Exploits

日期	标题	类型	平台	作者
2012-06-20	Coppermine Photo Gallery – ‘index.php’ Script SQL Injection	webapps	php	Taurus Omar
2012-06-20	Adobe Flash Player – AVM Verification Logic Array Indexing Code Execution (Metasploit)	remote	windows	Metasploit
2012-06-20	Commentics – ‘index.php’ Cross-Site Scripting	webapps	php	Jean Pascal Pereira
2012-06-20	WordPress Plugin Schreikasten 0.14.13 – Cross-Site Scripting	webapps	php	Henry Hoggard
2012-06-20	web@all – Cross-Site Scripting	webapps	php	High-Tech Bridge
2012-06-20	Sysax 5.62 – Admin Interface Local Buffer Overflow	local	windows	Craig Freyman
2012-06-19	e107 Filedownload Plugin – Arbitrary File Upload / Remote File Disclosure	webapps	php	Sammy FORGIT
2012-06-19	iBoutique eCommerce 4.0 – Multiple Web Vulnerabilities	webapps	php	Vulnerability-Lab
2012-06-19	AdaptCMS 2.0.2 – ‘index.php’ Script Cross-Site Scripting	webapps	php	indoushka
2012-06-19	EZHomeTech EzServer 6.4.017 – Remote Stack Buffer Overflow (Metasploit)	remote	windows	Metasploit
2012-06-19	e107 Image Gallery Plugin – ‘name’ Remote File Disclosure	webapps	php	Sammy FORGIT
2012-06-19	Samsung AllShare 2.1.1.0 – Null Pointer Dereference	dos	windows	Luigi Auriemma
2012-06-19	e107 Hupsi_fancybox Plugin – ‘Uploadify.php’ Arbitrary File Upload	webapps	php	Sammy FORGIT
2012-06-19	Airlock WAF 4.2.4 – Overlong UTF-8 Sequence Bypass	dos	multiple	SEC Consult
2012-06-19	CMS Balitbang – Multiple HTML Injection / Cross-Site Scripting Vulnerabilities	webapps	php	TheCyberNuxbie
2012-06-19	HP Data Protector Client – EXEC_CMD Remote Code Execution	remote	windows	Ben Turner
2012-06-18	QNAP Turbo NAS 3.6.1 Build 0302T – Multiple Vulnerabilities	webapps	hardware	Sense of Security
2012-06-18	VANA CMS – ‘index.php’ Script SQL Injection	webapps	php	Black Hat Group
2012-06-18	WordPress Plugin Wp-ImageZoom – ‘file’ Remote File Disclosure	webapps	php	Sammy FORGIT
2012-06-18	WordPress Plugin LB Mixed Slideshow – ‘upload.php’ Arbitrary File Upload	webapps	php	Sammy FORGIT
2012-06-18	Multiple WordPress Themes – ‘upload.php’ Arbitrary File Upload	webapps	php	Sammy FORGIT
2012-06-18	EZHomeTech Ezserver 6.4 – Remote Stack Overflow	remote	windows	modpr0be
2012-06-18	Total Video Player 1.31 – ‘.m3u’ Crash (PoC)	dos	windows	0dem
2012-06-18	MyTickets 1.x < 2.0.8 - Blind SQL Injection	webapps	php	al-swisre
2012-06-17	PHP 5.4.3 – apache_request_headers Function Buffer Overflow (Metasploit)	remote	windows	Metasploit
2012-06-17	MediaWiki 1.x – ‘uselang’ Cross-Site Scripting	webapps	php	anonymous
2012-06-17	Joomla! Component hwdVideoShare – ‘flash_upload.php’ Arbitrary File Upload	webapps	php	Sammy FORGIT
2012-06-17	Funeral Script PHP – Cross-Site Scripting / SQL Injection	webapps	php	snup
2012-06-17	Lattice Semiconductor PAC-Designer 6.21 – Symbol Value Buffer Overflow (Metasploit)	local	windows	Metasploit
2012-06-16	iScripts EasyCreate 2.0 – Multiple Vulnerabilities	webapps	php	Vulnerability-Lab
2012-06-16	Nuked Klan SP CMS 4.5 – SQL Injection	webapps	php	Vulnerability-Lab
2012-06-16	WordPress Plugin Automatic 2.0.3 – SQL Injection	webapps	php	nick58
2012-06-16	Microsoft XML Core Services – MSXML Uninitialized Memory Corruption (MS12-043) (Metasploit)	remote	windows	Metasploit
2012-06-16	Huawei HG866 – Authentication Bypass	webapps	hardware	hkm
2012-06-16	vBSEO – ‘u’ Cross-Site Scripting	webapps	php	MegaMan
2012-06-16	Karafun Player 1.20.86 – ‘.m3u’ Crash (PoC)	dos	windows	Styxosaurus
2012-06-16	XnView – ‘.FlashPix’ Image Processing Heap Overflow	dos	windows	Francis Provencher
2012-06-16	Webify (Multiple Products) – Multiple HTML Injection / Local File Inclusions	webapps	php	snup
2012-06-16	XnView – ‘.ECW’ Image Processing Heap Overflow	dos	windows	Francis Provencher
2012-06-16	Simple Document Management System 1.1.5 – Multiple SQL Injections	webapps	php	JosS
2012-06-16	XnView – ‘.RAS’ Image Processing Heap Overflow	dos	windows	Francis Provencher
2012-06-16	News Script PHP 1.2 – Multiple Vulnerabilities	webapps	php	Vulnerability-Lab
2012-06-16	Joomla! Component Maian Media – ‘uploadhandler.php’ Arbitrary File Upload	webapps	php	Sammy FORGIT
2012-06-16	PHP Decoda 3.3.1 – Local File Inclusion	webapps	php	Number 7
2012-06-16	webo site speedup 1.6.1 – Multiple Vulnerabilities	webapps	php	dun
2012-06-15	ADICO – ‘index.php’ Script SQL Injection	webapps	php	Ibrahim El-Sayed
2012-06-15	Useresponse 1.0.2 – Privilege Escalation / Remote Code Execution	webapps	php	mr_me
2012-06-15	Joomla! Component JCal Pro Calendar – SQL Injection	webapps	php	Taurus Omar
2012-06-15	WordPress Plugin ORGanizer – Multiple Vulnerabilities	webapps	php	MustLive
2012-06-15	ComSndFTP 1.3.7 Beta – USER Format String (Write4) (Metasploit)	remote	windows	Metasploit