Exploits

日期	标题	类型	平台	作者
2012-08-22	Banana Dance – Cross-Site Scripting / SQL Injection	webapps	php	Canberk BOLAT
2012-08-22	OpenDocMan 1.2.6.1 – Cross-Site Request Forgery (Password Change)	webapps	php	Shai rod
2012-08-22	OrderSys 1.6.4 – Multiple SQL Injections / Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Canberk BOLAT
2012-08-22	Jara 1.6 – Multiple SQL Injections / Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Canberk BOLAT
2012-08-22	WordPress Plugin Monsters Editor for WP Super Edit – Arbitrary File Upload	webapps	php	Crim3R
2012-08-22	WordPress Plugin Rich Widget – Arbitrary File Upload	webapps	php	Crim3R
2012-08-22	1024 CMS 2.1.1 – ‘p’ SQL Injection	webapps	php	kallimero
2012-08-21	Clipbucket 2.5 – Blind SQL Injection	webapps	php	loneferret
2012-08-21	Symantec Web Gateway 5.0.3.18 – Arbitrary Password Change	webapps	linux	Kc57
2012-08-21	Symantec Web Gateway 5.0.3.18 – Arbitrary Password Change (Metasploit)	webapps	linux	Kc57
2012-08-21	SAP NetWeaver Dispatcher 7.0 ehp1/2 – Multiple Vulnerabilities	dos	multiple	Core Security
2012-08-21	JPM Article Blog Script 6 – ‘tid’ Cross-Site Scripting	webapps	php	Mr.0c3aN
2012-08-21	Clipbucket 2.5 – Directory Traversal	webapps	php	loneferret
2012-08-21	XODA Document Management System 0.4.5 – Cross-Site Scripting / Arbitrary File Upload	webapps	php	Shai rod
2012-08-21	Sysax Multi Server 5.64 – Create Folder Buffer Overflow (Metasploit)	remote	windows	Matt Andreko
2012-08-20	GWebmail 0.7.3 – Cross-Site Scripting / Local File Inclusion / Remote Code Execution	webapps	php	Shai rod
2012-08-20	hupa webmail 0.0.2 – Persistent Cross-Site Scripting	webapps	java	Shai rod
2012-08-20	Alpha Networks ADSL2/2+ Wireless Router ASL-26555 – Password Disclosure	webapps	hardware	Alberto Ortega
2012-08-20	Clipbucket 2.5 – Cross-Site Request Forgery	webapps	php	DaOne
2012-08-20	T-dah Webmail – Cross-Site Request Forgery / Persistent Cross-Site Scripting	webapps	php	Yakir Wizman
2012-08-20	Adobe Flash Player 11.3 – Font Parsing Code Execution (Metasploit)	remote	windows	Metasploit
2012-08-20	Divx Player 6.8.2 – Denial of Service	dos	windows	Dark-Puzzle
2012-08-20	IOServer 1.0.18.0 – Directory Traversal	webapps	windows	hinge
2012-08-20	uebimiau webmail 2.7.2 – Persistent Cross-Site Scripting	webapps	php	Shai rod
2012-08-20	YourArcadeScript 2.4 – ‘index.php?id’ SQL Injection	webapps	php	DaOne
2012-08-20	Hivemail Webmail – Multiple Persistent Cross-Site Scripting Vulnerabilities	webapps	php	Shai rod
2012-08-20	PG Portal Pro – Cross-Site Request Forgery	webapps	php	Noxious
2012-08-18	ManageEngine OpUtils 6.0 – Persistent Cross-Site Scripting	webapps	windows	loneferret
2012-08-18	IlohaMail Webmail – Persistent Cross-Site Scripting	webapps	php	Shai rod
2012-08-18	SaltOS – ‘download.php’ Cross-Site Scripting	webapps	php	Stefan Schurtz
2012-08-18	Apple QuickTime plugin – Windows 4.1.2 (Japanese) Remote Overflow	remote	windows	UNYUN
2012-08-17	Jaow CMS 2.3 – Cross-Site Request Forgery	webapps	php	DaOne
2012-08-17	Jaow CMS 2.3 – Blind SQL Injection	webapps	php	loneferret
2012-08-17	Mozilla Firefox – Remote Denial of Service	dos	multiple	Jean Pascal Pereira
2012-08-17	webid 1.0.4 – Multiple Vulnerabilities	webapps	php	dun
2012-08-17	LISTSERV 16 – ‘SHOWTPL’ Cross-Site Scripting	webapps	cgi	Jose Carlos de Arriba
2012-08-17	T-dah Webmail Client – Multiple Persistent Cross-Site Scripting Vulnerabilities	webapps	php	Shai rod
2012-08-17	Elastix 2.2.0 – ‘graph.php’ Local File Inclusion	webapps	php	cheki
2012-08-17	hastymail2 webmail 1.1 rc2 – Persistent Cross-Site Scripting	webapps	php	Shai rod
2012-08-17	Inferno vBShout 2.5.2 – SQL Injection	webapps	php	Luit
2012-08-17	Social Engine 4.2.5 – Multiple Vulnerabilities	webapps	php	Vulnerability-Lab
2012-08-17	ManageEngine OpStor 7.4 – Multiple Vulnerabilities	webapps	windows	Vulnerability-Lab
2012-08-16	E-Mail Security Virtual Appliance (ESVA) – Remote Execution	remote	linux	iJoo
2012-08-16	ProQuiz 2.0.2 – Cross-Site Request Forgery	webapps	php	DaOne
2012-08-16	Roundcube Webmail 0.8.0 – Persistent Cross-Site Scripting	webapps	php	Shai rod
2012-08-16	Microsoft Internet Explorer – Time Element Memory Corruption (MS11-050)	remote	windows	Ciph3r
2012-08-15	sphpforum 0.4 – Multiple Vulnerabilities	webapps	php	loneferret
2012-08-15	Cyclope Employee Surveillance Solution 6.0 6.1.0 6.2.0 – Multiple Vulnerabilities	webapps	windows	loneferret
2012-08-15	xt:Commerce 3.04 SP2.1 – Blind SQL Injection	webapps	php	stoffline.com
2012-08-15	Microsoft Windows – Service Trusted Path Privilege Escalation (Metasploit)	local	windows	Metasploit