Exploits

日期	标题	类型	平台	作者
2013-08-26	MusicBox 2.3.8 – Multiple Vulnerabilities	webapps	php	DevilScreaM
2013-08-26	libtiff 3.9.5 – Integer Overflow	dos	linux	x90c
2013-08-26	Winamp 5.63 – ‘winamp.ini’ Local Overflow	local	windows	Ayman Sagy
2013-08-26	Belkin G Wireless Router Firmware 5.00.12 – Remote Code Execution	remote	hardware	Aodrulez
2013-08-26	PhpVibe 3.1 – Multiple Vulnerabilities	webapps	php	Esac
2013-08-26	mooSocial 1.3 – Multiple Vulnerabilities	webapps	php	Esac
2013-08-23	SearchBlox – Multiple Information Disclosure Vulnerabilities	webapps	java	Ricky Roane Jr
2013-08-23	dreamMail e-mail client 4.6.9.2 – Persistent Cross-Site Scripting	remote	windows	loneferret
2013-08-22	Foreman (RedHat OpenStack/Satellite) – users/create Mass Assignment (Metasploit)	webapps	linux	Metasploit
2013-08-22	DeWeS 0.4.2 – Directory Traversal	webapps	windows	High-Tech Bridge SA
2013-08-22	Netgear ProSafe – Denial of Service	dos	hardware	Juan J. Guelfo
2013-08-22	Netgear ProSafe – Information Disclosure	webapps	hardware	Juan J. Guelfo
2013-08-22	Ovidentia 7.9.4 – Multiple Vulnerabilities	webapps	php	LiquidWorm
2013-08-22	CBHotel Hotel Software and Booking system 1.8 – Multiple Vulnerabilities	webapps	php	Dylan Irzi
2013-08-22	VMware – Setuid VMware-mount Popen lsb_release Privilege Escalation	local	linux	Tavis Ormandy
2013-08-22	Samba 3.5.22/3.6.17/4.0.8 – nttrans Reply Integer Overflow	dos	linux	x90c
2013-08-21	Twilight CMS – DeWeS Web Server Directory Traversal	webapps	php	High-Tech Bridge
2013-08-21	Sitecom N300/N600 Devices – Multiple Vulnerabilities	webapps	hardware	Roberto Paleari
2013-08-21	Adobe ColdFusion 9 – Administrative Authentication Bypass	webapps	windows	Scott Buckel
2013-08-21	Oracle Java – ‘BytePackedRaster.verify()’ Signed Integer Overflow	remote	windows	Packet Storm
2013-08-21	Samsung DVR Firmware 1.10 – Authentication Bypass	webapps	hardware	Andrea Fabrizi
2013-08-21	Graphite Web – Unsafe Pickle Handling (Metasploit)	remote	unix	Metasploit
2013-08-21	WordPress Plugin ThinkIT 0.1 – Multiple Vulnerabilities	webapps	php	Yashar shahinzadeh
2013-08-21	Bitbot (C2 Web Panel) – ‘gate2.php’ Multiple Vulnerabilities	webapps	php	bwall
2013-08-21	Xibo – Cross-Site Request Forgery	webapps	php	Jacob Holcomb
2013-08-21	Schneider Electric PLC ETY Series Ethernet Controller – Denial of Service	dos	hardware	Arash Abedian
2013-08-21	Xibo – ‘layout’ HTML Injection	webapps	php	Jacob Holcomb
2013-08-21	freeFTPd 1.0.10 – ‘PASS’ Remote Buffer Overflow (SEH)	remote	windows	Wireghoul
2013-08-20	Bo-Blog 2.1.1 – Cross-Site Scripting / SQL Injection	webapps	php	Ashiyane Digital Security Team
2013-08-19	Java – ‘storeImageArray()’ Invalid Array Indexing (Metasploit)	remote	multiple	Metasploit
2013-08-19	Cogent DataHub – HTTP Server Buffer Overflow (Metasploit)	remote	windows	Metasploit
2013-08-19	PCMan FTP Server 2.07 – ‘STOR’ Remote Buffer Overflow	remote	windows	Polunchis
2013-08-19	VideoLAN VLC Media Player 2.0.8 – ‘.m3u’ Local Crash (PoC)	dos	windows	Asesino04
2013-08-19	IBM 1754 GCM 1.18.0.22011 – Remote Command Execution	remote	hardware	Alejandro Alvarez Bravo
2013-08-17	Photo Transfer Upload 1.0 iOS – Multiple Vulnerabilities	webapps	ios	Vulnerability-Lab
2013-08-17	Copy to WebDAV 1.1 iOS – Multiple Vulnerabilities	webapps	ios	Vulnerability-Lab
2013-08-17	Quack Chat 1.0 – Multiple Vulnerabilities	webapps	php	Dylan Irzi
2013-08-16	AlgoSec Firewall Analyzer – Cross-Site Scripting	remote	hardware	Asheesh kumar Mani Tripathi
2013-08-15	Spitfire CMS 1.1.4 – Cross-Site Request Forgery	webapps	php	Yashar shahinzadeh
2013-08-15	Pligg CMS 2.0.0rc2 – Cross-Site Request Forgery (File Creation)	webapps	php	DaOne
2013-08-15	Mac’s CMS 1.1.4 – Multiple Vulnerabilities	webapps	php	Yashar shahinzadeh
2013-08-15	KCFinder 2.51 – Local File Disclosure	webapps	php	DaOne
2013-08-15	Oracle Java – ‘IntegerInterleavedRaster.verify()’ Signed Integer Overflow	remote	windows	Packet Storm
2013-08-15	Joomla! Component Media Manager – Arbitrary File Upload (Metasploit)	remote	php	Metasploit
2013-08-15	Chasys Draw IES – Local Buffer Overflow (Metasploit)	local	windows	Metasploit
2013-08-15	Ultra Mini HTTPd – Remote Stack Buffer Overflow (Metasploit)	remote	windows	Metasploit
2013-08-15	MiniWeb 300 – Arbitrary File Upload (Metasploit)	remote	windows	Metasploit
2013-08-15	ACal 2.2.6 – ‘view’ Local File Inclusion	webapps	php	ICheer_No0M
2013-08-15	Intrasrv 1.0 – Remote Buffer Overflow (Metasploit)	remote	windows	Metasploit
2013-08-15	Alibaba Clone Tritanium Version – ‘news_desc.html’ SQL Injection	webapps	php	IRAQ_JAGUAR