Exploits

日期	标题	类型	平台	作者
2012-05-28	PHP Volunteer Management System 1.0.2 – Multiple Vulnerabilities	webapps	php	Ashoo
2012-05-28	LibreOffice 3.5.3 – ‘.rtf’ FileOpen Crash	dos	windows	shinnai
2012-05-28	PBBoard 2.1.4 – Local File Inclusion	webapps	php	n4ss1m
2012-05-27	AzDGDatingMedium 1.9.3 – Multiple Remote Vulnerabilities	webapps	php	AkaStep
2012-05-27	Nilehoster Topics Viewer 2.3 – Multiple SQL Injections / Local File Inclusion	webapps	php	n4ss1m
2012-05-27	b2ePms 1.0 – Multiple SQL Injection Vulnerabilities	webapps	php	loneferret
2012-05-27	WeBid – ‘converter.php’ Remote PHP Code Injection (Metasploit)	webapps	php	Metasploit
2012-05-27	quickshare file share 1.2.1 – Directory Traversal (Metasploit) (2)	remote	windows	Metasploit
2012-05-26	Small-Cms – ‘hostname’ Remote PHP Code Injection	webapps	php	L3b-r1'z
2012-05-26	Symantec Web Gateway 5.0.2 – Local/Remote File Inclusion / Remote Code Execution	webapps	linux	muts
2012-05-26	phpList 2.10.9 – ‘Sajax.php’ PHP Code Injection	webapps	php	L3b-r1'z
2012-05-25	RabidHamster R4 – Log Entry ‘sprintf()’ Remote Buffer Overflow (Metasploit)	remote	windows	Metasploit
2012-05-25	SocialEngine 4.2.2 – Multiple Vulnerabilities	webapps	php	i4k
2012-05-25	bsnes 0.87 – Local Denial of Service	dos	windows	Yakir Wizman
2012-05-25	OpenOffice – OLE Importer DocumentSummaryInformation Stream Handling Overflow (Metasploit)	local	windows	Metasploit
2012-05-25	appRain CMF – Arbitrary ‘.PHP’ File Upload (Metasploit)	webapps	php	Metasploit
2012-05-25	DynPage 1.0 – ‘ckfinder’ Multiple Arbitrary File Upload Vulnerabilities	webapps	php	KedAns-Dz
2012-05-25	Apple iOS 5.1.1 Safari Browser – ‘JS match()’ / ‘search()’ Crash (PoC)	dos	ios	Alberto Ortega
2012-05-24	phpCollab 2.5 – Direct Request Multiple Protected Page Access	webapps	php	team ' & 1=1--
2012-05-24	PHPCollab 2.5 – ‘uploadfile.php’ Crafted Request Arbitrary Non-PHP File Upload	webapps	php	team ' & 1=1--
2012-05-24	Jaow 2.4.5 – Blind SQL Injection	webapps	php	kallimero
2012-05-24	Wireshark – Misaligned Memory Denial of Service	dos	multiple	Klaus Heckelmann
2012-05-24	Wireshark – Multiple Dissector Denial of Service Vulnerabilities	dos	multiple	Laurent Butti
2012-05-24	Wireshark – DIAMETER Dissector Denial of Service	dos	multiple	Wireshark
2012-05-24	Apache Mod_Auth_OpenID – Session Stealing	local	linux	Peter Ellehauge
2012-05-23	Yellow Duck Framework 2.0 Beta1 – Local File Disclosure	webapps	php	L3b-r1'z
2012-05-23	pragmaMx 1.12.1 – ‘/includes/wysiwyg/spaw/editor/plugins/imgpopup/img_popup.php?img_url’ Cross-Site Scripting	webapps	php	High-Tech Bridge SA
2012-05-23	pragmaMx 1.12.1 – ‘modules.php’ URI Cross-Site Scripting	webapps	php	High-Tech Bridge SA
2012-05-23	Pligg CMS 1.x – ‘module.php’ Multiple Cross-Site Scripting Vulnerabilities	webapps	php	High-Tech Bridge SA
2012-05-23	Ajaxmint Gallery 1.0 – Local File Inclusion	webapps	php	AkaStep
2012-05-23	phpCollab 2.5 – Database Backup Information Disclosure	webapps	php	team ' & 1=1--
2012-05-23	Ruubikcms 1.1.x – Cross-Site Scripting / Information Disclosure / Directory Traversal	webapps	php	AkaStep
2012-05-23	Symantec End Point Protection 11.x / Symantec Network Access Control 11.x – Local Code Execution (PoC)	dos	windows	41.w4r10r
2012-05-23	FlexNet License Server Manager – lmgrd Buffer Overflow (Metasploit)	remote	windows	Metasploit
2012-05-22	Mosh – Remote Denial of Service	dos	linux	Timo Juhani Lindfors
2012-05-22	Plogger Photo Gallery – SQL Injection	webapps	php	Eyup CELIK
2012-05-22	Novell Client 4.91 SP4 – Local Privilege Escalation	local	windows	sickness
2012-05-21	PHP 5.4.3 – ‘com_event_sink’ Denial of Service	dos	php	condis
2012-05-21	PHP 5.4.3 – wddx_serialize_* / stream_bucket_* Variant Object Null Ptr Dereference	dos	php	condis
2012-05-21	Foxit Reader 3.0 – Open Execute Action Stack Buffer Overflow (Metasploit)	local	windows	Metasploit
2012-05-21	DVD-Lab Studio 1.25 – ‘.DAL’ File Open Crash	dos	windows	Ahmed Elhady Mohamed
2012-05-21	Real-DRAW PRO 5.2.4 – Import File Crash	dos	windows	Ahmed Elhady Mohamed
2012-05-21	HP StorageWorks P4000 – Virtual SAN Appliance Command Execution (Metasploit)	remote	hardware	Metasploit
2012-05-21	PHPhq.Net phAlbum 1.5.1 – ‘index.php’ Cross-Site Scripting	webapps	php	Eyup CELIK
2012-05-21	Yandex.Server 2010 9.0 – ‘text’ Cross-Site Scripting	webapps	php	MustLive
2012-05-21	Supernews 2.6.1 – SQL Injection	webapps	php	WhiteCollarGroup
2012-05-21	Acuity CMS 2.6.2 – ‘/admin/file_manager/browse.asp?path’ Traversal Arbitrary File Access	webapps	asp	Aung Khant
2012-05-21	Vanilla FirstLastNames 1.3.2 Plugin – Persistent Cross-Site Scripting	webapps	php	Henry Hoggard
2012-05-21	Acuity CMS 2.6.2 – ‘/admin/file_manager/file_upload_submit.asp’ Multiple Arbitrary File Upload / Code Executions	webapps	asp	Aung Khant
2012-05-21	Vanilla Forums About Me Plugin – Persistent Cross-Site Scripting	webapps	php	Henry Hoggard