Exploits

日期	标题	类型	平台	作者
2012-09-17	NCMedia Sound Editor Pro 7.5.1 – ‘MRUList201202.dat’ File Handling Buffer Overflow	local	windows	Julien Ahrens
2012-09-17	Netsweeper WebAdmin Portal – Multiple Vulnerabilities	webapps	php	Jacob Holcomb
2012-09-17	Auxilium PetRatePro – Multiple Vulnerabilities	webapps	php	DaOne
2012-09-17	webERP 4.08.4 – ‘WorkOrderEntry.php’ SQL Injection	webapps	php	modpr0be
2012-09-17	Novell Groupwise 8.0.2 HP3 and 2012 – Integer Overflow	dos	windows	Francis Provencher
2012-09-17	luxcal 2.7.0 – Multiple Vulnerabilities	webapps	php	L0n3ly-H34rT
2012-09-17	minimal Gallery – ‘index.php’ Multiple Cross-Site Scripting Vulnerabilities	webapps	php	ayastar
2012-09-15	IFOBS – ‘regclientprint.jsp’ Multiple HTML Injection Vulnerabilities	webapps	jsp	MustLive
2012-09-14	Internet Download Manager – Local Stack Buffer Overflow	local	windows	Dark-Puzzle
2012-09-14	NeoBill CMS 0.8 Alpha – Multiple Vulnerabilities	webapps	php	Vulnerability-Lab
2012-09-14	ASTPP VoIP Billing (4cf207a) – Multiple Vulnerabilities	webapps	php	Vulnerability-Lab
2012-09-14	Internet Download Manager – Local Buffer Overflow (SEH)	local	windows	Dark-Puzzle
2012-09-14	Trend Micro Interscan Messaging Security Suite – Persistent Cross-Site Scripting / Cross-Site Request Forgery	webapps	aix	modpr0be
2012-09-12	Ezylog Photovoltaic Management Server – Multiple Vulnerabilities	webapps	php	Roberto Paleari
2012-09-12	Knowledge Base Enterprise Edition 4.62.0 – SQL Injection	webapps	asp	Vulnerability-Lab
2012-09-12	Webify Photo Gallery – Arbitrary File Deletion	webapps	php	JIKO
2012-09-12	Google Chrome for Android – Same-origin Policy Bypass Local Symlink	remote	android	Artem Chaykin
2012-09-12	Webify Business Directory – Arbitrary File Deletion	webapps	php	JIKO
2012-09-12	Google Chrome for Android – Local Application Handling Cookie Theft	remote	android	Artem Chaykin
2012-09-12	Webify eDownloads Cart – Arbitrary File Deletion	webapps	php	JIKO
2012-09-12	Google Chrome for Android – Multiple ‘file::’ URL Handler Local Downloaded Content Disclosure Vulnerabilities	remote	android	Artem Chaykin
2012-09-12	Sitecom MD-25x – Multiple Vulnerabilities	remote	hardware	Mattijs van Ommeren
2012-09-12	Google Chrome for Android – com.android.browser.application_id Intent Extra Data Cross-Site Scripting	remote	android	Artem Chaykin
2012-09-12	Subrion CMS 2.2.1 – Cross-Site Request Forgery (Add Admin)	webapps	php	LiquidWorm
2012-09-12	Atlassian Confluence 3.4.x – Error Page Cross-Site Scripting	webapps	multiple	D. Niedermaier
2012-09-12	Winamp – MAKI Buffer Overflow (Metasploit)	local	windows	Metasploit
2012-09-11	FBDj – ‘id’ SQL Injection	webapps	php	TUNISIAN CYBER
2012-09-11	akcms 4.2.4 – Information Disclosure	webapps	php	L0n3ly-H34rT
2012-09-11	Webify Blog – Arbitrary File Deletion	webapps	php	JIKO
2012-09-11	libguac – Remote Buffer Overflow	remote	linux	Michael Jumper
2012-09-10	VICIDIAL Call Center Suite – Multiple SQL Injections	webapps	php	Ertebat Gostar Co
2012-09-10	VICIDIAL Call Center Suite 2.2.1-237 – Multiple Vulnerabilities	webapps	php	Ertebat Gostar Co
2012-09-10	OpenFiler 2.x – NetworkCard Command Execution (Metasploit)	remote	linux	Metasploit
2012-09-10	WAN Emulator 2.3 – Command Execution (Metasploit)	remote	linux	Metasploit
2012-09-10	Oracle VM VirtualBox 4.1 – Local Denial of Service	dos	linux_x86-64	halfdog
2012-09-10	SiteGo – Remote File Inclusion	webapps	php	L0n3ly-H34rT
2012-09-10	DELTAScripts PHP Links – Multiple SQL Injections	webapps	php	L0n3ly-H34rT
2012-09-10	Joomla! Component RokModule 1.1 – ‘module’ Blind SQL Injection	webapps	php	Yarolinux
2012-09-08	Pinterestclones – Security Bypass / HTML Injection	webapps	php	DaOne
2012-09-08	Pinterest Clone Script – Multiple Vulnerabilities	webapps	php	DaOne
2012-09-08	WAP Proof 2008 – Denial of Service	dos	windows	Orion Einfold
2012-09-08	ActiveFax (ActFax) 4.3 – Client Importer Buffer Overflow (Metasploit)	local	windows	Metasploit
2012-09-08	Sflog! CMS 1.0 – Arbitrary File Upload (Metasploit)	remote	php	Metasploit
2012-09-08	HP SiteScope (Linux/Windows) – Remote Code Execution (Metasploit)	remote	multiple	Metasploit
2012-09-07	GNU glibc – ‘strcoll()’ Routine Integer Overflow	dos	linux	Jan iankko Lieskovsky
2012-09-07	SAP NetWeaver Dispatcher – DiagTraceR3Info Buffer Overflow (Metasploit)	remote	windows	Metasploit
2012-09-07	WordPress Theme Purity – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Matan Azugi
2012-09-07	TestLink 1.9.3 – Cross-Site Request Forgery	webapps	php	High-Tech Bridge SA
2012-09-07	Sitecom Home Storage Center – Authentication Bypass	webapps	hardware	Mattijs van Ommeren
2012-09-07	Clipster Video – Persistent Cross-Site Scripting	webapps	php	DaOne