Exploits

日期	标题	类型	平台	作者
2013-02-14	Microsoft Internet Explorer – SLayoutRun Use-After-Free (MS13-009) (Metasploit) (1)	remote	windows	Scott Bell
2013-02-14	Polycom HDX – Telnet Authentication Bypass (Metasploit)	remote	hardware	Paul Haas
2013-02-13	OpenEMR 4.1.1 – ‘ofc_upload_image.php’ Arbitrary File Upload	webapps	php	LiquidWorm
2013-02-12	Novell Groupwise Client – ‘gwcls1.dll’ ActiveX Remote Code Execution (Metasploit)	remote	windows	Metasploit
2013-02-12	Sonar – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	DevilTeam
2013-02-12	VMware OVF Tools – Format String (Metasploit) (2)	remote	windows	Metasploit
2013-02-12	BlackNova Traders – ‘news.php’ SQL Injection	webapps	php	ITTIHACK
2013-02-12	osCommerce – Cross-Site Request Forgery	webapps	php	Jakub Galczyk
2013-02-11	cURL – Buffer Overflow (PoC)	dos	linux	Volema
2013-02-11	Google Chrome – Silent HTTP Authentication	dos	multiple	T355
2013-02-11	Microsoft Windows – HWND_BROADCAST (PoC) (MS13-005)	dos	windows	0vercl0k
2013-02-11	Air Disk Wireless 1.9 iPad iPhone – Multiple Vulnerabilities	webapps	hardware	Vulnerability-Lab
2013-02-11	TP-Link – Admin Panel Multiple Cross-Site Request Forgery Vulnerabilities	webapps	hardware	CYBSEC Labs
2013-02-11	IP.Gallery 4.2.x/5.0.x – Persistent Cross-Site Scripting	webapps	php	Mohamed Ramadan
2013-02-11	IRIS Citations Management Tool – (Authenticated) Remote Command Execution	webapps	php	aeon
2013-02-11	Freefloat FTP Server 1.0 – ‘Raw’ Remote Buffer Overflow	remote	windows	superkojiman
2013-02-11	Linksys WRT160N – Multiple Vulnerabilities	webapps	hardware	m-1-k-3
2013-02-11	D-Link DIR-615 Rev H – Multiple Vulnerabilities	webapps	hardware	m-1-k-3
2013-02-11	Linksys WAG200G – Multiple Vulnerabilities	webapps	hardware	m-1-k-3
2013-02-11	Linksys E1500/E2500 – Multiple Vulnerabilities	webapps	hardware	m-1-k-3
2013-02-10	KMPlayer – Denial of Service	dos	windows	Jigsaw
2013-02-10	Schneider Electric Accutech Manager – Heap Overflow (PoC)	dos	windows	Evren Yalçın
2013-02-10	Easy Live Shop System – SQL Injection	webapps	php	Ramdan Yantu
2013-02-09	WordPress Theme Pinboard – ‘tab’ Cross-Site Scripting	webapps	php	Henrique Montenegro
2013-02-08	TP-Link TL-WR2543ND Router – Admin Panel Multiple Cross-Site Request Forgery Vulnerabilities	remote	hardware	Juan Manuel Garcia
2013-02-07	ActFax 5.01 – RAW Server (Metasploit)	remote	windows	Craig Freyman
2013-02-07	WirelessFiles 1.1 iPad iPhone – Multiple Vulnerabilities	webapps	hardware	Vulnerability-Lab
2013-02-07	CubeCart 5.2.0 – ‘cubecart.class.php’ PHP Object Injection	webapps	php	EgiX
2013-02-07	Netgear DGN1000B – Multiple Vulnerabilities	webapps	hardware	m-1-k-3
2013-02-07	Cool PDF Reader 3.0.2.256 – Buffer Overflow	dos	windows	Chris Gabriel
2013-02-06	Verax NMS – Multiple Method Authentication Bypass	webapps	multiple	Andrew Brooks
2013-02-06	xNBD – ‘/tmp/xnbd.log’ Insecure Temporary File Handling	local	linux	Sebastian Pipping
2013-02-06	WordPress Plugin Wysija Newsletters – Multiple SQL Injections	webapps	php	High-Tech Bridge
2013-02-06	WordPress Plugin CommentLuv – ‘_ajax_nonce’ Cross-Site Scripting	webapps	php	High-Tech Bridge
2013-02-06	Hiverr 2.2 – Multiple Vulnerabilities	webapps	php	xStarCode
2013-02-06	ezStats for Battlefield 3 – ‘/ezStats2/compare.php’ Multiple Cross-Site Scripting Vulnerabilities	webapps	php	L0n3ly-H34rT
2013-02-06	ezStats2 – ‘style.php’ Local File Inclusion	webapps	php	L0n3ly-H34rT
2013-02-06	VMware OVF Tools – Format String (Metasploit) (1)	remote	windows	Metasploit
2013-02-05	AdaptCMS 2.0.4 – ‘config.php?question’ SQL Injection	webapps	php	kallimero
2013-02-05	ArrowChat 1.5.61 – Multiple Vulnerabilities	webapps	php	kallimero
2013-02-05	FreeBSD 9.1 – ‘ftpd’ Remote Denial of Service	dos	freebsd	Maksymilian Arciemowicz
2013-02-05	Cisco Unity Express – Multiple Vulnerabilities	webapps	jsp	Jacob Holcomb
2013-02-05	Opera SVG – Use-After-Free	dos	windows	Cons0ul
2013-02-05	Linux Kernel 2.6.32-5 (Debian 6.0.5) – ‘/dev/ptmx’ Key Stroke Timing Local Disclosure	local	linux	vladz
2013-02-05	Oracle Automated Service Manager 1.3 – Installation Privilege Escalation	local	linux	Larry W. Cashdollar
2013-02-05	Glossword 1.8.3 – SQL Injection	webapps	php	AkaStep
2013-02-05	glossword 1.8.12 – Multiple Vulnerabilities	webapps	php	AkaStep
2013-02-05	Portable UPnP SDK – ‘unique_service_name()’ Remote Code Execution (Metasploit)	remote	unix	Metasploit
2013-02-05	Free Monthly Websites 2.0 – Multiple Vulnerabilities	webapps	php	X-Cisadane
2013-02-05	D-Link DIR-600 / DIR-300 (Rev B) – Multiple Vulnerabilities	webapps	hardware	m-1-k-3