENDOR: Microsoft Notes: http://technet.microsoft.com/en-us/security/bulletin/ms11-080 Reliably exploits Windows XP SP3 and 2003 SP2 32/64-bit. When executed, this will get a callbac...

Immunity Canvas: PLONE

Name| plone ---|--- CVE| CVE-2011-3587 Exploit Pack| CANVAS Description| Plone Zope Remote Command Execution Notes| CVE Name: CVE-2011-3587 Notes: Vulnerable versions include: Plone 4.0 through 4.0.9; Plone 4.1; Plone 4.2 a1 and a2; Zope 2.12.x and Zope 2.13.x. Repeatability: Infinite CVE Url:...

Immunity Canvas: MS11_054

Name| ms11054 ---|--- CVE| CVE-2011-1888 Exploit Pack| CANVAS Description| MS11-054 Privilege Escalation Exploit Notes| Repeatability: Notes: Tested on Windows XP SP3 x86, Windows 2003 SP2 x86/64, Windows 2008 x86/64, Windows 7 x86/64. VENDOR: Microsoft CVE Url:...

Immunity Canvas: FIREFOX_ARRAY_REDUCERIGHT

Name| firefoxarrayreduceright ---|--- CVE| CVE-2011-2371 Exploit Pack| CANVAS Description| Firefox Array reduceRight Notes| CVE Name: CVE-2011-2371 CVE URL: https://vulners.com/cve/CVE-2011-2371 Repeatability: Infinite...

Immunity Canvas: FLASH_APSB11_18

Name| flashAPSB1118 ---|--- CVE| CVE-2011-2110 Exploit Pack| CANVAS Description| flashAPSB1118 Notes| CVE Name: CVE-2011-2110 VENDOR: Adobe Notes: This is an exploit found in the wild, targeting Windows Flash player versions 10.3.181.23 and earlier. VersionsAffected: Windows Flash Player versions...

Immunity Canvas: CVE_2011_1485

Name| CVE20111485 ---|--- CVE| CVE-2011-1485 Exploit Pack| CANVAS Description| CVE-2011-1485: pkexec stuid race Notes| CVE Name: CVE-2011-1485 VENDOR: PolKit Notes: Tested on Red Hat Enterprise Linux 6 Repeatability: Infinite CVE Url: https://vulners.com/cve/CVE-2011-1485 NOTES:...

Immunity Canvas: FIREFOX_CHANNELREDIRECT

Name| firefoxchannelredirect ---|--- CVE| CVE-2011-0065 Exploit Pack| CANVAS Description| Firefox Notes| CVE Name: CVE-2011-0065 Repeatability: Infinite MFSA: http://www.mozilla.org/security/announce/2011/mfsa2011-13.html...

Immunity Canvas: WIRESHARK_DECT

Name| wiresharkdect ---|--- CVE| CVE-2011-1591 Exploit Pack| CANVAS Description| Wireshark DECT Dissector Remote Overflow Notes| CVE Name: CVE-2011-1591 Notes: Tested on Wireshark 1.4.4 on WinXP CVE Url: https://vulners.com/cve/CVE-2011-1591...

Immunity Canvas: MS11_032

Name| ms11032 ---|--- CVE| CVE-2011-0034 Exploit Pack| CANVAS Description| MS11-032 Privilege Escalation Exploit Notes| Repeatability: Notes: Tested on Windows XP SP3 x86, Windows 2003 SP2 x86/64, Windows 2008 x86/64, Windows 7 x86/64. VENDOR: Microsoft CVE Url:...

Immunity Canvas: CVE_2011_0997

Name| CVE20110997 ---|--- CVE| CVE-2011-0997 Exploit Pack| CANVAS Description| CVE20110997 DHClient Exploit Notes| CVE Name: CVE-2011-0997 NOTES: -This exploit answers dhcp requests with crafted packets to get commands executed by scripts using the hostname. For this exploit to work, the target...

Immunity Canvas: CVE_2011_0182

Name| CVE20110182 ---|--- CVE| CVE-2011-0182 Exploit Pack| CANVAS Description| CVE-2011-0182: i386setldt Notes| CVE Name: CVE-2011-0182 VENDOR: Apple Notes: Tested on OSX 10.6.6 Repeatability: Infinite CVE Url: https://vulners.com/cve/CVE-2011-0182 NOTES:...

Immunity Canvas: CVE_2010_4452

Name| CVE20104452 ---|--- CVE| CVE-2010-4452 Exploit Pack| CANVAS Description| CVE20104452 Notes| CVE Name: CVE-2010-4452 VENDOR: Oracle NOTES: This exploit will work against Java plugin bundled with Oracle/SUN JDK/JRE = 6 Update 23. Target operating systems are Windows all versions and Ubuntu...

