Exploits

日期	标题	类型	平台	作者
2012-08-15	GlobalScape CuteZIP – Local Stack Buffer Overflow (Metasploit)	local	windows	Metasploit
2012-08-15	MobileCartly 1.0 – Arbitrary File Upload	webapps	php	ICheer_No0M
2012-08-15	MaxForum 1.0.0 – Local File Inclusion	webapps	php	ahwak2000
2012-08-15	Novell ZENworks Asset Management – Remote Execution (Metasploit)	remote	java	Metasploit
2012-08-15	Cyclope Employee Surveillance Solution 6.0 – SQL Injection (Metasploit)	remote	windows	Metasploit
2012-08-15	TestLink 1.9.3 – Arbitrary File Upload (Metasploit)	remote	php	Metasploit
2012-08-13	IBM Websphere MQ File Transfer Edition Web Gateway – Cross-Site Request Forgery	webapps	windows	Nir Valtman
2012-08-13	Hotel Booking Portal 0.1 – Multiple Vulnerabilities	webapps	php	Yakir Wizman
2012-08-13	WordPress Plugin RSVPMaker 2.5.4 – Persistent Cross-Site Scripting	webapps	php	Chris Kellum
2012-08-13	Viscosity – Local Privilege Escalation	local	osx	zx2c4
2012-08-13	Pure-FTPd 1.0.21 (CentOS 6.2 / Ubuntu 8.04) – Null Pointer Dereference Crash (PoC)	dos	linux	kingcope
2012-08-13	Total Shop UK eCommerce CodeIgniter – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Chris Cooper
2012-08-13	IBM Websphere MQ File Transfer Edition Web Gateway – Insufficient Access Control	webapps	windows	Nir Valtman
2012-08-13	GNU glibc – Multiple Local Stack Buffer Overflow Vulnerabilities	local	linux	Joseph S. Myer
2012-08-12	Spytech NetVizor 6.1 – ‘services.exe’ Denial of Service	dos	windows	loneferret
2012-08-11	Tunnelblick – Local Privilege Escalation (2)	local	osx	zx2c4
2012-08-11	FileContral – Local File Inclusion / Local File Disclosure	webapps	php	Ashiyane Digital Security Team
2012-08-11	ProQuiz 2.0.2 – Multiple Vulnerabilities	webapps	php	L0n3ly-H34rT
2012-08-11	Flynax General Classifieds CMS 4.0 – Multiple Vulnerabilities	webapps	php	Vulnerability-Lab
2012-08-11	Solaris 10 Patch 137097-01 – Symlink Privilege Escalation	local	solaris	Larry Cashdollar
2012-08-11	Tunnelblick – Local Privilege Escalation (1)	local	osx	zx2c4
2012-08-11	MindTouch DekiWiki – Multiple Local/Remote File Inclusions	webapps	php	L0n3ly-H34rT
2012-08-10	MobileCartly 1.0 – Arbitrary File Write	webapps	php	Yakir Wizman
2012-08-10	WordPress Plugin Mz-jajak 2.1 – SQL Injection	webapps	php	StRoNiX
2012-08-10	MobileCartly 1.0 – Arbitrary File Deletion	webapps	php	GoLd_M
2012-08-10	GalaxyScripts Mini File Host and DaddyScripts Daddy’s File Host – Local File Inclusion	webapps	php	L0n3ly-H34rT
2012-08-10	NetDecision 4.2 – TFTP Writable Directory Traversal Execution (Metasploit)	remote	windows	Metasploit
2012-08-10	mIRC – ‘projects.php’ Cross-Site Scripting	webapps	php	TayfunBasoglu
2012-08-09	Hotel Booking Portal 0.1 – Multiple SQL Injections / Cross-Site Scripting	webapps	php	Yakir Wizman
2012-08-09	Cyclope Employee Surveillance Solution 6.0/6.1.0/6.2.0/6.2.1/6.3.0 – SQL Injection	webapps	windows	loneferret
2012-08-09	Kamads Classifieds 2.0 – Admin Hash Disclosure	webapps	php	Mr.tro0oqy
2012-08-09	Joomla! Component com_fireboard – SQL Injection	webapps	php	Vulnerability-Lab
2012-08-08	IBM Proventia Network Mail Security System 2.5 – POST File Read	webapps	windows	muts
2012-08-08	afterlogic mailsuite pro (VMware Appliance) 6.3 – Persistent Cross-Site Scripting	webapps	windows	loneferret
2012-08-08	xeams email server 4.4 build 5720 – Persistent Cross-Site Scripting	webapps	windows	loneferret
2012-08-08	mailenable enterprise 6.5 – Persistent Cross-Site Scripting	webapps	windows	loneferret
2012-08-08	winwebmail server 3.8.1.6 – Persistent Cross-Site Scripting	webapps	windows	loneferret
2012-08-08	escon supportportal pro 3.0 – Persistent Cross-Site Scripting	webapps	windows	loneferret
2012-08-08	AraDown – ‘id’ SQL Injection	webapps	php	G-B
2012-08-08	WordPress Plugin ThreeWP Email Reflector 1.13 – Persistent Cross-Site Scripting	webapps	php	loneferret
2012-08-08	emailarchitect enterprise email server 10.0 – Persistent Cross-Site Scripting	webapps	windows	loneferret
2012-08-08	phpList 2.10.18 – ‘unconfirmed’ Cross-Site Scripting	webapps	php	High-Tech Bridge SA
2012-08-08	Surgemail 6.0a4 – Persistent Cross-Site Scripting	webapps	windows	loneferret
2012-08-08	Axigen Mail Server 8.0.1 – Persistent Cross-Site Scripting	webapps	windows	loneferret
2012-08-08	ConcourseSuite – Multiple Cross-Site Scripting / Cross-Site Request Forgery Vulnerabilities	webapps	java	Matthew Joyce
2012-08-08	T-dah Webmail Client 3.2.0-2.3 – Persistent Cross-Site Scripting	webapps	php	loneferret
2012-08-08	Openconstructor CMS 3.12.0 – ‘id’ Multiple SQL Injections	webapps	php	Lorenzo Cantoni
2012-08-08	smartermail free 9.2 – Persistent Cross-Site Scripting	webapps	windows	loneferret
2012-08-08	Inout Mobile Webmail APP – Persistent Cross-Site Scripting	webapps	php	Vulnerability-Lab
2012-08-08	WordPress Plugin simplemail 1.0.6 – Persistent Cross-Site Scripting	webapps	php	loneferret