Exploits

日期	标题	类型	平台	作者
2012-08-08	T-dah Webmail Client 3.2.0-2.3 – Persistent Cross-Site Scripting	webapps	php	loneferret
2012-08-08	Openconstructor CMS 3.12.0 – ‘id’ Multiple SQL Injections	webapps	php	Lorenzo Cantoni
2012-08-08	smartermail free 9.2 – Persistent Cross-Site Scripting	webapps	windows	loneferret
2012-08-08	Inout Mobile Webmail APP – Persistent Cross-Site Scripting	webapps	php	Vulnerability-Lab
2012-08-08	WordPress Plugin simplemail 1.0.6 – Persistent Cross-Site Scripting	webapps	php	loneferret
2012-08-08	iauto mobile Application 2012 – Multiple Vulnerabilities	webapps	php	Vulnerability-Lab
2012-08-08	WordPress Plugin postie 1.4.3 – Persistent Cross-Site Scripting	webapps	php	loneferret
2012-08-08	AraDown – Blind SQL Injection	webapps	php	G-B
2012-08-08	OTRS Open Technology Real Services 3.1.4 – Persistent Cross-Site Scripting	webapps	windows	loneferret
2012-08-08	Joomla! Component com_enmasse 1.2.0.4 – SQL Injection	webapps	php	D4NB4R
2012-08-08	dirLIST 0.3.0 – Local File Inclusion	webapps	php	L0n3ly-H34rT
2012-08-08	WordPress Plugin mini mail Dashboard widget 1.42 – Persistent Cross-Site Scripting	webapps	php	loneferret
2012-08-08	WespaJuris 3.0 – Multiple Vulnerabilities	webapps	php	WhiteCollarGroup
2012-08-08	PBBoard – ‘admin.php?xml_name’ Arbitrary PHP Code Execution	webapps	php	High-Tech Bridge
2012-08-08	Alt-N MDaemon free 12.5.4 – Persistent Cross-Site Scripting	webapps	windows	loneferret
2012-08-08	Ubisoft uplay 2.0.3 – ActiveX Control Arbitrary Code Execution (Metasploit)	remote	windows	Metasploit
2012-08-08	PBBoard – ‘member_id’ Validation Password Manipulation	webapps	php	High-Tech Bridge
2012-08-08	ManageEngine ServiceDesk Plus 8.1 – Persistent Cross-Site Scripting	webapps	windows	loneferret
2012-08-07	Oracle Business Transaction Management Server 12.1.0.2.7 FlashTunnelService – Remote File Deletion	remote	windows	rgod
2012-08-07	Oracle Business Transaction Management Server 12.1.0.2.7 – FlashTunnelService WriteToFile Message Remote Code Execution	remote	windows	rgod
2012-08-07	Alligra Calligra – Heap Buffer Overflow	remote	linux	Charlie Miller
2012-08-07	Getsimple CMS 3.1.2 – ‘path’ Local File Inclusion	webapps	php	PuN!Sh3r
2012-08-07	PBBoard – Authentication Bypass	webapps	php	i-Hmx
2012-08-07	TCExam 11.2.x – ‘/admin/code/tce_edit_question.php?subject_module_id’ SQL Injection	webapps	php	Chris Cooper
2012-08-07	TCExam 11.2.x – ‘/admin/code/tce_edit_answer.php’ Multiple SQL Injections	webapps	php	Chris Cooper
2012-08-07	Dir2web – ‘/system/src/dispatcher.php?oid’ SQL Injection	webapps	php	Daniel Correa
2012-08-07	Zoho BugTracker – Multiple Persistent Cross-Site Scripting Vulnerabilities	webapps	windows	LiquidWorm
2012-08-06	Oracle AutoVue – ActiveX Control SetMarkupMode Buffer Overflow (Metasploit)	remote	windows	Metasploit
2012-08-06	CoolPlayer+ Portable 2.19.2 – Local Buffer Overflow (ASLR Bypass)	local	windows	Robert Larsen
2012-08-06	AOL Products downloadUpdater2 Plugin – ‘SRC’ Remote Code Execution	dos	windows	rgod
2012-08-06	Joomla! Component com_photo – Multiple SQL Injections	webapps	php	Chokri Ben Achor
2012-08-06	Worksforweb iAuto – Multiple Cross-Site Scripting / HTML Injection Vulnerabilities	webapps	multiple	Benjamin Kunz Mejri
2012-08-06	YT-Videos Script – ‘id’ SQL Injection	webapps	php	3spi0n
2012-08-05	PolarisCMS – ‘WebForm_OnSubmit()’ Cross-Site Scripting	webapps	asp	Gjoko Krstic
2012-08-05	WordPress Plugin Effective Lead Management 3.0.0 – Persistent Cross-Site Scripting	webapps	php	Chris Kellum
2012-08-05	Tickets CAD 2.20G – Multiple Vulnerabilities	webapps	php	chap0
2012-08-05	CoolPlayer Portable 2.19.2 – Local Buffer Overflow (ASLR Bypass) (2)	local	windows	pole
2012-08-05	Islamnt Islam Forum Script 1.2 – Blind SQL Injection	webapps	php	s3n4t00r
2012-08-05	Mibew Messenger 1.6.4 – ‘threadid’ SQL Injection	webapps	php	Ucha Gobejishvili
2012-08-04	Open Constructor – ‘confirm.php?q’ Cross-Site Scripting	webapps	php	Lorenzo Cantoni
2012-08-04	Open Constructor – ‘/data/file/edit.php?result’ Cross-Site Scripting	webapps	php	Lorenzo Cantoni
2012-08-04	Open Constructor – ‘/users/users.php?keyword’ Cross-Site Scripting	webapps	php	Lorenzo Cantoni
2012-08-04	Wiki Web Help – ‘configpath’ Remote File Inclusion	webapps	php	L0n3ly-H34rT
2012-08-03	Elefant CMS – ‘id’ Cross-Site Scripting	webapps	php	PuN!Sh3r
2012-08-03	FreeBSD – SCTP Remote NULL Ptr Dereference Denial of Service	dos	freebsd	Shaun Colley
2012-08-03	ntop – ‘arbfile’ Cross-Site Scripting	webapps	multiple	Marcos Garcia
2012-08-03	Zenoss 3 – showDaemonXMLConfig Command Execution (Metasploit)	remote	unix	Metasploit
2012-08-03	Dell SonicWALL Scrutinizer 9 – SQL Injection (Metasploit)	remote	windows	Metasploit
2012-08-03	Cisco Linksys PlayerPT – ActiveX Control SetSource sURL argument Buffer Overflow (Metasploit)	remote	windows	Metasploit
2012-08-02	Joomla! Component com_joomgalaxy 1.2.0.4 – Multiple Vulnerabilities	webapps	php	D4NB4R