Exploits

日期	标题	类型	平台	作者
2012-07-05	WordPress Plugin PHPFreeChat – ‘url’ Cross-Site Scripting	webapps	php	Sammy FORGIT
2012-07-05	Solar FTP Server – Denial of Service	dos	windows	coolkaveh
2012-07-05	Linux Kernel 3.2.24 – ‘fs/eventpoll.c’ Local Denial of Service	dos	linux	Yurij M. Plotnikov
2012-07-05	CLscript CMS 3.0 – Multiple Vulnerabilities	webapps	php	Vulnerability-Lab
2012-07-05	Freeside SelfService CGI/API 2.3.3 – Multiple Vulnerabilities	webapps	php	Vulnerability-Lab
2012-07-05	Guestbook Scripts PHP 1.5 – Multiple Vulnerabilities	webapps	php	Vulnerability-Lab
2012-07-05	IBM Rational ClearQuest CQOle – Remote Code Execution (Metasploit)	remote	windows	Metasploit
2012-07-04	Webify Link Directory – SQL Injection	webapps	php	Daniel Godoy
2012-07-04	Tiki Wiki CMS Groupware 8.3 – ‘Unserialize()’ PHP Code Execution	webapps	php	EgiX
2012-07-04	WordPress Plugin MoodThingy Widget 0.8.7 – Blind SQL Injection	webapps	php	Chris Kellum
2012-07-04	Classified Ads Script PHP – ‘admin.php’ Multiple SQL Injections	webapps	php	snup
2012-07-04	.NET Framework – Tilde Character Denial of Service	dos	windows	Soroush Dalili
2012-07-03	Photodex ProShow Producer 5.0.3256 – Buffer Overflow	dos	windows	Julien Ahrens
2012-07-03	phpMyBackupPro 2.2 – Local File Inclusion	webapps	php	dun
2012-07-03	CLscript Classified Script 3.0 – SQL Injection	webapps	php	Daniel Godoy
2012-07-03	WordPress Plugin custom tables – ‘key’ Cross-Site Scripting	webapps	php	Sammy FORGIT
2012-07-03	gpEasy CMS Minishop 1.5 Plugin – Persistent Cross-Site Scripting	webapps	php	Carlos Mario Penagos Hollmann
2012-07-03	plow – ‘.plowrc’ File Buffer Overflow	dos	multiple	Jean Pascal Pereira
2012-07-03	gnome-terminal (vte) VteTerminal – Escape Sequence Parsing Remote Denial of Service	dos	linux	Kevin Fenzi
2012-07-03	PHP MBB – Cross-Site Scripting / SQL Injection	webapps	php	TheCyberNuxbie
2012-07-02	WANGKONGBAO CNS-1000 UTM IPS-FW – Directory Traversal (Metasploit)	webapps	hardware	Dillon Beresford
2012-07-02	Microsoft IIS – Short File/Folder Name Disclosure	webapps	windows	Soroush Dalili
2012-07-02	WordPress Plugin Backup 2.0.1 – Information Disclosure	webapps	php	Stephan Knauss
2012-07-02	python-wrapper – Untrusted Search Path/Code Execution	local	linux	ShadowHatesYou
2012-07-02	Getsimple CMS Items Manager Plugin – ‘PHP.php’ Arbitrary File Upload	webapps	php	Sammy FORGIT
2012-07-02	Zoom Player – ‘.avi’ Divide-by-Zero Denial of Service	dos	windows	Dark-Puzzle
2012-07-01	BSD – ‘TelnetD’ Remote Command Execution (2)	remote	bsd	kingcope
2012-07-01	Emesene 2.12.5 – Password Disclosure	local	linux	Daniel Godoy
2012-07-01	IrfanView JPEG2000 4.3.2.0 – jp2 Stack Buffer Overflow (Metasploit)	local	windows	Metasploit
2012-07-01	HP Data Protector – Create New Folder Buffer Overflow (Metasploit)	remote	windows	Metasploit
2012-06-30	GIMP 2.8.0 – ‘.FIT’ File Format Denial of Service	dos	multiple	Joseph Sheridan
2012-06-30	WordPress Plugin Paid Business Listings 1.0.2 – Blind SQL Injection	webapps	php	Chris Kellum
2012-06-30	IrfanView JLS Formats PlugIn – Heap Overflow	dos	windows	Joseph Sheridan
2012-06-29	SWFupload – ‘movieName’ Cross-Site Scripting	webapps	multiple	Nathan Partlan
2012-06-29	LIOOSYS CMS – SQL Injection / Information Disclosure	webapps	php	MustLive
2012-06-29	JAKCMS PRO 2.2.6 – ‘uploader.php’ Arbitrary File Upload	webapps	php	Sammy FORGIT
2012-06-29	PowerNet Twin Client 8.9 – ‘RFSync 1.0.0.1’ Crash (PoC)	dos	windows	Luigi Auriemma
2012-06-29	specview 2.5 build 853 – Directory Traversal	webapps	windows	Luigi Auriemma
2012-06-29	PC Tools Firewall Plus 7.0.0.123 – Local Denial of Service	dos	windows	0in
2012-06-29	phpmoneybooks 1.03 – Persistent Cross-Site Scripting	webapps	php	chap0
2012-06-28	Mobile USB Drive HD – Multiple Local File Inclusion / Arbitrary File Upload Vulnerabilities	webapps	hardware	Benjamin Kunz Mejri
2012-06-28	TEMENOS T24 – Multiple Cross-Site Scripting Vulnerabilities	webapps	jsp	Rehan Ahmed
2012-06-28	PHP-Fusion Advanced MP3 Player Infusion – ‘upload.php’ Arbitrary File Upload	webapps	php	Sammy FORGIT
2012-06-28	Real Networks RealPlayer – ‘.avi’ File Divide-by-Zero Denial of Service	dos	windows	Dark-Puzzle
2012-06-28	Openfire Server 3.6.0a – Admin Console Authentication Bypass (Metasploit)	webapps	jsp	Metasploit
2012-06-28	VideoLAN VLC Media Player 2.0.1 – ‘.avi’ File Denial of Service	dos	windows	Dark-Puzzle
2012-06-28	Apple QuickTime – TeXML Stack Buffer Overflow (Metasploit)	local	windows	Metasploit
2012-06-28	webERP 4.08.1 – Local/Remote File Inclusion	webapps	php	dun
2012-06-27	Schoolhos CMS – HTML Injection	webapps	php	the_cyber_nuxbie
2012-06-27	Sielco Sistemi Winlog 2.07.16 – Multiple Vulnerabilities	dos	windows	Luigi Auriemma