Exploits

日期	标题	类型	平台	作者
2013-08-15	Alibaba Clone Tritanium Version – ‘news_desc.html’ SQL Injection	webapps	php	IRAQ_JAGUAR
2013-08-15	w-CMS 2.0.1 – Remote Code Execution	webapps	php	ICheer_No0M
2013-08-13	Open-FTPD 1.2 – Arbitrary File Upload (Metasploit)	remote	windows	Metasploit
2013-08-13	HP StorageWorks P4000 Virtual SAN Appliance – Login Buffer Overflow (Metasploit)	remote	windows	Metasploit
2013-08-13	MinaliC WebServer 2.0.0 – Remote Buffer Overflow (Egghunter)	remote	windows	PuN1sh3r
2013-08-13	OneHTTPD 0.7 – Denial of Service	dos	windows	superkojiman
2013-08-13	DotNetNuke 6.1.x – Cross-Site Scripting	webapps	asp	Sajjad Pourali
2013-08-13	CakePHP 2.2.8/2.3.7 – AssetDispatcher Class Local File Inclusion	webapps	php	Takeshi Terada
2013-08-12	Integrated CMS 1.0 – SQL Injection	webapps	php	DSST
2013-08-12	Sami FTP Server 2.0.1 – MKD Buffer Overflow ASLR Bypass (SEH)	remote	windows	Polunchis
2013-08-12	Gnew 2013.1 – Multiple Vulnerabilities (1)	webapps	php	LiquidWorm
2013-08-12	PHPVID 1.2.3 – Multiple Vulnerabilities	webapps	php	3spi0n
2013-08-12	Ajax PHP Penny Auction 1.x 2.x – Multiple Vulnerabilities	webapps	php	Taha Hunter
2013-08-12	MLMAuction Script – ‘gallery.php?id’ SQL Injection	webapps	php	3spi0n
2013-08-12	Open Real Estate CMS 1.5.1 – Multiple Vulnerabilities	webapps	php	Yashar shahinzadeh
2013-08-12	Tribq CMS 5.2.7 – Cross-Site Request Forgery (Adding/Editing New Administrator Account)	webapps	php	Yashar shahinzadeh
2013-08-12	Joomla! Component redSHOP 1.2 – SQL Injection	webapps	php	Matias Fontanini
2013-08-12	WordPress Plugin Hms Testimonials 2.0.10 – Multiple Vulnerabilities	webapps	php	RogueCoder
2013-08-12	OpenX – Backdoor PHP Code Execution (Metasploit)	remote	php	Metasploit
2013-08-12	Squash – YAML Code Execution (Metasploit)	remote	multiple	Metasploit
2013-08-12	D-Link Devices – ‘command.php’ Remote Command Execution (Metasploit)	remote	hardware	Metasploit
2013-08-12	Ruby on Rails – Known Secret Session Cookie Remote Code Execution (Metasploit)	remote	multiple	Metasploit
2013-08-12	Oracle Java – ‘storeImageArray()’ Invalid Array Indexing	remote	windows	Packet Storm
2013-08-11	HTC Sync Manager – Multiple DLL Loading Arbitrary Code Execution Vulnerabilities	remote	windows	Iranian_Dark_Coders_Team
2013-08-08	Advanced Guestbook – ‘addentry.php’ Arbitrary File Upload	webapps	php	Ashiyane Digital Security Team
2013-08-08	PHPFox 3.6.0 (build3) – Multiple SQL Injections	webapps	php	Matias Fontanini
2013-08-08	BigTree CMS 4.0 RC2 – Multiple Vulnerabilities	webapps	php	High-Tech Bridge SA
2013-08-08	Mozilla Firefox – onreadystatechange Event DocumentViewerImpl Use-After-Free (Metasploit)	remote	windows	Metasploit
2013-08-08	D-Link Devices – ‘tools_vct.xgi’ Remote Command Execution (Metasploit)	remote	hardware	Metasploit
2013-08-07	(Gabriel’s FTP Server) Open & Compact FTP Server 1.2 – Authentication Bypass / Directory Traversal SAM Retrieval	remote	windows	Wireghoul
2013-08-07	HP Data Protector – Remote Command Execution	remote	windows	Alessandro Di Pinto & Claudio Moletta
2013-08-07	WordPress Plugin Booking Calendar 4.1.4 – Cross-Site Request Forgery	webapps	php	Dylan Irzi
2013-08-07	Kwok Information Server – Multiple SQL Injections	webapps	cgi	Yogesh Phadtare
2013-08-07	Pluck CMS 4.7 – HTML Code Injection	webapps	php	Yashar shahinzadeh
2013-08-07	Apache suEXEC – Information Disclosure / Privilege Escalation	remote	linux	kingcope
2013-08-07	FTP OnConnect 1.4.11 iOS – Multiple Vulnerabilities	webapps	ios	Vulnerability-Lab
2013-08-07	McAfee SuperScan 4.0 – Cross-Site Scripting	webapps	windows	Trustwave's SpiderLabs
2013-08-07	Joomla! Component com_sectionex 2.5.96 – SQL Injection	webapps	php	Matias Fontanini
2013-08-07	WordPress Plugin Usernoise 3.7.8 – Persistent Cross-Site Scripting	webapps	php	RogueCoder
2013-08-07	Hikvision IP Cameras 4.1.0 b130111 – Multiple Vulnerabilities	webapps	hardware	Core Security
2013-08-06	Nmap – Arbitrary File Write	remote	linux	Piotr Duszynski
2013-08-06	Mozilla Firefox 5.0 < 15.0.1 - __exposedProps__ XCS Code Execution (Metasploit)	local	multiple	Metasploit
2013-08-03	StarUML – ‘WinGraphviz.dll’ ActiveX Buffer Overflow	dos	windows	d3b4g
2013-08-03	Easy LAN Folder Share 3.2.0.100 – Local Buffer Overflow (SEH)	local	windows	sagi-
2013-08-03	RiteCMS 1.0.0 – Multiple Vulnerabilities	webapps	php	Yashar shahinzadeh
2013-08-02	WordPress Plugin Better WP Security 3.4.8/3.4.9/3.4.10/3.5.2/3.5.3 – Persistent Cross-Site Scripting	webapps	php	Richard Warren
2013-08-02	SocialEngine Timeline Plugin 4.2.5p9 – Arbitrary File Upload	webapps	php	spyk2r
2013-08-02	TP-Link TL-SC3171 IP Cameras – Multiple Vulnerabilities	webapps	hardware	Core Security
2013-08-02	HP Data Protector – CMD Install Service (Metasploit)	remote	windows	Ben Turner
2013-08-02	Western Digital My Net Wireless Routers – Password Disclosure	webapps	hardware	Kyle Lovett