Exploits

日期	标题	类型	平台	作者
2013-05-26	Vanilla Forums 2.0.18.8 – Multiple Vulnerabilities	webapps	php	Henry Hoggard
2013-05-26	Trend Micro DirectPass 1.5.0.1060 – Multiple Software Vulnerabilities	dos	windows	Vulnerability-Lab
2013-05-26	Sony Playstation 3 (PS3) 4.31 – Save Game Preview ‘.SFO’ Handling Local Command Execution	local	hardware	Vulnerability-Lab
2013-05-26	AVE.CMS 2.09 – ‘index.php?module’ Blind SQL Injection	webapps	php	mr.pr0n
2013-05-26	HP LaserJet Pro P1606dn – Webadmin Password Reset	webapps	hardware	m3tamantra
2013-05-26	SAS Integration Technologies Client 9.31_M1 ‘SASspk.dll’ – Stack Overflow	dos	windows	LiquidWorm
2013-05-26	SIEMENS Solid Edge ST4/ST5 WebPartHelper – ActiveX RFMSsvs!JShellExecuteEx Remote Code Execution	remote	windows	rgod
2013-05-26	SIEMENS Solid Edge ST4/ST5 SEListCtrlX – ActiveX SetItemReadOnly Arbitrary Memory Rewrite Remote Code Execution	dos	windows	rgod
2013-05-26	RadioCMS 2.2 – ‘menager.php?playlist_id’ SQL Injection	webapps	php	Rooster(XEKA)
2013-05-26	AdobeCollabSync – Local Buffer Overflow / Adobe Reader X Sandbox Bypass (Metasploit)	local	windows	Metasploit
2013-05-26	WordPress Plugin Spider Catalog 1.4.6 – Multiple Vulnerabilities	webapps	php	waraxe
2013-05-26	WordPress Plugin Spider Event Calendar 1.3.0 – Multiple Vulnerabilities	webapps	php	waraxe
2013-05-24	Matterdaddy Market – Multiple Vulnerabilities	webapps	php	KedAns-Dz
2013-05-23	Weyal CMS – Multiple SQL Injections	webapps	php	XroGuE
2013-05-21	Microsoft Windows – Win32k!EPATHOBJ::pprFlattenRec Uninitialized Next Pointer Testcase	dos	windows	Tavis Ormandy
2013-05-21	D-Link DIR-615H – OS Command Injection (Metasploit)	remote	hardware	Metasploit
2013-05-21	Linksys WRT160N v2 – ‘apply.cgi’ Remote Command Injection (Metasploit)	remote	hardware	Metasploit
2013-05-21	Ophcrack 3.5.0 – Code Execution Local Buffer Overflow	local	windows	xis_one
2013-05-21	Kimai 0.9.2.1306-3 – SQL Injection	webapps	php	drone
2013-05-21	WordPress Plugin ProPlayer 4.7.9.1 – SQL Injection	webapps	php	Ashiyane Digital Security Team
2013-05-19	Acme thttpd HTTP Server – Directory Traversal	remote	linux	Metropolis
2013-05-18	Python RRDtool Module – Function Format String	remote	multiple	Thomas Pollet
2013-05-17	Exponent CMS 2.2.0 Beta 3 – Multiple Vulnerabilities	webapps	php	High-Tech Bridge SA
2013-05-17	Mutiny 5 – Arbitrary File Upload (Metasploit)	remote	linux	Metasploit
2013-05-17	Nginx 1.3.9 < 1.4.0 - Denial of Service (PoC)	dos	linux	Mert SARICA
2013-05-17	PHP-Charts 1.0 – Code Execution	webapps	php	fizzle stick
2013-05-17	Drupal Module CKEditor < 4.1WYSIWYG (Drupal 6.x/7.x) - Persistent Cross-Site Scripting	webapps	php	r0ng
2013-05-16	WordPress Plugin WP Cleanfix – Cross-Site Request Forgery	webapps	php	Enigma Ideas
2013-05-16	WordPress Plugin Mail On Update – Cross-Site Request Forgery	webapps	php	Henri Salo
2013-05-15	Serva 32 TFTP 2.1.0 – Buffer Overflow (Denial of Service) (PoC)	dos	windows	Sapling
2013-05-15	Jojo CMS – ‘x-forwarded-for’ HTTP header SQL Injection	webapps	php	High-Tech Bridge SA
2013-05-15	Jojo CMS – ‘search’ Cross-Site Scripting	webapps	php	High-Tech Bridge SA
2013-05-15	WordPress Plugin wp-FileManager – ‘path’ Arbitrary File Download	webapps	php	ByEge
2013-05-14	Invision Power Board 1.x?/2.x/3.x – Admin Takeover	webapps	php	John JEAN
2013-05-14	WordPress Plugin wp-FileManager – Arbitrary File Download	webapps	php	ByEge
2013-05-14	Linux Kernel < 3.8.x - open-time Capability 'file_ns_capable()' Local Privilege Escalation	local	linux	Andrew Lutomirski
2013-05-14	UMI CMS 2.9 – Cross-Site Request Forgery	webapps	php	High-Tech Bridge SA
2013-05-14	Alienvault Open Source SIEM (OSSIM) 4.1.2 – Multiple SQL Injections	webapps	php	RunRunLevel
2013-05-14	Open Flash Chart – ‘get-data’ Cross-Site Scripting	webapps	php	Deepankar Arora
2013-05-14	ERS Viewer 2011 – ‘.ERS’ File Handling Buffer Overflow (Metasploit)	local	windows	Metasploit
2013-05-14	SAP SOAP RFC – SXPG_CALL_SYSTEM Remote Command Execution (Metasploit)	remote	multiple	Metasploit
2013-05-14	SAP SOAP RFC – SXPG_COMMAND_EXECUTE Remote Command Execution (Metasploit)	remote	multiple	Metasploit
2013-05-14	Quick Search 1.1.0.189 – Buffer Overflow (SEH)	dos	windows	ariarat
2013-05-14	Linux Kernel 2.6.32 < 3.x (CentOS 5/6) - 'PERF_EVENTS' Local Privilege Escalation (1)	local	linux	sd
2013-05-14	Gallery Server Pro – Arbitrary File Upload	webapps	php	Drew Calcott
2013-05-14	WHMCS 4.x – ‘invoicefunctions.php?id’ SQL Injection	webapps	php	Ahmed Aboul-Ela
2013-05-13	Adrenalin Player 2.2.5.3 – ‘.m3u’ Local Buffer Overflow (SEH)	local	windows	seaofglass
2013-05-13	MiniWeb HTTP Server 300 – Crash (PoC)	dos	windows	dmnt
2013-05-13	File Lite 3.3/3.5 PRO iOS – Multiple Vulnerabilities	webapps	ios	Vulnerability-Lab
2013-05-13	SimpleTransfer 2.2.1 – Command Injection	webapps	hardware	Vulnerability-Lab