Exploits

日期	标题	类型	平台	作者
2012-06-27	Zend Framework < 2.0.0 beta4 < 1.12 RC1 < 1.11.11 - Local File Disclosure	webapps	php	SEC Consult
2012-06-27	Symantec pcAnywhere 12.5.0 – ‘Login’ / ‘Password’ Remote Buffer Overflow	remote	windows	S2 Crew
2012-06-27	symantec Web gateway 5.0.2.8 – Multiple Vulnerabilities	webapps	linux	S2 Crew
2012-06-26	DigPHP – ‘dig.php’ Script Remote File Disclosure	webapps	php	Ryuzaki Lawlet
2012-06-26	SugarCRM CE 6.3.1 – ‘Unserialize()’ PHP Code Execution (Metasploit)	webapps	php	Metasploit
2012-06-26	Western Digital’s WD TV Live SMP/Hub – Privilege Escalation	remote	hardware	Wolfgang Borst
2012-06-26	Google Chrome 19.0.1084.52 – ‘metro_driver.dll’ DLL Loading Arbitrary Code Execution	remote	windows	Moshe Zioni
2012-06-26	Apple QuickTime – QuickTime.util.QTByteObject Initialization Security Checks Bypass	local	windows	Security Explorations
2012-06-26	WordPress Plugin Website FAQ 1.0 – SQL Injection	webapps	php	Chris Kellum
2012-06-25	Parodia 6.8 – ’employer-profile.asp’ SQL Injection	webapps	asp	Carlos Mario Penagos Hollmann
2012-06-25	Able2Extract and Able2Extract Server 6.0 – Memory Corruption	dos	windows	Carlos Mario Penagos Hollmann
2012-06-25	Slimpdf Reader 1.0 – Memory Corruption	dos	windows	Carlos Mario Penagos Hollmann
2012-06-25	Kingview Touchview 6.53 – Multiple Heap Overflow Vulnerabilities	dos	windows	Carlos Mario Penagos Hollmann
2012-06-25	Kingview Touchview 6.53 – EIP Overwrite	dos	windows	Carlos Mario Penagos Hollmann
2012-06-25	Apple iTunes 10 – Extended M3U Stack Buffer Overflow (Metasploit)	remote	windows	Metasploit
2012-06-25	Umapresence – Local File Inclusion / Arbitrary File Deletion	webapps	php	Sammy FORGIT
2012-06-25	Winamp 5.13 – ‘.m3u’ File Exception Handling Remote Denial of Service	dos	windows	Dark-Puzzle
2012-06-25	FCKEditor Core – ‘Editor ‘spellchecker.php’ Cross-Site Scripting	webapps	php	Emilio Pinna
2012-06-25	Adobe Flash Player – Object Type Confusion (Metasploit)	remote	windows	Metasploit
2012-06-25	Drupal Module Drag & Drop Gallery 6.x-1.5 – ‘upload.php’ Arbitrary File Upload	webapps	php	Sammy FORGIT
2012-06-25	WordPress Plugin Fancy Gallery 1.2.4 – Arbitrary File Upload	webapps	php	Sammy FORGIT
2012-06-25	Able2Doc and Able2Doc Professional 6.0 – Memory Corruption	dos	windows	Carlos Mario Penagos Hollmann
2012-06-24	UCCASS 1.8.1 – Blind SQL Injection	webapps	php	dun
2012-06-24	IrfanView 4.33 – ‘.DJVU’ Image Processing Heap Overflow	dos	windows	Francis Provencher
2012-06-23	SugarCRM CE 6.3.1 – ‘Unserialize()’ PHP Code Execution	webapps	php	EgiX
2012-06-23	WordPress Plugin Flip Book – ‘PHP.php’ Arbitrary File Upload	webapps	php	Sammy FORGIT
2012-06-23	SilverStripe CMS Pixlr Image Editor – ‘upload.php’ Arbitrary File Upload	webapps	php	Sammy FORGIT
2012-06-23	Amazon S3 Uploadify Script – ‘Uploadify.php’ Arbitrary File Upload	webapps	php	Sammy FORGIT
2012-06-22	ACDSee PRO 5.1 – ‘.CUR’ Image Processing Heap Overflow	dos	windows	Francis Provencher
2012-06-22	ACDSee PRO 5.1 – ‘.gif’ Image Processing Heap Overflow	dos	windows	Francis Provencher
2012-06-22	ACDSee PRO 5.1 – ‘.RLE’ Image Processing Heap Overflow	dos	windows	Francis Provencher
2012-06-22	ACDSee PRO 5.1 – ‘.PCT’ Image Processing Heap Overflow	dos	windows	Francis Provencher
2012-06-22	CMS Lokomedia – Multiple Cross-Site Scripting / HTML Injection Vulnerabilities	webapps	php	the_cyber_nuxbie
2012-06-22	LimeSurvey 1.92+ build120620 – Multiple Vulnerabilities	webapps	php	dun
2012-06-22	Cotonti – ‘admin.php’ SQL Injection	webapps	php	AkaStep
2012-06-22	agora project 2.13.1 – Multiple Vulnerabilities	webapps	php	Chris Russell
2012-06-22	Qutecom SoftPhone 2.2.1 – Heap Overflow Crash (Denial of Service) (PoC)	dos	windows	Debasish Mandal
2012-06-22	Lattice Diamond Programmer 1.4.2 – Buffer Overflow (PoC)	dos	windows	Core Security
2012-06-22	SoftPerfect Bandwidth Manager 2.9.10 – Authentication Bypass	webapps	windows	Gitsnik
2012-06-22	XnView 1.98.8 – ‘.tiff’ Image Processing Heap Overflow (2)	dos	windows	Francis Provencher
2012-06-22	XnView 1.98.8 – ‘.tiff’ Image Processing Heap Overflow (1)	dos	windows	Francis Provencher
2012-06-22	XnView 1.98.8 – ‘.PCT’ Image Processing Heap Overflow	dos	windows	Francis Provencher
2012-06-22	XnView 1.98.8 – ‘.gif’ Image Processing Heap Overflow	dos	windows	Francis Provencher
2012-06-21	Joomla! Component com_szallasok – ‘id’ SQL Injection	webapps	php	CoBRa_21
2012-06-21	Commentics 2.0 – Multiple Vulnerabilities	webapps	php	Jean Pascal Pereira
2012-06-21	traq 2.3.5 – Multiple Vulnerabilities	webapps	php	AkaStep
2012-06-21	URL Hunter – Local Buffer Overflow (DEP Bypass)	local	windows	Ayrbyte
2012-06-21	IBM System Storage DS Storage Manager Profiler – Multiple Vulnerabilities	webapps	windows	LiquidWorm
2012-06-21	Adiscan LogAnalyzer 3.4.3 – Cross-Site Scripting	webapps	php	Sooraj K.S
2012-06-21	Apple iTunes 10.6.1.7 – Extended m3u Stack Buffer Overflow (Metasploit)	remote	windows	Rh0