Exploits

日期	标题	类型	平台	作者
2012-06-05	Apache Struts 2.2.1.1 – Remote Command Execution (Metasploit)	remote	multiple	Metasploit
2012-06-04	Mnews 1.1 – ‘view.php’ SQL Injection	webapps	php	WhiteCollarGroup
2012-06-04	Hexamail Server 4.4.5 – Persistent Cross-Site Scripting	webapps	windows	modpr0be
2012-06-04	Sysax 5.60 – Create SSL Certificate Buffer Overflow	local	windows	Craig Freyman
2012-06-03	PHP 5.3.10 – ‘spl_autoload_register()’ Local Denial of Service	dos	php	Yakir Wizman
2012-06-03	PHP 5.3.10 – ‘spl_autoload()’ Local Denial of Service	dos	php	Yakir Wizman
2012-06-03	TinyCMS 1.3 – ‘/admin/admin.php?do’ Traversal Local File Inclusion	webapps	php	KedAns-Dz
2012-06-03	Log1 CMS – ‘writeInfo()’ PHP Code Injection (Metasploit)	webapps	php	Metasploit
2012-06-03	TinyCMS 1.3 – ‘index.php?page’ Traversal Local File Inclusion	webapps	php	KedAns-Dz
2012-06-03	TinyCMS 1.3 – Arbitrary File Upload / Cross-Site Request Forgery	webapps	php	KedAns-Dz
2012-06-03	Ignite Solutions CMS – ‘car-details.php’ SQL Injection	webapps	php	Am!r
2012-06-03	AdaptCMS 2.0.2 TinyURL Plugin – ‘admin.php’ Multiple SQL Injections	webapps	php	KedAns-Dz
2012-06-03	WordPress Plugin Picturesurf Gallery – ‘upload.php’ Arbitrary File Upload	webapps	php	Sammy FORGIT
2012-06-03	AdaptCMS 2.0.2 TinyURL Plugin – ‘index.php?id’ SQL Injection	webapps	php	KedAns-Dz
2012-06-03	Vanilla Forums 2.0.18.4 – Tagging Persistent Cross-Site Scripting	webapps	php	Henry Hoggard
2012-06-03	vanilla forums poll plugin 0.9 – Persistent Cross-Site Scripting	webapps	php	Henry Hoggard
2012-06-03	PHP 5.3.10 – ‘spl_autoload_call()’ Local Denial of Service	dos	php	Yakir Wizman
2012-06-02	Vanilla Forum Tagging Plugin Enchanced 1.0.1 – Persistent Cross-Site Scripting	webapps	php	Henry Hoggard
2012-06-02	GIMP script-fu – Server Buffer Overflow (Metasploit)	remote	windows	Metasploit
2012-06-02	IrfanView 4.33 – Format PlugIn ‘.TTF’ File Parsing Stack Overflow	dos	windows	Francis Provencher
2012-06-01	VoipNow Professional 2.5.3 – ‘nsextt’ Cross-Site Scripting	webapps	php	Aboud-el
2012-06-01	Membris 2.0.1 – Multiple Vulnerabilities	webapps	php	Dr.abolalh
2012-06-01	Citrix Provisioning Services 5.6 SP1 – Streamprocess Opcode 0x40020002 Buffer Overflow (Metasploit)	remote	windows	Metasploit
2012-06-01	Citrix Provisioning Services 5.6 SP1 – Streamprocess Opcode 0x40020006 Buffer Overflow (Metasploit)	remote	windows	Metasploit
2012-06-01	Citrix Provisioning Services 5.6 SP1 – Streamprocess Opcode 0x40020004 Buffer Overflow (Metasploit)	remote	windows	Metasploit
2012-06-01	4PSA VoIPNow Professional 2.5.3 – Multiple Vulnerabilities	webapps	php	Aboud-el
2012-06-01	IrfanView 4.33 – Format PlugIn ECW Decompression Heap Overflow	dos	windows	Francis Provencher
2012-05-31	Sony VAIO Wireless Manager 4.0.0.0 – Buffer Overflow	dos	windows	High-Tech Bridge SA
2012-05-31	PHP Volunteer Management System 1.0.2 – Arbitrary File Upload (Metasploit)	webapps	php	Metasploit
2012-05-31	GIMP 2.6 script-fu < 2.8.0 - Buffer Overflow (PoC)	dos	windows	Joseph Sheridan
2012-05-31	PHP4dvd – ‘config.php’ PHP Code Injection	webapps	php	CWH Underground
2012-05-31	WHMCompleteSolution (WHMCS) 5.0 – ‘KnowledgeBase.php?search’ Cross-Site Scripting	webapps	php	Shadman Tanjim
2012-05-31	WHMCompleteSolution (WHMCS) 5.0 – Cross-Site Request Forgery (Multiple Application Function)	webapps	php	Shadman Tanjim
2012-05-31	Sorensoft Power Media 6.0 – Denial of Service	dos	windows	Onying
2012-05-31	Supernews 2.6.1 – ‘noticias.php?cat’ SQL Injection	webapps	php	Yakir Wizman
2012-05-31	NewsAdd 1.0 – ‘lerNoticia.php?id’ SQL Injection	webapps	php	Yakir Wizman
2012-05-31	Browsers Browsers – Navigation Download Trick	local	multiple	Michal Zalewski
2012-05-30	Simple Web Content Management System 1.1 < 1.3 - Multiple SQL Injections	webapps	php	loneferret
2012-05-30	MPlayer – ‘.SAMI’ Subtitle File Buffer Overflow (Metasploit)	local	windows	Metasploit
2012-05-30	Ganesha Digital Library 4.0 – Multiple Vulnerabilities	webapps	php	X-Cisadane
2012-05-30	Microsoft Wordpad 5.1 – ‘.doc’ Null Pointer Dereference	dos	windows	condis
2012-05-30	NewsAdd 1.0 – Multiple SQL Injections	webapps	php	WhiteCollarGroup
2012-05-29	PBBoard 2.1.4 – Multiple SQL Injections	webapps	php	loneferret
2012-05-29	WHMCompleteSolution (WHMCS) – ‘boleto_bb.php’ SQL Injection	webapps	php	dex
2012-05-29	ispVM System – ‘.XCF’ File Handling Overflow (Metasploit)	local	windows	Metasploit
2012-05-29	TFTPD32 DNS Server 4.00 – Denial of Service	dos	windows	demonalex
2012-05-29	WinRadius Server 2009 – Denial of Service	dos	windows	demonalex
2012-05-28	PBBoard 2.1.4 – Local File Inclusion	webapps	php	n4ss1m
2012-05-28	Yamamah Photo Gallery 1.1 – Database Information Disclosure	webapps	php	L3b-r1'z
2012-05-28	PHP Volunteer Management System 1.0.2 – Multiple SQL Injections	webapps	php	loneferret