Immunity Canvas: MS_TASKSCHEDULER

Name| mstaskscheduler ---|--- CVE| CVE-2010-2743 Exploit Pack| CANVAS Description| MSTASKSCHEDULER Notes| CVE Name: CVE-2010-2743 VENDOR: Microsoft Notes: This is one of the vulnerabilities used by the Stuxnet work to elevate its privileges on Windows Vista and Windows 7. This vulnerability is...

Immunity Canvas: CVE_2010_3847

Name| CVE20103847 ---|--- CVE| CVE-2010-3847 Exploit Pack| CANVAS Description| CVE20103847 Notes| CVE Name: CVE-2010-3847 VENDOR: Linux NOTES: See the FD post for a ton of details, try this exploit on RedHat and derived distributions. If it fails but you think the target is vulnerable, try Tavis'...

Immunity Canvas: CVE_2010_3856

Name| CVE20103856 ---|--- CVE| CVE-2010-3856 Exploit Pack| CANVAS Description| CVE20103856 Notes| CVE Name: CVE-2010-3856 VENDOR: Linux NOTES: See the FD post for a ton of details, try this exploit on RedHat derived distributions, this may also work against Ubuntu. If it fails but you think the...

Immunity Canvas: MS11_003

Name| ms11003 ---|--- CVE| CVE-2010-3971 Exploit Pack| CANVAS Description| IE7 recursive import css vulnerability Notes| CVE Name: CVE-2010-3971 MSADV: MS11-003 Repeatability: Infinite...

Immunity Canvas: CVE_2010_4344

Name| CVE20104344 ---|--- CVE| CVE-2010-4344 Exploit Pack| CANVAS Description| CVE-2010-4344 Notes| CVE Name: CVE-2010-4344 VENDOR: exim Repeatability: Infinite References: 'http://bugs.exim.org/showbug.cgi?id=787', 'http://www.exim.org/lurker/message/20101207.215955.bb32d4f2.en.html' CVE Url:...

Immunity Canvas: LINUX_RDS

Name| linuxrds ---|--- CVE| CVE-2010-3904 Exploit Pack| CANVAS Description| linuxrds Notes| References: 'http://www.vsecurity.com/resources/advisory/20101019-1/' Date public: 2010-10-19 VENDOR: Linux CVE Url: https://vulners.com/cve/CVE-2010-3904 CVE Name: CVE-2010-3904...

Immunity Canvas: MS_ENABLEEUDC

Name| msenableeudc ---|--- CVE| CVE-2010-4398 Exploit Pack| CANVAS Description| Windows EnableEUDC Privilege Escalation Exploit Notes| Repeatability: Notes: Tested on Windows 7 x86/64. VENDOR: Microsoft CVE Name: CVE-2010-4398...

Immunity Canvas: IE_SETUSERCLIP

Name| iesetuserclip ---|--- CVE| CVE-2010-3962 Exploit Pack| CANVAS Description| iesetuserclip Notes| Date public: 11/04/2010 Notes: This bug was discovered in the wild. IE6, 7 and 8 are vulnerable to this bug, but because of its behaviour some versions will not be exploitable. The only full...

Immunity Canvas: ADOBE_FLASH_BUTTON

Name| adobeflashbutton ---|--- CVE| CVE-2010-3654 Exploit Pack| CANVAS Description| adobeflashbutton Notes| CVE Name: CVE-2010-3654 VENDOR: Adobe NOTES: Exploitation through an PDF file is more reliable than with a direct HTML/Flash exploit VersionsAffected: Adobe Acrobat Reader 9.4.0...

Immunity Canvas: FIREFOX_APPENDCHILD

Name| firefoxappendchild ---|--- CVE| CVE-2010-3765 Exploit Pack| CANVAS Description| firefoxappendchild Notes| CVE Name: CVE-2010-3765 VENDOR: Mozilla Notes: Interleaving document.write and appendChild can lead to duplicate text frames and overrunning of text run buffers. This exploit can only b...

Immunity Canvas: ADOBE_SHOCKWAVE_RCSLCHUNK

Name| adobeshockwavercslchunk ---|--- CVE| CVE-2010-3653 Exploit Pack| CANVAS Description| adobeshockwavercslchunk Notes| CVE Name: CVE-2010-3653 Vendor: Adobe Notes: This exploit can only be used from clientd. Tested on: Windows XP Professional SP3 EN with IE 7. Windows XP Home SP3 EN with IE7...

Immunity Canvas: JAVA_DOCBASE

Name| javadocbase ---|--- CVE| CVE-2010-3552 Exploit Pack| CANVAS Description| Java IE Plugin "docparam" Overflow Notes| CVE Name: CVE-2010-3552 Vendor: Oracle Notes: This exploit can only be used from clientd. Tested on: Windows XP Professional SP3 EN under IE 8 updated. Windows XP Home SP3 EN...

