Exploits

日期	标题	类型	平台	作者
2013-08-02	TEC-IT TBarCode – OCX ActiveX Control (TBarCode4.ocx 4.1.0) Crash (PoC)	dos	windows	d3b4g
2013-08-02	WordPress Plugin Better WP Security 3.4.8/3.4.9/3.4.10/3.5.2/3.5.3 – Persistent Cross-Site Scripting	webapps	php	Richard Warren
2013-08-02	SocialEngine Timeline Plugin 4.2.5p9 – Arbitrary File Upload	webapps	php	spyk2r
2013-08-02	TP-Link TL-SC3171 IP Cameras – Multiple Vulnerabilities	webapps	hardware	Core Security
2013-08-02	HP Data Protector – CMD Install Service (Metasploit)	remote	windows	Ben Turner
2013-08-02	Western Digital My Net Wireless Routers – Password Disclosure	webapps	hardware	Kyle Lovett
2013-08-02	Cotonti 0.9.13 – SQL Injection	webapps	php	High-Tech Bridge SA
2013-08-02	MiCasaVerde VeraLite 1.5.408 – Multiple Vulnerabilities	webapps	hardware	Trustwave's SpiderLabs
2013-08-02	Karotz Smart Rabbit 12.07.19.00 – Multiple Vulnerabilities	local	hardware	Trustwave's SpiderLabs
2013-08-02	INSTEON Hub 2242-222 – Lack of Web and API Authentication	webapps	hardware	Trustwave's SpiderLabs
2013-08-02	D-Link DIR-645 1.03B08 – Multiple Vulnerabilities	webapps	hardware	Roberto Paleari
2013-08-02	Agnitum Outpost Security Suite 8.1 – Local Privilege Escalation	local	windows	Ahmad Moghimi
2013-08-02	Linux Kernel 3.7.6 (RedHat x86/x64) – ‘MSR’ Driver Privilege Escalation	local	linux	spender
2013-08-02	Telmanik CMS Press 1.01b – ‘pages.php?page_name’ SQL Injection	webapps	php	Anarchy Angel
2013-08-02	Microsoft Windows – HWND_BROADCAST Low to Medium Integrity Privilege Escalation (MS13-005) (Metasploit)	local	windows	Metasploit
2013-08-02	vTiger CRM 5.4.0 SOAP – Multiple Vulnerabilities	webapps	php	EgiX
2013-08-02	PineApp Mail-SeCure – ‘livelog.html’ Arbitrary Command Execution (Metasploit)	remote	unix	Metasploit
2013-08-02	PCMan FTP Server 2.07 – ‘PASS’ Remote Buffer Overflow	remote	windows	Ottomatik
2013-08-02	PineApp Mail-SeCure – ‘ldapsyncnow.php’ Arbitrary Command Execution (Metasploit)	remote	php	Metasploit
2013-08-02	BigACE 2.7.8 – Cross-Site Request Forgery (Add Admin)	webapps	php	Yashar shahinzadeh
2013-08-01	SilverStripe CMS – ‘MemberLoginForm.php’ Information Disclosure	webapps	php	Fara Rustein
2013-07-31	Plone – ‘in_portal.py’ < 4.1.3 Session Hijacking	webapps	Python	Cyrill Bannwart
2013-07-31	Jahia xCM – ‘/administration/’ Multiple Cross-Site Scripting Vulnerabilities	webapps	php	High-Tech Bridge
2013-07-31	Jahia xCM – ‘/engines/manager.jsp?site’ Cross-Site Scripting	webapps	php	High-Tech Bridge
2013-07-29	Novell Client 2 SP3 – ‘nicm.sys 3.1.11.0’ Local Privilege Escalation	local	windows	sickness
2013-07-29	FluxBB 1.5.3 – Multiple Vulnerabilities	webapps	php	LiquidWorm
2013-07-29	WebDisk 3.0.2 PhotoViewer iOS – Command Execution	webapps	ios	Vulnerability-Lab
2013-07-29	Private Photos 1.0 iOS – Persistent Cross-Site Scripting	webapps	ios	Vulnerability-Lab
2013-07-29	OpenEMM-2013 8.10.380.hf13.0.066 – SOAP SQL Injection / Persistent Cross-Site Scripting	webapps	jsp	drone
2013-07-28	TRENDnet TEW-812DRU – Cross-Site Request Forgery/Command Injection Root	webapps	hardware	Jacob Holcomb
2013-07-27	Basic Forum by JM LLC – Multiple Vulnerabilities	webapps	php	Sp3ctrecore
2013-07-27	Windu CMS 2.2 – Multiple Vulnerabilities	webapps	php	LiquidWorm
2013-07-27	Easy Blog by JM LLC – Multiple Vulnerabilities	webapps	php	Sp3ctrecore
2013-07-27	Symantec Web Gateway 5.1.0.x – Multiple Vulnerabilities	webapps	php	SEC Consult
2013-07-27	Apache Struts 2 – DefaultActionMapper Prefixes OGNL Code Execution (Metasploit)	remote	multiple	Metasploit
2013-07-27	Broadkam PJ871 – Authentication Bypass	webapps	hardware	d3c0der
2013-07-27	ASUS RT-AC66U – ‘acsd’ Remote Command Execution	remote	linux_mips	Jacob Holcomb
2013-07-27	Galil-RIO Modbus – Denial of Service	dos	hardware	Sapling
2013-07-26	xmonad XMonad.Hooks.DynamicLog Module – Multiple Remote Command Injection Vulnerabilities	remote	linux	Joachim Breitner
2013-07-25	Alienvault Open Source SIEM (OSSIM) – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	xistence
2013-07-24	vBulletin 4.0.2 – ‘update_order’ SQL Injection	webapps	php	n3tw0rk
2013-07-24	WordPress Plugin Duplicator – Cross-Site Scripting	webapps	php	High-Tech Bridge
2013-07-24	FOSCAM IP-Cameras – Improper Access Restrictions	webapps	hardware	Core Security
2013-07-24	Magnolia CMS – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	High-Tech Bridge
2013-07-23	Microsoft DirectShow – Arbitrary Memory Overwrite (MS13-056)	dos	windows	Andrés Gómez Ramírez
2013-07-23	XnView 2.03 – ‘.pct’ Buffer Overflow	dos	windows	Core Security
2013-07-23	Artweaver 3.1.5 – ‘.awd’ Buffer Overflow	dos	windows	Core Security
2013-07-23	VMware vCenter – Chargeback Manager ImageUploadServlet Arbitrary File Upload (Metasploit)	remote	windows	Metasploit
2013-07-23	Foreman (RedHat OpenStack/Satellite) – bookmarks/create Code Injection (Metasploit)	remote	linux	Metasploit
2013-07-23	D-Link Devices – UPnP SOAP Command Execution (Metasploit)	remote	hardware	Metasploit