Exploits

日期	标题	类型	平台	作者
2012-09-07	Cannonbolt Portfolio Manager 1.0 – Multiple Vulnerabilities	webapps	php	LiquidWorm
2012-09-06	web@all – Local File Inclusion / Multiple Arbitrary File Upload Vulnerabilities	webapps	php	KedAns-Dz
2012-09-06	OpenFiler 2.3 – Multiple Cross-Site Scripting / Information Disclosure Vulnerabilities	webapps	php	Brendan Coles
2012-09-05	ES Job Search Engine 3.0 – SQL Injection	webapps	php	Vulnerability-Lab
2012-09-05	QNAP Turbo NAS TS-1279U-RP – Multiple Path Injections	webapps	hardware	Andrea Fabrizi
2012-09-05	JBoss – DeploymentFileRepository WAR Deployment (via JMXInvokerServlet) (Metasploit)	remote	multiple	Metasploit
2012-09-05	MobileCartly 1.0 – Arbitrary File Creation (Metasploit)	webapps	php	Metasploit
2012-09-05	Extcalendar 2.0 – Multiple SQL Injections / HTML Injection Vulnerabilities	webapps	php	Ashiyane Digital Security Team
2012-09-05	Flogr – ‘index.php’ Multiple Cross-Site Scripting Vulnerabilities	webapps	php	High-Tech Bridge
2012-09-05	Kayako Fusion – ‘download.php’ Cross-Site Scripting	webapps	php	High-Tech Bridge
2012-09-05	Cm3 CMS – ‘search.asp’ Multiple Cross-Site Scripting Vulnerabilities	webapps	asp	Crim3R
2012-09-05	Ektron CMS 8.5.0 – Multiple Vulnerabilities	webapps	asp	Sense of Security
2012-09-05	Net-SNMP – SNMPD AgentX Subagent Timeout Denial of Service	dos	linux	Ken Farnen
2012-09-04	Group Office Calendar – ‘/calendar/json.php’ SQL Injection	webapps	php	Chris Cooper
2012-09-04	Support4Arabs Pages 2.0 – SQL Injection	webapps	php	L0n3ly-H34rT
2012-09-04	ThinPrint – ‘tpfc.dll’ Insecure Library Loading Arbitrary Code Execution	local	windows	Moshe Zioni
2012-09-04	Splunk 4.3.3 – Arbitrary File Read	webapps	multiple	Marcio Almeida
2012-09-04	jira 4.4.3 / greenhopper < 5.9.8 - Multiple Vulnerabilities	webapps	jsp	Hoyt LLC Research
2012-09-04	PHPFox 3.0.1 – ‘ajax.php’ Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Crim3R
2012-09-04	Sciretech (Multiple Products) – Multiple SQL Injections	webapps	php	AkaStep
2012-09-03	Sitemax Maestro – SQL Injection / Local File Inclusion	webapps	php	AkaStep
2012-09-03	Sitecom Home Storage Center – Directory Traversal	webapps	hardware	Mattijs van Ommeren
2012-09-03	Conceptronic Grab’n’Go Network Storage – Directory Traversal	webapps	hardware	Mattijs van Ommeren
2012-09-02	AV Arcade Free Edition – ‘add_rating.php?id’ Blind SQL Injection	webapps	php	DaOne
2012-09-02	Admidio 2.3.5 – Multiple Vulnerabilities	webapps	php	Stefan Schurtz
2012-09-01	Adobe Photoshop CS6 – ‘.png’ Parsing Heap Overflow	dos	windows	Francis Provencher
2012-09-01	Joomla! Component Spider Calendar – SQL Injection	webapps	php	D4NB4R
2012-09-01	SugarCRM Community Edition 6.5.2 (Build 8410) – Multiple Vulnerabilities	webapps	php	Brendan Coles
2012-08-31	SugarCRM Community Edition – Multiple Information Disclosure Vulnerabilities	webapps	php	Brendan Coles
2012-08-31	OTRS Open Technology Real Services 3.1.8/3.1.9 – Cross-Site Scripting	webapps	windows	Mike Eduard
2012-08-31	WarFTP Daemon 1.82 RC 11 – Remote Format String	dos	windows	coolkaveh
2012-08-31	vBulletin Yet Another Awards System 4.0.2 – SQL Injection	webapps	php	Backsl@sh/Dan
2012-08-31	Internet Download Manager – Memory Corruption	dos	windows	Dark-Puzzle
2012-08-31	SAP NetWeaver HostControl – Command Injection (Metasploit)	remote	windows	Metasploit
2012-08-30	WordPress Plugin Download Monitor – ‘dlsearch’ Cross-Site Scripting	webapps	php	Chris Cooper
2012-08-30	Crowbar – ‘file’ Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Matthias Weckbecker
2012-08-30	XM Forum – ‘search.asp’ SQL Injection	webapps	asp	Crim3R
2012-08-30	TomatoCart – ‘example_form.ajax.php’ Cross-Site Scripting	webapps	php	HauntIT
2012-08-30	Booking System Pro – Cross-Site Request Forgery	webapps	php	DaOne
2012-08-30	SquidGuard 1.4 – Long URL Handling Remote Denial of Service	dos	xml	Stefan Bauer
2012-08-30	Symantec Messaging Gateway 9.5/9.5.1 – SSH Default Password Security Bypass (Metasploit)	remote	linux	Metasploit
2012-08-29	HP Intelligent Management Center < 5.0 E0102 - UAM Buffer Overflow (Metasploit)	local	windows	Metasploit
2012-08-29	JW Player – ‘logo.link’ Cross-Site Scripting	webapps	php	MustLive
2012-08-29	WordPress Plugin HD Webplayer 1.1 – SQL Injection	webapps	php	JoinSe7en
2012-08-29	PrestaShop 1.4.7 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	High-Tech Bridge
2012-08-29	Winlog Lite SCADA HMI system – Overwrite (SEH)	dos	windows	Ciph3r
2012-08-29	Phorum 5.2.18 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	High-Tech Bridge
2012-08-29	ActFax Server 4.31 Build 0225 – Local Privilege Escalation	local	windows	Craig Freyman
2012-08-29	Disqus Blog Comments – Blind SQL Injection	webapps	php	Spy_w4r3
2012-08-28	CommPort 1.01 – Multiple Vulnerabilities	webapps	php	Jean Pascal Pereira