Exploits

日期	标题	类型	平台	作者
2012-10-04	Novell Sentinel Log Manager 1.2.0.2 – Retention Policy	webapps	windows	Piotr Chmylkowski
2012-10-04	phpMyBitTorrent 2.04 – Multiple Vulnerabilities	webapps	php	waraxe
2012-10-04	Template CMS 2.1.1 – Multiple Vulnerabilities	webapps	php	High-Tech Bridge SA
2012-10-04	XnView 1.99.1 – ‘.JLS’ File Decompression Heap Overflow	dos	windows	Joseph Sheridan
2012-10-03	Omnistar Mailer 7.2 – Multiple Vulnerabilities	webapps	php	Vulnerability-Lab
2012-10-03	WordPress Plugin spider Calendar – Multiple Vulnerabilities	webapps	php	D4NB4R
2012-10-03	NCMedia Sound Editor Pro 7.5.1 – Local Overflow (SEH + DEP Bypass)	local	windows	b33f
2012-10-02	ZenPhoto – ‘admin-news-articles.php’ Cross-Site Scripting	webapps	php	Scott Herbert
2012-10-02	Switchvox – Multiple HTML Injection Vulnerabilities	webapps	php	Ibrahim El-Sayed
2012-10-02	soapbox 0.3.1 – Local Privilege Escalation	local	linux	Jean Pascal Pereira
2012-10-02	phptax 0.8 – Remote Code Execution	webapps	php	Jean Pascal Pereira
2012-10-01	Omnistar Mailer – Multiple SQL Injections / HTML Injection Vulnerabilities	webapps	php	Vulnerability Laboratory
2012-10-01	WordPress Plugin Akismet – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Tapco Security
2012-10-01	WordPress Theme Archin 3.2 – Configuration Access	webapps	php	bwall
2012-10-01	Foxit Reader 5.4.3.0920 – Crash (PoC)	dos	windows	coolkaveh
2012-09-30	AlamFifa CMS – ‘user_name_cookie’ SQL Injection	webapps	php	L0n3ly-H34rT
2012-09-30	Reaver Pro – Local Privilege Escalation	local	linux	infodox
2012-09-28	PowerTCP WebServer for – ActiveX Denial of Service	dos	windows	catatonicprime
2012-09-28	IBM Lotus Notes Traveler 8.5.1.x – Multiple Input Validation Vulnerabilities	remote	multiple	MustLive
2012-09-27	Midori Browser 0.3.2 – Denial of Service	dos	linux	Ryuzaki Lawlet
2012-09-27	Smartfren Connex EC 1261-2 UI OUC – Local Privilege Escalation	local	windows	X-Cisadane
2012-09-27	Trend Micro Control Manager 5.5/6.0 AdHocQuery – (Authenticated) Blind SQL Injection	webapps	windows	otoy
2012-09-27	JAMF Casper Suite MDM – Cross-Site Request Forgery	webapps	jsp	Jacob Holcomb
2012-09-26	WordPress Plugin ABC Test – ‘id’ Cross-Site Scripting	webapps	php	Scott Herbert
2012-09-26	Cisco DPC2100 – Denial of Service	dos	hardware	Daniel Smith
2012-09-26	ViArt Shop Evaluation 4.1 – Multiple Remote File Inclusions	webapps	php	L0n3ly-H34rT
2012-09-26	YingZhiPython – Directory Traversal / Arbitrary File Upload	remote	linux	Larry Cashdollar
2012-09-25	QNX 6.5.0 / QCONN 1.4.207944 – Remote Command Execution	remote	linux	Mor!p3r
2012-09-25	WordPress Plugin Token Manager – ‘tid’ Cross-Site Scripting	webapps	php	TheCyberNuxbie
2012-09-25	ViArt Shop Enterprise 4.1 – Arbitrary Command Execution	webapps	php	LiquidWorm
2012-09-24	SafeNet Sentinel Keys Server – Crash (PoC)	dos	windows	retset
2012-09-24	Samba 3.5.11/3.6.3 – Remote Code Execution	remote	linux	kb
2012-09-24	ZEN Load Balancer – Multiple Vulnerabilities	webapps	cgi	Brendan Coles
2012-09-22	WordPress Plugin Sexy Add Template – Cross-Site Request Forgery	webapps	php	the_cyber_nuxbie
2012-09-22	WordPress Core 3.4.2 – Cross-Site Request Forgery	webapps	php	AkaStep
2012-09-21	YCommerce – Multiple SQL Injections	webapps	php	Ricardo Almeida
2012-09-20	Manhali 1.8 – Local File Inclusion	webapps	php	L0n3ly-H34rT
2012-09-20	Thomson Wireless VoIP Cable Modem – Authentication Bypass	webapps	hardware	Glafkos Charalambous
2012-09-20	WordPress Plugin MF Gig Calendar – Cross-Site Scripting	webapps	php	Chris Cooper
2012-09-20	Poweradmin – ‘index.php’ Cross-Site Scripting	webapps	php	Siavash
2012-09-19	torrenttrader 2.08 – Multiple Vulnerabilities	webapps	php	waraxe
2012-09-19	SonicWALL email security 7.3.5 – Multiple Vulnerabilities	webapps	windows	Vulnerability-Lab
2012-09-19	Fortigate UTM WAF Appliance – Multiple Vulnerabilities	webapps	hardware	Vulnerability-Lab
2012-09-19	WordPress Plugin wp-topbar 4.02 – Multiple Vulnerabilities	webapps	php	Blake Entrekin
2012-09-19	SpiceWorks 6.0.00993 – Multiple Script Injection Vulnerabilities	webapps	windows	LiquidWorm
2012-09-18	TAGWORX.CMS – ‘cid’ SQL Injection	webapps	php	Crim3R
2012-09-18	WordPress Core 3.4.2 – Multiple Path Disclosure Vulnerabilities	webapps	php	AkaStep
2012-09-18	vBulletin 4.1.12 – ‘blog_plugin_useradmin.php’ SQL Injection	webapps	php	Am!r
2012-09-18	AxisInternet VoIP Manager – Multiple Cross-Site Scripting Vulnerabilities	webapps	cgi	Benjamin Kunz Mejri
2012-09-17	minimal Gallery – ‘index.php’ Multiple Cross-Site Scripting Vulnerabilities	webapps	php	ayastar