Exploits

日期	标题	类型	平台	作者
2013-03-23	Jaow CMS – ‘add_ons’ Cross-Site Scripting	webapps	php	Metropolis
2013-03-22	OpenCart 1.5.5.1 – ‘FileManager.php’ Directory Traversal Arbitrary File Access	webapps	php	waraxe
2013-03-22	Cool PDF Image Stream – Remote Buffer Overflow (Metasploit)	remote	windows	Metasploit
2013-03-22	Sami FTP Server – ‘LIST’ Buffer Overflow (Metasploit)	remote	windows	Metasploit
2013-03-22	Apache Struts – ‘ParametersInterceptor’ Remote Code Execution (Metasploit)	remote	multiple	Metasploit
2013-03-22	Stradus CMS 1.0beta4 – Multiple Vulnerabilities	webapps	php	DaOne
2013-03-22	Photodex ProShow Gold/Producer 5.0.3310/6.0.3410 – ‘ScsiAccess.exe’ Local Privilege Escalation	local	windows	Julien Ahrens
2013-03-22	Slash CMS – Multiple Vulnerabilities	webapps	php	DaOne
2013-03-22	Flatnux CMS 2013-01.17 – ‘index.php’ Local File Inclusion	webapps	php	DaOne
2013-03-22	AContent 1.3 – Local File Inclusion	webapps	php	DaOne
2013-03-22	WordPress Plugin IndiaNIC FAQs Manager 1.0 – Blind SQL Injection	webapps	php	m3tamantra
2013-03-22	WordPress Plugin IndiaNIC FAQs Manager 1.0 – Multiple Vulnerabilities	webapps	php	m3tamantra
2013-03-22	TP-Link TL-WR740N Wireless Router – Denial of Service	dos	hardware	LiquidWorm
2013-03-22	GnuTLS libgnutls – Double-Free Certificate List Parsing Remote Denial of Service	dos	linux	Shawn the R0ck
2013-03-22	StarVedia IPCamera IC502w IC502w+ v020313 – ‘Username’/Password Disclosure	webapps	hardware	Todor Donev
2013-03-20	EastFTP 4.6.02 – ActiveX Control	local	windows	Dr_IDE
2013-03-19	ViewGit 0.0.6 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Matthew R. Bucci
2013-03-19	BlazeVideo HDTV Player Standard – ‘.plf’ File Remote Buffer Overflow	remote	windows	metacom
2013-03-19	Rebus:list – ‘list.php?list_id’ SQL Injection	webapps	php	Robert Cooper
2013-03-19	WordPress Plugin Occasions – Cross-Site Request Forgery	webapps	php	m3tamantra
2013-03-19	Verizon Fios Router MI424WR-GEN3I – Cross-Site Request Forgery	webapps	hardware	Jacob Holcomb
2013-03-19	WordPress Plugin Count Per Day 3.2.5 – ‘counter.php’ Cross-Site Scripting	webapps	php	m3tamantra
2013-03-19	WordPress Plugin Occasions 1.0.4 – Cross-Site Request Forgery	webapps	php	m3tamantra
2013-03-18	Joomla! Component com_rsfiles – ‘cid’ SQL Injection	webapps	php	ByEge
2013-03-18	WordPress Plugin Simply Poll 1.4.1 – Multiple Vulnerabilities	webapps	php	m3tamantra
2013-03-18	DaloRadius – Multiple Vulnerabilities	webapps	php	Saadi Siddiqui
2013-03-15	aktiv-player 2.9.0 – Crash (PoC)	dos	windows	metacom
2013-03-15	ClipShare 4.1.4 – Multiple Vulnerabilities	webapps	php	AkaStep
2013-03-15	Open-Xchange Server 6 – Multiple Vulnerabilities	webapps	java	Martin Braun
2013-03-15	WordPress Plugin LeagueManager 3.8 – SQL Injection	webapps	php	Joshua Reynolds
2013-03-15	Nitro Pro 8.0.3.1 – Crash (PoC)	dos	windows	John Cobb
2013-03-15	Cisco Video Surveillance Operations Manager 6.3.2 – Multiple Vulnerabilities	webapps	jsp	Bassem
2013-03-14	Petite Annonce – Cross-Site Scripting	webapps	php	Metropolis
2013-03-13	Honeywell HSC Remote Deployer – ActiveX Remote Code Execution (Metasploit)	remote	windows	Metasploit
2013-03-13	Apache Rave 0.11 < 0.20 - User Information Disclosure	webapps	multiple	Andreas Guth
2013-03-13	Cam2pc 4.6.2 – ‘.BMP’ Image Processing Integer Overflow	dos	windows	coolkaveh
2013-03-13	Web Cookbook – Multiple SQL Injections	webapps	php	Saadat Ullah
2013-03-13	TagScanner 5.1 – Stack Buffer Overflow (PoC)	dos	windows	Vulnerability-Lab
2013-03-13	Linux Kernel 3.0 < 3.3.5 - 'CLONE_NEWUSER|CLONE_FS' Local Privilege Escalation	local	linux	Sebastian Krahmer
2013-03-13	Cisco Video Surveillance Operations Manager – Multiple Vulnerabilities	remote	hardware	b.saleh
2013-03-13	QlikView – ‘.qvw’ File Remote Integer Overflow	remote	windows	A. Antukh
2013-03-13	Linux Kernel – ‘SCTP_GET_ASSOC_STATS()’ Stack Buffer Overflow (PoC)	dos	linux	Petr Matousek
2013-03-13	Linux Kernel 3.7.10 (Ubuntu 12.10 x64) – ‘sock_diag_handlers’ Local Privilege Escalation (2)	local	linux_x86-64	Kacper Szczesniak
2013-03-12	RubyGems fastreader – ‘entry_controller.rb’ Remote Command Execution	remote	multiple	Larry W. Cashdollar
2013-03-12	Microsoft Silverlight – ScriptObject Unsafe Memory Access (MS13-022/MS13-087) (Metasploit)	local	windows	Metasploit
2013-03-11	Privoxy Proxy – Authentication Information Disclosure	webapps	php	Chris John Riley
2013-03-11	WordPress Plugin podPress – ‘playerID’ Cross-Site Scripting	webapps	php	hiphop
2013-03-11	PHPBoost – Arbitrary File Upload / Information Disclosure	webapps	php	KedAns-Dz
2013-03-11	KindEditor – Multiple Arbitrary File Upload Vulnerabilities	webapps	php	KedAns-Dz
2013-03-10	Asteriskguru Queue Statistics – ‘warning’ Cross-Site Scripting	webapps	php	Manuel García Cárdenas