Exploits

日期	标题	类型	平台	作者
2012-12-13	Facebook Profile MyBB Plugin 2.4 – Persistent Cross-Site Scripting	webapps	php	limb0
2012-12-12	Axway Secure Transport 5.1 SP2 – Directory Traversal	webapps	windows	Sebastian Perez
2012-12-12	Novell File Reporter (NFR) Agent – XML Parsing Remote Code Execution	remote	windows	Abysssec
2012-12-12	TipsOfTheDay MyBB Plugin – Multiple Vulnerabilities	webapps	php	VipVince
2012-12-12	Microsoft Internet Explorer 6 < 10 - Mouse Tracking	remote	windows	Nick Johnson
2012-12-11	HP Data Protector – DtbClsLogin Buffer Overflow (Metasploit)	remote	windows	Metasploit
2012-12-11	PHP-Nuke 8.2.4 – Cross-Site Request Forgery	webapps	php	sajith
2012-12-11	IrfanView 4.33 – ‘IMXCF.dll’ Plugin Code Execution	dos	windows	beford
2012-12-11	MyBB Profile Blogs Plugin 1.2 – Multiple Vulnerabilities	webapps	php	Zixem
2012-12-11	Joomla! Component com_jooproperty 1.13.0 – Multiple Vulnerabilities	webapps	php	D4NB4R
2012-12-11	MyBB Bank- 3 Plugin – SQL Injection	webapps	php	Red_Hat
2012-12-10	FreeVimager 4.1.0 – Crash (PoC)	dos	windows	Jean Pascal Pereira
2012-12-10	DIMIN Viewer 5.4.0 – Crash (PoC)	dos	windows	Jean Pascal Pereira
2012-12-10	SimpleInvoices invoices Module – Customer Field Cross-Site Scripting	webapps	php	tommccredie
2012-12-10	Smartphone Pentest Framework – Multiple Remote Command Execution Vulnerabilities	webapps	cgi	High-Tech Bridge
2012-12-09	Clipbucket 2.6 Revision 738 – Multiple SQL Injections	webapps	php	High-Tech Bridge SA
2012-12-09	Centrify Deployment Manager 2.1.0.283 – Local Privilege Escalation	local	linux	Larry W. Cashdollar
2012-12-09	Cisco DPC2420 – Multiples Vulnerabilities	webapps	hardware	Facundo M. de la Cruz
2012-12-09	MyBB KingChat Plugin – Persistent Cross-Site Scripting	webapps	php	VipVince
2012-12-09	Google Android Kernel 2.6 – Local Denial of Service Crash (PoC)	dos	android	G13
2012-12-09	SumatraPDF 2.1.1/MuPDF 1.0 – Integer Overflow	dos	windows	beford
2012-12-09	Freefloat FTP Server – ‘USER’ Remote Buffer Overflow	remote	windows	D35m0nd142
2012-12-09	Nagios XI Network Monitor Graph Explorer Component – Command Injection (Metasploit)	remote	unix	Metasploit
2012-12-09	Freefloat FTP Server – Arbitrary File Upload (Metasploit)	remote	windows	Metasploit
2012-12-09	Maxthon3 – about:history XCS Trusted Zone Code Execution (Metasploit)	remote	windows	Metasploit
2012-12-09	Splunk 5.0 – Custom App Remote Code Execution (Metasploit)	remote	multiple	Metasploit
2012-12-09	TVMOBiLi 2.1.0.3557 – Denial of Service	dos	windows	High-Tech Bridge SA
2012-12-09	Achievo 1.4.5 – Multiple Vulnerabilities (2)	webapps	php	High-Tech Bridge SA
2012-12-08	vBulletin ajaxReg Module – SQL Injection	webapps	php	Cold Zero
2012-12-07	FOOT Gestion – ‘id’ SQL Injection	webapps	php	Emmanuel Farcy
2012-12-07	WordPress Plugin Simple Gmail Login – Stack Trace Information Disclosure	webapps	php	Aditya Balapure
2012-12-07	IBM System Director Agent – DLL Injection (Metasploit)	remote	windows	Metasploit
2012-12-07	m0n0wall 1.33 – Multiple Cross-Site Request Forgery Vulnerabilities	webapps	freebsd	Yann CAM
2012-12-07	VideoLAN VLC Media Player 2.0.4 – ‘.swf’ Crash (PoC)	dos	windows	coolkaveh
2012-12-06	Adobe IndesignServer 5.5 – SOAP Server Arbitrary Script Execution (Metasploit)	remote	multiple	Metasploit
2012-12-06	Nvidia Install Application 2.1002.85.551 – ‘NVI2.dll’ Unicode Buffer Overflow (PoC)	dos	windows	LiquidWorm
2012-12-06	Oracle MySQL / MariaDB – Insecure Salt Generation Security Bypass	remote	linux	kingcope
2012-12-06	Kordil EDms 2.2.60rc3 – SQL Injection	webapps	php	Woody Hughes
2012-12-06	Oracle MySQL (Windows) – MOF Execution (Metasploit)	remote	windows	Metasploit
2012-12-05	(SSH.com Communications) SSH Tectia – USERAUTH Change Request Password Reset (Metasploit)	remote	unix	Metasploit
2012-12-05	Ektron 8.02 – XSLT Transform Remote Code Execution (Metasploit)	remote	windows	Metasploit
2012-12-04	Advantech Studio 7.0 – SCADA/HMI Directory Traversal	webapps	windows	Nin3
2012-12-04	Sourcefabric Newscoop – ‘f_email’ SQL Injection	webapps	php	AkaStep
2012-12-04	WordPress Theme Nest – ‘codigo’ SQL Injection	webapps	php	Ashiyane Digital Security Team
2012-12-03	FirePass SSL VPN – Local File Inclusion	webapps	multiple	SEC Consult
2012-12-03	Symantec Messaging Gateway 9.5.3-3 – Arbitrary File Download	webapps	linux	Ben Williams
2012-12-03	Symantec Messaging Gateway 9.5.3-3 – Cross-Site Request Forgery	webapps	multiple	Ben Williams
2012-12-03	Opera Web Browser 12.11 – Crash (PoC)	dos	windows	coolkaveh
2012-12-03	MyBB KingChat Plugin – SQL Injection	webapps	php	Red_Hat
2012-12-03	SchoolCMS – Persistent Cross-Site Scripting	webapps	php	VipVince