Exploits

日期	标题	类型	平台	作者
2013-06-17	BloofoxCMS – ‘index.php’ Arbitrary File Upload	webapps	php	CWH Underground
2013-06-17	Winamp 5.12 – ‘.m3u’ Local Stack Buffer Overflow	local	windows	superkojiman
2013-06-17	SPBAS Business Automation Software 2012 – Multiple Vulnerabilities	webapps	php	Christy Philip Mathew
2013-06-17	Havalite CMS 1.1.7 – Unrestricted Arbitrary File Upload	webapps	php	CWH Underground
2013-06-17	Adrenalin Player 2.2.5.3 – ‘.wax’ Local Buffer Overflow (SEH)	local	windows	Onying
2013-06-17	Fly-High CMS 2012-07-08 – Unrestricted Arbitrary File Upload	webapps	php	CWH Underground
2013-06-17	WordPress Plugin Ultimate WordPress Auction Plugin 1.0 – Cross-Site Request Forgery	webapps	php	expl0i13r
2013-06-15	TaxiMonger for Android – ‘name’ HTML Injection	remote	android	Ismail Kaleem
2013-06-15	ZamFoo – ‘date’ Remote Command Injection	webapps	php	localhost.re
2013-06-14	Monkey HTTP Daemon Mandril Security Plugin – Security Bypass	remote	multiple	felipensp
2013-06-14	Easy LAN Folder Share 3.2.0.100 – Buffer Overflow	dos	windows	ariarat
2013-06-14	LibrettoCMS 2.2.2 – Arbitrary File Upload	webapps	php	CWH Underground
2013-06-13	Microsoft Internet Explorer – COALineDashStyleArray Integer Overflow (MS13-009) (Metasploit)	remote	windows	Metasploit
2013-06-13	Airlive IP Cameras – Multiple Vulnerabilities	webapps	hardware	Sánchez, Lopez, Castillo
2013-06-13	AXIS Media Control 6.2.10.11 – Unsafe ActiveX Method	dos	windows	Javier Repiso Sánchez
2013-06-12	WordPress Plugin NextGEN Gallery – ‘upload.php’ Arbitrary File Upload	webapps	php	Marcos Garcia
2013-06-12	Grandstream Multiple IP Cameras – Cross-Site Request Forgery	remote	hardware	Castillo
2013-06-12	Sony CH / DH Series IP Cameras – Multiple Cross-Site Request Forgery Vulnerabilities	remote	hardware	Castillo
2013-06-12	Brickcom Multiple IP Cameras – Cross-Site Request Forgery	remote	hardware	Castillo
2013-06-12	Ubiquiti airCam RTSP Service 1.1.5 – Buffer Overflow (PoC)	dos	hardware	Core Security
2013-06-12	Syslog Server 1.2.3 – Crash (PoC)	dos	windows	npn
2013-06-11	Java Applet – Driver Manager Privileged ‘toString()’ Remote Code Execution (Metasploit)	remote	multiple	Metasploit
2013-06-11	Synactis PDF In-The-Box – ConnectToSynactic Stack Buffer Overflow (Metasploit)	remote	windows	Metasploit
2013-06-11	Sami FTP Server 2.0.1 – RETR Denial of Service	dos	windows	Chako
2013-06-11	mkCMS – ‘index.php’ Arbitrary PHP Code Execution	webapps	php	CWH Underground
2013-06-11	Fobuc Guestbook 0.9 – SQL Injection	webapps	php	CWH Underground
2013-06-11	Linux Kernel < 3.8.9 (x86-64) - 'perf_swevent_init' Local Privilege Escalation (2)	local	linux_x86-64	Andrea Bittau
2013-06-11	WinRadius 2.11 – Denial of Service	dos	windows	npn
2013-06-11	Buffalo WZR-HP-G300NH2 – Cross-Site Request Forgery	webapps	hardware	Prayas Kulshrestha
2013-06-11	NanoBB 0.7 – Multiple Vulnerabilities	webapps	php	CWH Underground
2013-06-11	Weathermap 0.97c – ‘mapname’ Local File Inclusion	webapps	php	Anthony Dubuissez
2013-06-11	WordPress Plugin WP-SendSms 1.0 – Multiple Vulnerabilities	webapps	php	expl0i13r
2013-06-11	Java – Web Start Double Quote Injection Remote Code Execution (Metasploit)	remote	multiple	Rh0
2013-06-11	Simple PHP Agenda 2.2.8 – ‘edit_event.php?eventid’ SQL Injection	webapps	php	Anthony Dubuissez
2013-06-10	ScriptCase – ‘scelta_categoria.php’ SQL Injection	webapps	php	Hossein Hezami
2013-06-10	Lokboard – ‘index_4.php’ PHP Code Injection	webapps	php	CWH Underground
2013-06-10	HP Insight Diagnostics 9.4.0.4710 – Local File Inclusion	webapps	php	Markus Wulftange
2013-06-10	Cisco ASA < 8.4.4.6 < 8.2.5.32 - Ethernet Information Leak	dos	hardware	prdelka
2013-06-10	HP Insight Diagnostics – Remote Code Injection	webapps	php	Markus Wulftange
2013-06-10	Concrete5 CMS 5.6.1.2 – Multiple Vulnerabilities	webapps	php	expl0i13r
2013-06-10	Resin Application Server 4.0.36 – Source Code Disclosure	webapps	jsp	LiquidWorm
2013-06-10	MobileIron Virtual Smartphone Platform – Privilege Escalation	remote	hardware	prdelka
2013-06-09	WordPress Theme Ambience – ‘src’ Cross-Site Scripting	webapps	php	Darksnipper
2013-06-09	Max Forum – Multiple Vulnerabilities	webapps	php	CWH Underground
2013-06-07	Novell ZENworks Mobile Device Managment 2.6.1/2.7.0 – Local File Inclusion (Metasploit)	webapps	windows	Metasploit
2013-06-07	AfterLogic WebMail Lite PHP 7.0.1 – Cross-Site Request Forgery	webapps	php	Pablo Ribeiro
2013-06-07	PHP Ticket System Beta 1 – Cross-Site Request Forgery	webapps	php	Pablo Ribeiro
2013-06-07	Microsoft Internet Explorer – textNode Use-After-Free (MS13-037) (Metasploit)	remote	windows	Scott Bell
2013-06-07	Asus RT56U 3.0.0.4.360 – Remote Command Injection	webapps	hardware	drone
2013-06-07	Ruubikcms 1.1.1 – Persistent Cross-Site Scripting	webapps	php	expl0i13r