Exploits

日期	标题	类型	平台	作者
2013-02-24	Linux Kernel 3.3 < 3.8 (Ubuntu / Fedora 18) - 'sock_diag_handlers()' Local Privilege Escalation (3)	local	linux	SynQ
2013-02-23	Microsoft Internet Explorer – SLayoutRun Use-After-Free (MS13-009) (Metasploit) (2)	remote	windows	Metasploit
2013-02-23	File Manager – HTML Injection / Local File Inclusion	webapps	php	Benjamin Kunz Mejri
2013-02-23	Photodex ProShow Producer – Multiple DLL Loading Arbitrary Code Execution Vulnerabilities	remote	windows	Julien Ahrens
2013-02-21	Alt-N MDaemon WorldClient 13.0.3 – Multiple Vulnerabilities	webapps	windows	QSecure & Demetris Papapetrou
2013-02-21	glFusion 1.2.2 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	High-Tech Bridge SA
2013-02-21	RTTucson Quotations Database Script – Authentication Bypass	webapps	php	cr4wl3r
2013-02-21	Alt-N MDaemon 12.5.6/13.0.3 – Email Body HTML/JS Injection	webapps	windows	QSecure & Demetris Papapetrou
2013-02-21	Web Cookbook – Multiple Vulnerabilities	webapps	php	cr4wl3r
2013-02-21	OpenEMR – ‘site’ Cross-Site Scripting	webapps	php	Gjoko Krstic
2013-02-21	PHPmyGallery 1.5 – Local File Disclosure / Cross-Site Scripting	webapps	php	TheMirkin
2013-02-21	PHPMyRecipes 1.2.2 – ‘viewrecipe.php?r_id’ SQL Injection	webapps	php	cr4wl3r
2013-02-20	ZenPhoto – ‘index.php’ SQL Injection	webapps	php	HosseinNsn
2013-02-20	WordPress Plugin Pretty Link – Cross-Site Scripting	webapps	php	hiphop
2013-02-20	CKEditor 4.0.1 – Multiple Vulnerabilities	webapps	php	AkaStep
2013-02-20	OpenEMR – Arbitrary ‘.PHP’ File Upload (Metasploit)	remote	php	Metasploit
2013-02-20	BigAnt Server 2.97 – DUPF Command Arbitrary File Upload (Metasploit)	remote	windows	Metasploit
2013-02-20	BigAnt Server 2.97 – SCH / DUPF Buffer Overflow (Metasploit)	remote	windows	Metasploit
2013-02-20	Microsoft Office 2010 – Download Execute	remote	windows	g11tch
2013-02-20	RTTucson Quotations Database – Multiple Vulnerabilities	webapps	php	3spi0n
2013-02-20	ZeroClipboard 1.9.x – ‘id’ Cross-Site Scripting	webapps	php	MustLive
2013-02-19	CKEditor – ‘posteddata.php’ Cross-Site Scripting	webapps	php	AkaStep
2013-02-19	Squirrelcart – ‘table’ Cross-Site Scripting	webapps	php	Gjoko Krstic
2013-02-19	Piwigo 2.4.6 – ‘/install.php’ Arbitrary File Read/Delete	webapps	php	LiquidWorm
2013-02-18	Scripts Genie Pet Rate Pro – Multiple Vulnerabilities	webapps	php	TheMirkin
2013-02-18	Alt-N MDaemon WorldClient And WebAdmin – Cross-Site Request Forgery	remote	windows	QSecure
2013-02-18	Netgear DGN2200B – Multiple Vulnerabilities	webapps	hardware	m-1-k-3
2013-02-18	MIMEsweeper For SMTP – Multiple Cross-Site Scripting Vulnerabilities	webapps	asp	Anastasios Monachos
2013-02-18	USB Sharp 1.3.4 iPad iPhone – Multiple Vulnerabilities	webapps	hardware	Vulnerability-Lab
2013-02-18	Scripts Genie Hot Scripts Clone – ‘showcategory.php?cid’ SQL Injection	webapps	php	Easy Laster
2013-02-18	Cometchat Application – Multiple Vulnerabilities	webapps	php	z3r0sPlOiT
2013-02-17	Scripts Genie Top Sites – ‘out.php?id’ SQL Injection	webapps	php	3spi0n
2013-02-17	Scripts Genie Domain Trader – ‘catalog.php?id’ SQL Injection	webapps	php	3spi0n
2013-02-17	SAP NetWeaver Message Server – Multiple Vulnerabilities	dos	windows	Core Security
2013-02-17	Scripts Genie Games Site Script – ‘index.php?id’ SQL Injection	webapps	php	3spi0n
2013-02-17	Scripts Genie Gallery Personals – ‘gallery.php?L’ SQL Injection	webapps	php	3spi0n
2013-02-15	ChillyCMS 1.3.0 – Multiple Vulnerabilities	webapps	php	Abhi M Balakrishnan
2013-02-15	Cometchat – Multiple Vulnerabilities	webapps	php	B127Y
2013-02-15	Photodex ProShow Producer 5.0.3297 – ‘.pxs’ Memory Corruption	local	windows	Julien Ahrens
2013-02-15	TP-Link TL-WA701N / TL-WA701ND – Multiple Vulnerabilities	webapps	hardware	m-1-k-3
2013-02-15	Edimax EW-7206-APg and EW-7209APg – Multiple Vulnerabilities	webapps	hardware	m-1-k-3
2013-02-14	OpenPLI 3.0 Beta (OpenPLi-beta-dm7000-20130127-272) – Multiple Vulnerabilities	webapps	hardware	m-1-k-3
2013-02-14	Transferable Remote 1.1 iPad iPhone – Multiple Vulnerabilities	webapps	hardware	Vulnerability-Lab
2013-02-14	SonicWALL Scrutinizer 9.5.2 – SQL Injection	webapps	windows	Vulnerability-Lab
2013-02-14	Microsoft Internet Explorer – SLayoutRun Use-After-Free (MS13-009) (Metasploit) (1)	remote	windows	Scott Bell
2013-02-14	Polycom HDX – Telnet Authentication Bypass (Metasploit)	remote	hardware	Paul Haas
2013-02-14	WordPress Plugin NextGEN Gallery – Full Path Disclosure	webapps	php	Henrique Montenegro
2013-02-14	Foxit Reader Plugin – URL Processing Buffer Overflow (Metasploit)	remote	windows	Metasploit
2013-02-14	Dell SonicWALL Scrutinizer – Multiple HTML Injection Vulnerabilities	remote	multiple	Benjamin Kunz Mejri
2013-02-14	Ultra Light Forum – Persistent Cross-Site Scripting	webapps	php	cr4wl3r