Exploits

日期	标题	类型	平台	作者
2012-12-02	IBM System Director Agent – Remote System Level	remote	windows	kingcope
2012-12-02	MySQL 5.1/5.5 (Windows) – ‘MySQLJackpot’ Remote Command Execution	remote	windows	kingcope
2012-12-02	MySQL – ‘Stuxnet Technique’ Windows Remote System	remote	windows	kingcope
2012-12-02	(SSH.com Communications) SSH Tectia (SSH < 2.0-6.1.9.95 / Tectia 6.1.9.95) - Remote Authentication Bypass	remote	linux	kingcope
2012-12-02	freeSSHd 2.1.3 – Remote Authentication Bypass	remote	windows	kingcope
2012-12-02	MySQL – Remote User Enumeration	remote	multiple	kingcope
2012-12-02	freeFTPd 1.2.6 – Remote Authentication Bypass	remote	windows	kingcope
2012-12-02	MySQL – Denial of Service (PoC)	dos	linux	kingcope
2012-12-02	MySQL (Linux) – Heap Overrun (PoC)	dos	linux	kingcope
2012-12-02	MySQL (Linux) – Database Privilege Escalation	local	linux	kingcope
2012-12-02	MySQL (Linux) – Stack Buffer Overrun (PoC)	dos	linux	kingcope
2012-12-01	BlazeVideo HDTV Player Pro 6.6 – Filename Handling (Metasploit)	local	windows	Metasploit
2012-12-01	Fortinet FortiWeb (Multiple Appliances) – Multiple Cross-Site Scripting Vulnerabilities	remote	hardware	Benjamin Kunz Mejri
2012-12-01	TinyMCPUK – ‘test’ Cross-Site Scripting	webapps	php	eidelweiss
2012-11-30	SilverStripe CMS 3.0.2 – (Multiple Vulnerabilities) Cross-Site Scripting / Cross-Site Request Forgery	webapps	php	Sense of Security
2012-11-30	SmartCMS – ‘/index.php?menuitem’ SQL Injection / Cross-Site Scripting	webapps	php	Yakir Wizman
2012-11-30	Free Hosting Manager 2.0 – ‘id’ SQL Injection	webapps	php	Yakir Wizman
2012-11-29	WordPress Plugin Video Lead Form – ‘errMsg’ Cross-Site Scripting	webapps	php	Aditya Balapure
2012-11-29	Microsoft Windows – AlwaysInstallElevated MSI (Metasploit)	local	windows	Metasploit
2012-11-29	Elastix – ‘page’ Cross-Site Scripting	webapps	php	cheki
2012-11-29	Network Shutdown Module 3.21 – ‘sort_values’ Remote PHP Code Injection (Metasploit)	remote	php	Metasploit
2012-11-29	WordPress Theme Toolbox – ‘mls’ SQL Injection	webapps	php	Ashiyane Digital Security Team
2012-11-29	FCKEditor Core ASP 2.6.8 – Arbitrary File Upload Protection Bypass	webapps	asp	Soroush Dalili
2012-11-29	Oracle OpenSSO 8.0 – Multiple Cross-Site Scripting POST Injection Vulnerabilities	webapps	multiple	LiquidWorm
2012-11-29	UMPlayer Portable 0.95 – Crash (PoC)	dos	windows	p3kok
2012-11-28	BigDump 0.29b and 0.32b – Multiple Vulnerabilities	webapps	php	Ur0b0r0x
2012-11-28	Apple QuickTime 7.7.2 – MIME Type Buffer Overflow (Metasploit)	remote	windows	Metasploit
2012-11-28	gleamtech filevista/fileultimate 4.6 – Directory Traversal	webapps	windows	Soroush Dalili
2012-11-27	WordPress Theme CStar Design – ‘id’ SQL Injection	webapps	php	Amirh03in
2012-11-26	Websense Proxy – Filter Bypass	dos	multiple	Nahuel Grisolia
2012-11-26	Aviosoft Digital TV Player Professional 1.x – ‘.PLF’ Direct Retn	local	windows	Nezim
2012-11-26	WordPress Theme Wp-ImageZoom – ‘id’ SQL Injection	webapps	php	Amirh03in
2012-11-26	BlazeVideo HDTV Player 6.6 Professional – Direct RETN	local	windows	Nezim
2012-11-26	Forescout CounterACT – ‘a’ Open Redirection	webapps	multiple	Joseph Sheridan
2012-11-26	BuyClassifiedScript – PHP Code Injection	webapps	php	d3b4g
2012-11-26	mcrypt 2.5.8 – Local Stack Overflow	local	linux	Tosh
2012-11-26	WordPress Plugin Ads Box – ‘count’ SQL Injection	webapps	php	Ashiyane Digital Security Team
2012-11-26	mcrypt 2.6.8 – Stack Buffer Overflow (PoC)	dos	linux	_ishikawa
2012-11-26	SmartCMS – ‘index.php?idx’ SQL Injection	webapps	php	NoGe
2012-11-26	PRADO PHP Framework 3.2.0 – Arbitrary File Read	webapps	php	LiquidWorm
2012-11-25	ES CmS 0.1 – SQL Injection	webapps	php	hossein beizaee
2012-11-25	jBilling 3.0.2 – Cross-Site Scripting	webapps	php	Woody Hughes
2012-11-24	Beat Websites – ‘id’ SQL Injection	webapps	php	Metropolis
2012-11-24	Apple QuickTime 7.7.2 – TeXML Style Element font-table Field Stack Buffer Overflow (Metasploit)	remote	windows	Metasploit
2012-11-23	Greenstone – Multiple Vulnerabilities	remote	multiple	AkaStep
2012-11-23	Twitter for iPhone – Man in the Middle Security	remote	ios	Carlos Reventlov
2012-11-23	TrouSerS – Denial of Service	dos	linux	Andy Lutomirski
2012-11-22	WordPress Plugin Plg Novana – ‘id’ SQL Injection	webapps	php	sil3nt
2012-11-22	WordPress Plugin Webplayer – ‘id’ SQL Injection	webapps	php	Novin hack
2012-11-22	WordPress Plugin Zingiri Web Shop – ‘path’ Arbitrary File Upload	webapps	php	Ashiyane Digital Security Team