Immunity Canvas: MS_KBLAYOUT

Name| mskblayout ---|--- CVE| CVE-2010-2744 Exploit Pack| CANVAS Description| MSKBLAYOUT Notes| CVE Name: CVE-2010-2744 VENDOR: Microsoft Notes: This is one of the vulnerabilities used by the Stuxnet work to elevate its privileges on Windows XP and Windows 2000. It may cause some minor side effec...

Immunity Canvas: MS10_061

Name| ms10061 ---|--- CVE| CVE-2010-2729 Exploit Pack| CANVAS Description| Microsoft Windows Print Spooler Arbitrary File Creation Notes| CVE Name: CVE-2010-2729 VENDOR: Microsoft MSADV: MS10-061 Repeatability: Note: Please refer to the Microsoft URLs to know exactly the conditions for when this...

Immunity Canvas: FLASH_WILD2

Name| flashwild2 ---|--- CVE| CVE-2010-2884 Exploit Pack| CANVAS Description| Flash 0day CVE-2010-2884 Notes| CVE Name: CVE-2010-2884 VENDOR: Adobe VersionsAffected: Repeatability: Date public: Not public/0day CVE Url: CVSS: 9.3...

Immunity Canvas: CVE_2010_1807

Name| CVE20101807 ---|--- CVE| CVE-2010-1807 Exploit Pack| CANVAS Description| Android 2.0/2.1 webkit parsefloat Notes| CVE Name: CVE-2010-1807 VENDOR: Google Repeatability: Infinite client side - no crash References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-1807 CVE Url:...

Immunity Canvas: ACROBAT_TTF_SING

Name| acrobatttfsing ---|--- CVE| CVE-2010-2883 Exploit Pack| CANVAS Description| Acrobat Reader TTF Bug Notes| CVE Name: CVE-2010-2883 Notes: VersionsAffected: Acrobat Reader = 9.3.4 Repeatability: References: http://contagiodump.blogspot.com/2010/09/cve-david-leadbetters-one-point-lesson.html...

Immunity Canvas: QUICK_PUNK

Name| quickpunk ---|--- CVE| CVE-2010-1818 Exploit Pack| CANVAS Description| quickpunk Notes| CVE Name: CVE-2010-1818 VENDOR: Apple Notes: Abyssec 0day VersionsAffected: 7.6.5 Repeatability: Infinite References: 'http://zerodayinitiative.com/advisories/ZDI-10-168/' CVE Url:...

Immunity Canvas: TRENDMICRO_SETOWNED

Name| trendmicrosetowned ---|--- CVE| CVE-2010-3189 Exploit Pack| CANVAS Description| trendmicrosetowned Notes| CVE Name: CVE-2010-3189 VENDOR: Trend Micro Notes: abyssec 0day VersionsAffected: Last Repeatability: Infinite References: 'None' CVE Url: https://vulners.com/cve/CVE-2010-3189 Date...

Immunity Canvas: MS10_059

Name| ms10059 ---|--- CVE| CVE-2010-2554 Exploit Pack| CANVAS Description| ms10059 Notes| References: http://www.microsoft.com/technet/security/bulletin/MS10-059.mspx CVE Name: CVE-2010-2554 VENDOR: Microsoft Notes: This exploit gain SYSTEM from NETWORKSERVICE or DefaultAppPool user by duplicatin...

Immunity Canvas: MS10_060

Name| ms10060 ---|--- CVE| CVE-2010-1898 Exploit Pack| CANVAS Description| ms10060 Notes| CVE Name: CVE-2010-1898 VENDOR: Microsoft URL: http://www.microsoft.com/technet/security/bulletin/ms10-060.mspx Notes: This exploit reliably targets .Net 2 through 3.5. DEP/ASLR are not effective at preventi...

Immunity Canvas: MS10_048

Name| ms10048 ---|--- CVE| CVE-2010-1897 Exploit Pack| CANVAS Description| ms10048 Notes| CVE Name: CVE-2010-1897 VENDOR: Microsoft Notes: Reliably exploits Windows XP through Windows 7 32-bit. When executed, this will get a callback that runs as Local/SYSTEM. This also exploits Windows 7 x64...

Immunity Canvas: CF_DIRECTORY_TRAVERSAL

Name| CFdirectorytraversal ---|--- CVE| CVE-2010-2861 Exploit Pack| CANVAS Description| ColdFusion Directory Traversal Notes| CVE Name: CVE-2010-2861 VENDOR: http://www.adobe.com Things to consider: 1 - A remote file i-test10-1.cfm will be left in the webroot as well as the CANVAS callback trojan...