Exploits

日期	标题	类型	平台	作者
2013-07-10	Mintboard – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Canberk BOLAT
2013-07-10	iVote – ‘details.php’ SQL Injection	webapps	php	Ashiyane Digital Security Team
2013-07-10	Zoom Telephonics X4/X5 ADSL Modem – Multiple Vulnerabilities	webapps	hardware	Kyle Lovett
2013-07-10	vBulletin vBShout Mod – Persistent Cross-Site Scripting	webapps	php	[]0iZy5
2013-07-10	vBulletin Advanced User Tagging Mod – Persistent Cross-Site Scripting	webapps	php	[]0iZy5
2013-07-10	Jolix Media Player 1.1.0 – ‘.m3u’ Denial of Service	dos	windows	IndonesiaGokilTeam
2013-07-09	Apache CXF < 2.5.10/2.6.7/2.7.4 - Denial of Service	dos	multiple	SEC Consult
2013-07-09	Solaris Recommended Patch Cluster 6/19 (x86) – Local Privilege Escalation	local	linux_x86	Larry W. Cashdollar
2013-07-09	ERS Viewer 2013 – ‘.ERS’ File Handling Buffer Overflow (Metasploit)	local	windows	Metasploit
2013-07-09	Cisco WebEx One-Click Client Password Encryption – Information Disclosure	local	windows	Brad Antoniewicz
2013-07-09	Air Drive Plus – Multiple Input Validation Vulnerabilities	remote	ios	Benjamin Kunz Mejri
2013-07-09	Zoom Telephonics (Multiple Devices) – Multiple Vulnerabilities	remote	hardware	Kyle Lovett
2013-07-08	Adobe Reader X 10.1.4.38 – ‘.BMP’/’.RLE’ Heap Corruption	local	windows	feliam
2013-07-07	OpenNetAdmin 13.03.01 – Remote Code Execution	webapps	php	Mandat0ry
2013-07-07	D-Link – OS-Command Injection via UPnP Interface	webapps	hardware	m-1-k-3
2013-07-06	phpVibe 3.1 – Information Disclosure / Remote File Inclusion	webapps	php	indoushka
2013-07-05	OpenX 2.8.10 – Multiple Vulnerabilities	webapps	php	High-Tech Bridge SA
2013-07-05	Kasseler CMS 2 r1223 – Multiple Vulnerabilities	webapps	php	High-Tech Bridge SA
2013-07-05	InstantCMS 1.6 – PHP Remote Code Execution (Metasploit)	remote	php	Metasploit
2013-07-05	Mobile Atlas Creator 1.9.12 – Persistent Command Injection	webapps	multiple	Vulnerability-Lab
2013-07-03	ABBS Audio Media Player – ‘.LST’ Local Buffer Overflow (Metasploit)	local	windows	Metasploit
2013-07-03	Realtek Sound Manager AvRack – ‘.wav’ Crash (PoC)	dos	windows	Asesino04
2013-07-03	Google Android – ‘APK’ code Remote Security Bypass	remote	android	Bluebox Security
2013-07-02	Machform Form Maker 2 – Multiple Vulnerabilities	webapps	php	Yashar shahinzadeh
2013-07-02	WordPress Plugin Category Grid View Gallery – ‘ID’ Cross-Site Scripting	webapps	php	Iranian Exploit DataBase
2013-07-02	WordPress Plugin WP Feed – ‘nid’ SQL Injection	webapps	php	Iranian Exploit DataBase
2013-07-02	RealNetworks RealPlayer – Denial of Service	dos	multiple	Akshaysinh Vaghela
2013-07-02	Intelligent Platform Management Interface – Information Disclosure	remote	multiple	Dan Farmer
2013-07-02	Winamp 5.63 – Stack Buffer Overflow	dos	windows	Julien Ahrens
2013-07-02	Winamp 5.63 – Invalid Pointer Dereference	dos	windows	Julien Ahrens
2013-07-02	Opera 12.15 – vtable Corruption	dos	windows	echo
2013-07-02	Microsoft Windows – ‘EPATHOBJ::pprFlattenRec’ Local Privilege Escalation (Metasploit)	local	windows	Metasploit
2013-07-01	GLPI 0.83.9 – ‘Unserialize()’ Remote Code Execution	webapps	php	Xavier Mehrenberger
2013-07-01	Java Applet – ProviderSkeleton Insecure Invoke Method (Metasploit)	remote	multiple	Metasploit
2013-07-01	Fortigate Firewalls – Cross-Site Request Forgery	webapps	hardware	Sven Wurth
2013-07-01	libvirt – ‘virConnectListAllInterfaces’ Method Denial of Service	dos	linux	Daniel P. Berrange
2013-07-01	Barracuda SSL VPN 680Vx 2.3.3.193 – Multiple Script Injection Vulnerabilities	webapps	hardware	LiquidWorm
2013-07-01	VideoLAN VLC Media Player 2.0.7 – ‘.png’ Crash (PoC)	dos	windows	Kevin Fujimoto
2013-07-01	Adrenalin Player 2.2.5.3 – ‘.wvx’ Local Buffer Overflow (SEH)	local	windows	MrXors
2013-07-01	AudioCoder (.lst) – Local Buffer Overflow (Metasploit)	local	windows	Asesino04
2013-07-01	C.P.Sub 4.5 – Authentication Bypass	webapps	php	Chako
2013-07-01	Static HTTP Server 1.0 – Local Overflow (SEH)	local	windows	Jacob Holcomb
2013-07-01	AVS Media Player 4.1.11.100 – ‘.ac3’ Denial of Service	dos	windows	metacom
2013-07-01	Microsoft PowerPoint 2007 – Crash (PoC)	dos	windows	Asesino04
2013-07-01	FileCOPA FTP Server – Remote Denial of Service	dos	multiple	Chako
2013-06-30	WordPress Plugin Xorbin Analog Flash Clock – ‘widgetUrl’ Cross-Site Scripting	webapps	php	Prakhar Prasad
2013-06-30	Atomy Maxsite – ‘index.php’ Arbitrary File Upload	webapps	php	Iranian_Dark_Coders_Team
2013-06-30	YardRadius – Multiple Local Format String Vulnerabilities	local	windows	Hamid Zamani
2013-06-30	WordPress Plugin Xorbin Digital Flash Clock – ‘widgetUrl’ Cross-Site Scripting	webapps	php	Prakhar Prasad
2013-06-30	eFile Wifi Transfer Manager 1.0 – Multiple Vulnerabilities	webapps	hardware	Vulnerability-Lab