Exploits

日期	标题	类型	平台	作者
2013-06-07	PHP Ticket System Beta 1 – Cross-Site Request Forgery	webapps	php	Pablo Ribeiro
2013-06-07	Microsoft Internet Explorer – textNode Use-After-Free (MS13-037) (Metasploit)	remote	windows	Scott Bell
2013-06-07	Asus RT56U 3.0.0.4.360 – Remote Command Injection	webapps	hardware	drone
2013-06-07	Ruubikcms 1.1.1 – Persistent Cross-Site Scripting	webapps	php	expl0i13r
2013-06-05	DS3 Authentication Server – Multiple Vulnerabilities	webapps	hardware	Pedro Andujar
2013-06-05	MiniUPnPd 1.0 – Remote Stack Buffer Overflow Remote Code Execution (Metasploit)	remote	linux	Metasploit
2013-06-05	Apple Mac OSX Server – DirectoryService Buffer Overflow	dos	osx	Core Security
2013-06-05	Ruubikcms 1.1.1 – ‘tinybrowser.php?folder’ Directory Traversal	webapps	php	expl0i13r
2013-06-05	PEStudio 3.69 – Denial of Service	dos	windows	Debasish Mandal
2013-06-05	Linux Kernel 3.0.5 – ‘test_root()’ Local Denial of Service	dos	linux	Jonathan Salwan
2013-06-05	Cuppa CMS – ‘/alertConfigField.php’ Local/Remote File Inclusion	webapps	php	CWH Underground
2013-06-05	Exim – ‘sender_address’ Remote Code Execution	remote	linux	eKKiM
2013-06-05	Netgear WPN824v3 – Unauthorized Configuration Download	webapps	hardware	Jens Regel
2013-06-05	Seowonintech Routers fw: 2.3.9 – File Disclosure	webapps	hardware	Todor Donev
2013-06-05	Xpient – Cash Drawer Operation	remote	hardware	Core Security
2013-06-05	QNAP VioStor NVR / QNAP NAS – Remote Code Execution	webapps	cgi	Tim Herres
2013-06-05	Plesk < 9.5.4 - Remote Command Execution	remote	php	kingcope
2013-06-05	Apache Struts – OGNL Expression Injection	remote	multiple	Jon Passki
2013-06-05	Apache Struts – includeParams Remote Code Execution (Metasploit)	remote	multiple	Metasploit
2013-06-05	Oracle WebCenter Content – ‘CheckOutAndOpen.dll’ ActiveX Remote Code Execution (Metasploit)	remote	windows	Metasploit
2013-06-05	Netgear DGN1000 / DGN2200 – Multiple Vulnerabilities	webapps	hardware	Roberto Paleari
2013-06-05	Imperva SecureSphere Operations Manager 9.0.0.5 – Multiple Vulnerabilities	webapps	jsp	Pedro Andujar
2013-06-04	Telaen 2.7.x – Cross-Site Scripting	webapps	php	Manuel García Cárdenas
2013-06-04	MongoDB – ‘conn’ Mongo Object Remote Code Execution	remote	multiple	SCRT Security
2013-06-04	CMS Gratis Indonesia – ‘config.php’ PHP Code Injection	webapps	php	CWH Underground
2013-06-04	Telaen 2.7.x – Open Redirection	webapps	php	Manuel García Cárdenas
2013-06-03	PHD Help Desk 2.12 – SQL Injection	webapps	php	drone
2013-06-03	Microsoft Windows NT/2000/2003/2008/XP/Vista/7/8 – ‘EPATHOBJ’ Local Ring	local	windows	Tavis Ormandy
2013-06-03	Telaen – Information Disclosure	webapps	php	Manuel García Cárdenas
2013-06-02	BOINC Manager (Seti@home) 7.0.64 – Field Buffer Overflow (SEH)	local	windows	xis_one
2013-05-31	ModSecurity – Remote Null Pointer Dereference	dos	multiple	Younes JAAIDI
2013-05-31	Lianja SQL 1.0.0RC5.1 – db_netserver Stack Buffer Overflow (Metasploit)	remote	windows	Metasploit
2013-05-31	PhpTax 0.8 – File Manipulation ‘newvalue’ / Remote Code Execution	webapps	php	CWH Underground
2013-05-30	Intrasrv Simple Web Server 1.0 – Remote Code Execution (SEH)	remote	windows	xis_one
2013-05-30	Logic Print 2013 – vTable Overwrite Stack Overflow	remote	windows	h1ch4m
2013-05-30	Monkey HTTPd 1.1.1 – Crash (PoC)	dos	linux	Doug Prostko
2013-05-29	Zavio IP Cameras Firmware 1.6.03 – Multiple Vulnerabilities	webapps	hardware	Core Security
2013-05-29	IBM SPSS SamplePower C1Tab – ActiveX Heap Overflow (Metasploit)	remote	windows	Metasploit
2013-05-29	MayGion IP Cameras Firmware 09.27 – Multiple Vulnerabilities	webapps	hardware	Core Security
2013-05-29	Code::Blocks – Denial of Service	dos	multiple	ariarat
2013-05-29	TP-Link IP Cameras Firmware 1.6.18P12 – Multiple Vulnerabilities	webapps	hardware	Core Security
2013-05-29	YeaLink IP Phone Firmware 9.70.0.100 – Phone Call	webapps	hardware	b0rh
2013-05-29	TP-Link WR842ND – Remote Multiple SSID Directory Traversals	webapps	hardware	Adam Simuntis
2013-05-29	CodeBlocks 12.11 (OSX) – Crash (PoC)	dos	osx	ariarat
2013-05-29	HostBill – ‘cpupdate.php’ Authentication Bypass	webapps	php	localhost.re
2013-05-28	Elastix – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	cheki
2013-05-28	Nginx 1.3.9 < 1.4.0 - Chuncked Encoding Stack Buffer Overflow (Metasploit)	remote	linux	Metasploit
2013-05-27	WordPress Plugin ADIF Log Search Widget – ‘logbook_search.php’ Cross-Site Scripting	webapps	php	k3170makan
2013-05-27	Barracuda SSL VPN 680 – ‘returnTo’ Open Redirection	remote	hardware	Chokri Ben Achor
2013-05-26	Trend Micro DirectPass 1.5.0.1060 – Multiple Software Vulnerabilities	dos	windows	Vulnerability-Lab