Exploits

日期	标题	类型	平台	作者
2012-08-02	WordPress Theme ShopperPress – SQL Injection / Cross-Site Scripting	webapps	php	Benjamin Kunz Mejri
2012-08-02	PHP 5.4.3 – PDO Memory Access Violation Denial of Service	dos	php	0x721427D8
2012-08-02	Nvidia Linux Driver – Local Privilege Escalation	local	linux	anonymous
2012-08-02	Mahara 1.4.1 – Multiple Cross-Site Scripting / HTML Injection Vulnerabilities	webapps	php	anonymous
2012-08-02	am4ss Support System 1.2 – PHP Code Injection	webapps	php	i-Hmx
2012-08-02	Barracuda Email Security Service – Multiple HTML Injection Vulnerabilities	remote	hardware	Benjamin Kunz Mejri
2012-08-02	am4ss 1.2 – Multiple Vulnerabilities	webapps	php	s3n4t00r
2012-08-02	Joomla! Component com_joomgalaxy 1.2.0.4 – Multiple Vulnerabilities	webapps	php	D4NB4R
2012-08-02	Microsoft Internet Explorer – Fixed Table Col Span Heap Overflow (MS12-037) (Metasploit)	remote	windows	Metasploit
2012-08-02	WebPageTest – Arbitrary ‘.PHP’ File Upload (Metasploit)	webapps	php	Metasploit
2012-08-01	ManageEngine Applications Manager – Multiple Cross-Site Scripting / SQL Injections	webapps	java	Ibrahim El-Sayed
2012-08-01	Joomla! Component com_movm – SQL Injection	webapps	php	D4NB4R
2012-08-01	Distimo Monitor – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Benjamin Kunz Mejri
2012-08-01	Joomla! Component com_niceajaxpoll 1.3.0 – SQL Injection	webapps	php	Patrick de Brouwer
2012-08-01	ManageEngine Applications Manager – Multiple SQL Injections	webapps	java	Ibrahim El-Sayed
2012-08-01	eGlibc – Signedness Code Execution	dos	linux	c0ntex
2012-08-01	tekno.Portal 0.1b – ‘link.php’ SQL Injection	webapps	php	Socket_0x03
2012-08-01	WordPress Plugin G-Lock Double Opt-in Manager – SQL Injection	webapps	php	BEASTIAN
2012-08-01	ManageEngine Application Manager 10 – Multiple Vulnerabilities	webapps	php	Vulnerability-Lab
2012-08-01	ManageEngine Mobile Application Manager 10 – SQL Injection	webapps	php	Vulnerability-Lab
2012-08-01	pBot – Remote Code Execution	remote	php	bwall
2012-07-31	Limny – ‘index.php’ Multiple SQL Injections	webapps	php	L0n3ly-H34rT
2012-07-31	Dr. Web Control Center 6.00.3.201111300 – Cross-Site Scripting	webapps	windows	Oliver Karow
2012-07-31	Microsoft Office SharePoint Server 2007 – Remote Code Execution (MS10-104) (Metasploit)	remote	windows	Metasploit
2012-07-31	DataWatch Monarch Business Intelligence – Multiple Input Validation Vulnerabilities	webapps	jsp	Raymond Rizk
2012-07-30	Zenoss 3.2.1 – Multiple Vulnerabilities	webapps	multiple	Brendan Coles
2012-07-30	Zenoss 3.2.1 – (Authenticated) Remote Command Execution	webapps	multiple	Brendan Coles
2012-07-30	Symantec Web Gateway 5.0.3.18 – ‘deptUploads_data.php?groupid’ Blind SQL Injection	webapps	php	Kc57
2012-07-30	Scrutinizer 9.0.1.19899 – HTTP Authentication Bypass	webapps	cgi	Mario Ceballos
2012-07-30	Scrutinizer 9.0.1.19899 – Arbitrary File Upload	webapps	php	Mario Ceballos
2012-07-30	Scrutinizer 9.0.1.19899 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Mario Ceballos
2012-07-29	eNdonesia – ‘cid’ SQL Injection	webapps	php	Crim3R
2012-07-29	JW Player – ‘playerready’ Cross-Site Scripting	webapps	php	MustLive
2012-07-29	httpdx 1.5.4 – Remote Heap Overflow	remote	windows	st3n
2012-07-29	ocPortal 7.1.5 – ‘redirect’ Open Redirection	webapps	php	Aung Khant
2012-07-28	phpBB – Multiple SQL Injections	webapps	php	HauntIT
2012-07-27	Mini-stream RM-MP3 Converter 3.1.2.1.2010.03.30 – Local Buffer Overflow (ASLR + DEP Bypass)	local	windows	Ptrace Security
2012-07-27	Symantec Web Gateway 5.0.2.18 – ‘pbcontrol.php’ Command Injection (Metasploit)	remote	linux	Metasploit
2012-07-27	Cisco Linksys PlayerPT – ActiveX Control Buffer Overflow (Metasploit)	remote	windows	Metasploit
2012-07-27	CuteFlow 2.11.2 – Arbitrary File Upload (Metasploit)	webapps	php	Metasploit
2012-07-27	Photodex ProShow Producer 5.0.3256 – load File Handling Buffer Overflow (Metasploit)	local	windows	Metasploit
2012-07-26	Linux Kernel 2.6.x – ‘rds_recvmsg()’ Local Information Disclosure	local	linux	Jay Fenlason
2012-07-25	Joomla! Component Odudeprofile 2.8 – ‘profession’ SQL Injection	webapps	php	Daniel Barragan
2012-07-25	ISC DHCP 4.x – Multiple Denial of Service Vulnerabilities	dos	linux	Markus Hietava
2012-07-25	Barcodewiz ‘Barcodewiz.dll’ ActiveX Control – ‘Barcode’ Method Remote Buffer Overflow	remote	windows	coolkaveh
2012-07-25	tekno.Portal 0.1b – ‘anket.php’ SQL Injection	webapps	php	Socket_0x03
2012-07-24	phpProfiles – Multiple Vulnerabilities	webapps	php	L0n3ly-H34rT
2012-07-24	Symantec Web Gateway 5.0.3.18 – ‘pbcontrol.php’ Root Remote Code Execution	remote	linux	muts
2012-07-24	Zabbix 2.0.1 – Session Extractor	webapps	php	muts
2012-07-24	WordPress Plugin Front End Upload 0.5.4.4 – Arbitrary ‘.PHP’ File Upload	webapps	php	Chris Kellum