Exploits

日期	标题	类型	平台	作者
2012-07-16	EmbryoCore CMS 1.03 – ‘loadcss.php’ Multiple Directory Traversal Vulnerabilities	webapps	php	Sammy FORGIT
2012-07-16	Rama Zeiten CMS – ‘download.php’ Remote File Disclosure	webapps	php	Sammy FORGIT
2012-07-16	web@all – ‘name’ Cross-Site Scripting	webapps	php	Sammy FORGIT
2012-07-16	WordPress Plugin Post Recommendations – ‘abspath’ Remote File Inclusion	webapps	php	Sammy FORGIT
2012-07-16	Simple Machines 2.0.2 – Multiple HTML Injection Vulnerabilities	webapps	php	Benjamin Kunz Mejri
2012-07-16	PBBoard CMS 2.1.4 – Multiple Vulnerabilities	webapps	php	Vulnerability-Lab
2012-07-16	DomsHttpd 1.0 – Remote Denial of Service	dos	windows	Jean Pascal Pereira
2012-07-15	Elite Bulletin Board – Multiple SQL Injections	webapps	php	ToXiC
2012-07-14	Siemens Simatic S7-1200 – CPU START/STOP Module (Metasploit)	remote	hardware	Dillon Beresford
2012-07-14	Siemens Simatic S7-300 – PLC Remote Memory Viewer (Metasploit)	remote	hardware	Dillon Beresford
2012-07-14	Siemens Simatic S7-300/400 – CPU START/STOP Module (Metasploit)	remote	hardware	Dillon Beresford
2012-07-14	Joomla! Component com_osproperty 2.0.2 – Unrestricted Arbitrary File Upload	webapps	php	D4NB4R
2012-07-14	Shopware 3.5 – SQL Injection	webapps	php	Kataklysmos
2012-07-13	WordPress Plugin Generic – Arbitrary File Upload	webapps	php	KedAns-Dz
2012-07-13	Magento eCommerce – Local File Disclosure	webapps	php	SEC Consult
2012-07-13	Joomla! Component com_ksadvertiser – Remote File / Bypass Upload	webapps	php	D4NB4R
2012-07-13	WordPress Plugin Resume Submissions & Job Postings 2.5.1 – Unrestricted Arbitrary File Upload	webapps	php	Chris Kellum
2012-07-13	webpagetest 2.6 – Multiple Vulnerabilities	webapps	php	dun
2012-07-12	Reserve Logic 1.2 Booking CMS – Multiple Vulnerabilities	webapps	php	Vulnerability-Lab
2012-07-12	TP-Link Gateway 3.12.4 – Multiple Vulnerabilities	webapps	hardware	Vulnerability-Lab
2012-07-12	WaveSurfer 1.8.8p4 – Memory Corruption (PoC)	dos	windows	Jean Pascal Pereira
2012-07-12	Lc Flickr Carousel 1.0 – Local File Disclosure	webapps	php	GoLd_M
2012-07-12	Phonalisa – Multiple HTML Injection / Cross-Site Scripting Vulnerabilities	webapps	php	Benjamin Kunz Mejri
2012-07-12	eCan 0.1 – Local File Disclosure	webapps	php	GoLd_M
2012-07-12	House Style 0.1.2 – ‘readfile()’ Local File Disclosure	webapps	php	GoLd_M
2012-07-12	Hastymail 2.1.1 RC1 – Command Injection (Metasploit)	webapps	php	Metasploit
2012-07-12	Microsoft Internet Explorer 9 / SharePoint / Lync – toStaticHTML HTML Sanitizing Bypass (MS12-037/MS12-039/MS12-050)	dos	windows	Adi Cohen
2012-07-12	ZipItFast PRO 3.0 – Local Heap Overflow	local	windows	b33f
2012-07-11	Kajona – ‘getAllPassedParams()’ Multiple Cross-Site Scripting Vulnerabilities	webapps	php	High-Tech Bridge SA
2012-07-11	AdminStudio – ‘LaunchHelp.dll’ ActiveX Arbitrary Code Execution (Metasploit)	remote	windows	Metasploit
2012-07-11	Java Applet – Field Bytecode Verifier Cache Remote Code Execution (Metasploit)	remote	java	Metasploit
2012-07-10	Checkpoint Abra – Multiple Vulnerabilities	dos	windows	Andrey Komarov
2012-07-10	WordPress Plugin WP-Predict 1.0 – Blind SQL Injection	webapps	php	Chris Kellum
2012-07-09	Flogr – ‘tag’ Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Nafsh
2012-07-09	MGB – Multiple Cross-Site Scripting / SQL Injections	webapps	php	Stefan Schurtz
2012-07-09	WebsitePanel – ‘ReturnUrl’ Open Redirection	webapps	asp	Anastasios Monachos
2012-07-09	Python – Untrusted Search Path/Code Execution	local	linux	rogueclown
2012-07-09	Umbraco CMS – Remote Command Execution (Metasploit)	webapps	windows	Metasploit
2012-07-09	Basilic 1.5.14 – ‘diff.php’ Arbitrary Command Execution (Metasploit)	webapps	php	Metasploit
2012-07-09	Tiki Wiki CMS Groupware 8.3 – ‘Unserialize()’ PHP Code Execution (Metasploit)	webapps	php	Metasploit
2012-07-06	Event Script PHP 1.1 CMS – Multiple Vulnerabilities	webapps	php	Vulnerability-Lab
2012-07-06	WordPress Plugin SocialFit – ‘msg’ Cross-Site Scripting	webapps	php	Sammy FORGIT
2012-07-06	sflog! 1.00 – Multiple Vulnerabilities	webapps	php	dun
2012-07-06	ALLMediaServer 0.8 – Remote Overflow (SEH)	remote	windows	motaz reda
2012-07-06	Poison Ivy 2.3.2 (C2 Server) – Remote Buffer Overflow (Metasploit)	remote	windows	Metasploit
2012-07-06	Apache Sling – Denial of Service	dos	multiple	IOactive
2012-07-06	sflog! – ‘section’ Local File Inclusion	webapps	php	dun
2012-07-06	WordPress Plugin Knews Multilingual Newsletters – Cross-Site Scripting	webapps	php	Sammy FORGIT
2012-07-06	WordPress Plugin church_admin – ‘id’ Cross-Site Scripting	webapps	php	Sammy FORGIT
2012-07-06	Webmatic 3.1.1 – Blind SQL Injection	webapps	php	High-Tech Bridge SA