Exploits

日期	标题	类型	平台	作者
2013-06-30	Atomy Maxsite – ‘index.php’ Arbitrary File Upload	webapps	php	Iranian_Dark_Coders_Team
2013-06-30	YardRadius – Multiple Local Format String Vulnerabilities	local	windows	Hamid Zamani
2013-06-30	WordPress Plugin Xorbin Digital Flash Clock – ‘widgetUrl’ Cross-Site Scripting	webapps	php	Prakhar Prasad
2013-06-29	WordPress Plugin WP Private Messages – ‘msgid’ SQL Injection	webapps	php	IeDb ir
2013-06-29	Nameko – ‘nameko.php’ Cross-Site Scripting	webapps	php	Andrea Menin
2013-06-27	PCMan FTP Server 2.0.7 – Remote Buffer Overflow	remote	windows	Jacob Holcomb
2013-06-26	Motion – Multiple Vulnerabilities	remote	multiple	xistence
2013-06-26	Xaraya – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	High-Tech Bridge
2013-06-26	Oracle VM VirtualBox 4.0 – ‘tracepath’ Local Denial of Service	dos	multiple	Thomas Dreibholz
2013-06-26	FreeBSD 9 – Address Space Manipulation Privilege Escalation (Metasploit)	local	freebsd	Metasploit
2013-06-26	PHP-Charts 1.0 – ‘index.php?type’ Remote Code Execution	webapps	php	infodox
2013-06-26	Novell Client 2 SP3 – ‘nicm.sys’ Local Privilege Escalation (Metasploit)	local	windows_x86	Metasploit
2013-06-26	ZPanel zsudo – Local Privilege Escalation (Metasploit)	local	linux	Metasploit
2013-06-26	Baby FTP Server 1.24 – Denial of Service (1)	dos	windows	Chako
2013-06-26	e107 Advanced Medal System Plugin – SQL Injection	webapps	php	Life Wasted
2013-06-26	AudioCoder 0.8.22 – ‘.lst’ Direct RETN Buffer Overflow	local	windows	Onying
2013-06-25	Barnraiser Prairie – ‘get_file.php’ Directory Traversal	webapps	php	prairie
2013-06-24	ZPanel 10.0.0.2 htpasswd Module – ‘Username’ Command Execution (Metasploit)	remote	linux	Metasploit
2013-06-24	Mediacoder (.lst) – Local Buffer Overflow (SEH)	local	windows	metacom
2013-06-24	Novell Client 4.91 SP4 – ‘nwfs.sys’ Local Privilege Escalation (Metasploit)	local	windows	Metasploit
2013-06-24	Elemata CMS RC3.0 – ‘global.php?id’ SQL Injection	webapps	php	CWH Underground
2013-06-24	PodHawk 1.85 – Arbitrary File Upload	webapps	php	CWH Underground
2013-06-24	FtpLocate – HTML Injection	webapps	cgi	Chako
2013-06-24	Linksys X3000 1.0.03 build 001 – Multiple Vulnerabilities	webapps	hardware	m-1-k-3
2013-06-24	Seowonintech Devices – Remote Command Execution	remote	hardware	Todor Donev
2013-06-24	PEiD 0.95 – Memory Corruption (PoC)	dos	windows	Debasish Mandal
2013-06-24	Collabtive 1.0 – ‘manageuser.php’ SQL Injection	webapps	php	drone
2013-06-24	AudioCoder 0.8.22 – ‘.m3u’ Direct RETN Buffer Overflow	local	windows	Onying
2013-06-24	aSc Timetables 2013 – Local Stack Buffer Overflow	local	windows	Dark-Puzzle
2013-06-24	phpEventCalendar 0.2.3 – Multiple Vulnerabilities	webapps	php	AtT4CKxT3rR0r1ST
2013-06-24	Alienvault Open Source SIEM (OSSIM) 4.1 – Multiple SQL Injection Vulnerabilities	webapps	php	Glafkos Charalambous
2013-06-24	Top Games Script 1.2 – ‘play.php?gid’ SQL Injection	webapps	php	AtT4CKxT3rR0r1ST
2013-06-24	MoinMoin – twikidraw Action Traversal Arbitrary File Upload (Metasploit)	remote	linux	Metasploit
2013-06-24	Mediacoder PMP Edition 0.8.17 – ‘.m3u’ Local Buffer Overflow	local	windows	metacom
2013-06-24	LibrettoCMS File Manager – Arbitrary File Upload (Metasploit)	remote	php	Metasploit
2013-06-24	Mediacoder – ‘.m3u’ Local Buffer Overflow (SEH)	local	windows	metacom
2013-06-24	McAfee Data Loss Prevention – Multiple Information Disclosure Vulnerabilities	local	windows	Jamie Ooi
2013-06-24	HP System Management Homepage – JustGetSNMPQueue Command Injection (Metasploit)	remote	windows	Metasploit
2013-06-24	TRENDnet TE100-P1U Print Server Firmware 4.11 – Authentication Bypass	webapps	hardware	Chako
2013-06-21	FreeBSD 9.0 < 9.1 - 'mmap/ptrace' Local Privilege Escalation	local	freebsd	Hunger
2013-06-21	Adrenalin Player 2.2.5.3 – ‘.asx’ Local Buffer Overflow (SEH)	local	windows	Onying
2013-06-21	GLPI 0.83.8 – Multiple Vulnerabilities	webapps	php	LiquidWorm
2013-06-19	MusicBee 2.0.4663 – ‘.m3u’ Denial of Service	dos	windows	Chako
2013-06-19	Joomla! Component com_rokdownloads – Arbitrary File Upload	webapps	php	Am!r
2013-06-19	Monkey CMS – Multiple Vulnerabilities	webapps	php	Yashar shahinzadeh, Mormoroth
2013-06-19	TP-Link TL-PS110U Print Server – ‘tplink-enum.py’ Security Bypass	remote	hardware	SANTHO
2013-06-19	TP-Link PS110U Print Server TL – Sensitive Information Enumeration	remote	hardware	SANTHO
2013-06-19	imacs CMS 0.3.0 – Unrestricted Arbitrary File Upload	webapps	php	CWH Underground
2013-06-18	et-chat – Privilege Escalation / Arbitrary File Upload	webapps	php	MR.XpR
2013-06-17	Simple File Manager 024 – Authentication Bypass	webapps	php	Chako