Exploits

日期	标题	类型	平台	作者
2013-04-26	D-Link DIR-635 – Multiple Vulnerabilities	webapps	hardware	m-1-k-3
2013-04-25	Belkin F5D8236-4 Router – Cross-Site Request Forgery	remote	hardware	Jacob Holcomb
2013-04-25	phpMyAdmin 3.5.8/4.0.0-RC2 – Multiple Vulnerabilities	webapps	php	waraxe
2013-04-25	Hornbill Supportworks ITSM 1.0.0 – SQL Injection	webapps	php	Joseph Sheridan
2013-04-25	GroundWork – ‘monarch_scan.cgi’ OS Command Injection (Metasploit)	remote	linux	Metasploit
2013-04-25	Light HTTPd 0.1 (Windows) – Remote Buffer Overflow	remote	windows	Jacob Holcomb
2013-04-25	SAP ConfigServlet – Remote Payload Execution (Metasploit)	remote	windows	Andras Kabai
2013-04-24	WordPress Plugin WP Super Cache – PHP Remote Code Execution	webapps	php	anonymous
2013-04-24	TP-Link TL-WR1043N Router – Cross-Site Request Forgery	remote	hardware	Jacob Holcomb
2013-04-23	Cisco Linksys WRT310N Router – Multiple Denial of Service Vulnerabilities	dos	hardware	Carl Benedict
2013-04-23	SMF – ‘/index.php’ HTML Injection / Multiple PHP Code Injection Vulnerabilities	webapps	php	Jakub Galczyk
2013-04-23	Java Applet – Reflection Type Confusion Remote Code Execution (Metasploit)	remote	multiple	Metasploit
2013-04-23	D-Link DIR-615 Rev D3 / DIR-300 Rev A – Multiple Vulnerabilities	webapps	hardware	m-1-k-3
2013-04-22	VoipNow 2.5 – Local File Inclusion	webapps	php	i-Hmx
2013-04-22	Joomla! Component com_civicrm 4.2.2 – Remote Code Injection	webapps	php	iskorpitx
2013-04-22	Mikrotik Syslog Server for Windows 1.15 – Denial of Service (Metasploit)	dos	windows	xis_one
2013-04-22	Netgear DGN2200B – ‘pppoe.cgi’ Remote Command Execution (Metasploit)	remote	hardware	Metasploit
2013-04-22	Flightgear 2.0/2.4 – Remote Format String	dos	windows	Kurono
2013-04-21	WordPress Theme Colormix – Multiple Vulnerabilities	webapps	php	MustLive
2013-04-19	Crafty Syntax Live Help 3.1.2 – Remote File Inclusion / Full Path Disclosure	webapps	php	ITTIHACK
2013-04-19	D-Link DIR-865L – Cross-Site Request Forgery	remote	hardware	Jacob Holcomb
2013-04-19	Nginx 0.6.x – Arbitrary Code Execution NullByte Injection	webapps	multiple	Neal Poole
2013-04-19	TP-Link TL-WR741N / TL-WR741ND Routers – Multiple Denial of Service Vulnerabilities	dos	hardware	W1ckerMan
2013-04-18	Fork CMS – ‘js.php’ Local File Inclusion	webapps	php	Rafay Baloch
2013-04-18	Java Web Start Launcher ActiveX Control – Memory Corruption	dos	windows	SEC Consult
2013-04-18	KrisonAV CMS 3.0.1 – Multiple Vulnerabilities	webapps	php	High-Tech Bridge SA
2013-04-18	Oracle WebCenter Sites Satellite Server – HTTP Header Injection	webapps	windows	SEC Consult
2013-04-18	SAP ConfigServlet – OS Command Execution (Metasploit)	remote	multiple	Andras Kabai
2013-04-18	Foxit Reader 5.4.3.x < 5.4.5.0124 - PDF XREF Parsing Denial of Service	dos	windows	FuzzMyApp
2013-04-17	Sosci Survey – Multiple Vulnerabilities	webapps	php	T. Lazauninkas
2013-04-17	FirePHP Firefox Plugin 0.7.1 – Remote Command Execution	remote	windows	Wireghoul
2013-04-16	ZPanel – ‘templateparser.class.php’ Crafted Template Remote Command Execution	webapps	php	Sven Slootweg
2013-04-16	Pwstore – Denial of Service	dos	windows	Josep Pi Rodriguez
2013-04-15	phpVms Virtual Airline Administration 2.1.934/2.1.935 – SQL Injection	webapps	php	NoGe
2013-04-15	CMSLogik 1.2.1 – Multiple Vulnerabilities	webapps	php	LiquidWorm
2013-04-15	MinaliC WebServer 2.0.0 – Remote Buffer Overflow	remote	windows	superkojiman
2013-04-15	Vanilla Forums Van2Shout Plugin 1.0.51 – Multiple Cross-Site Request Forgery Vulnerabilities	webapps	php	Henry Hoggard
2013-04-15	Linux Kernel 3.2.1 – Tracing Multiple Local Denial of Service Vulnerabilities	dos	linux	anonymous
2013-04-15	Cisco Linksys EA2700 Router – Multiple Vulnerabilities	remote	hardware	Phil Purviance
2013-04-14	Todoo Forum 2.0 – ‘todooforum.php’ Multiple SQL Injections	webapps	php	Chiekh Bouchenafa
2013-04-14	Todoo Forum 2.0 – ‘todooforum.php’ Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Chiekh Bouchenafa
2013-04-13	Aibolit – Information Disclosure	webapps	multiple	MustLive
2013-04-12	Nagios Remote Plugin Executor – Arbitrary Command Execution (Metasploit)	remote	linux	Metasploit
2013-04-12	Free Monthly Websites 2.0 – Admin Password Change	webapps	php	Yassin Aboukir
2013-04-12	Allied Telesyn TFTP (AT-TFTP) Server/Daemon 2.0 – Stack Buffer Overflow (Denial of Service) (PoC)	dos	windows	xis_one
2013-04-12	ircd-hybrid 8.0.5 – Denial of Service	dos	linux	kingcope
2013-04-12	KNet Web Server 1.04b – Stack Corruption Buffer Overflow	remote	windows	Wireghoul
2013-04-12	D-Link DIR-645 / DIR-815 – ‘diagnostic.php’ Command Execution (Metasploit)	remote	hardware	Metasploit
2013-04-12	Simple HRM System 2.3 – Multiple Vulnerabilities	webapps	php	Doraemon
2013-04-11	Request Tracker – ‘ShowPending’ SQL Injection	webapps	php	cheki