Exploits

日期	标题	类型	平台	作者
2012-05-03	VideoLAN VLC Media Player 2.0.0 – Mms Stream Handling Buffer Overflow (Metasploit)	remote	windows	Metasploit
2012-05-02	OpenConf 4.11 – ‘/author/edit.php’ Blind SQL Injection	webapps	php	EgiX
2012-05-02	Microsoft Windows XP – ‘win32k.sys’ Local Kernel Denial of Service	dos	windows	Lufeng Li
2012-05-02	iGuard Security Access Control Device Firmware 3.6.7427A – Cross-Site Scripting	webapps	hardware	Usman Saeed
2012-05-02	Websense Triton – Multiple Vulnerabilities	webapps	cgi	Ben Williams
2012-05-02	Symantec pcAnywhere – Insecure File Permissions Privilege Escalation	local	windows	Edward Torkington
2012-05-02	PHP-decoda – ‘Video Tag’ Cross-Site Scripting	webapps	php	RedTeam Pentesting
2012-05-01	SolarWinds Storage Manager 5.1.0 – Remote SYSTEM SQL Injection	remote	windows	muts
2012-05-01	Mikrotik Router – Denial of Service	dos	hardware	PoURaN
2012-05-01	LAN Messenger 1.2.28 – Denial of Service	dos	windows	Julien Ahrens
2012-05-01	STRATO NewsLetter Manager – Directory Traversal	webapps	php	Zero X
2012-05-01	MyClientBase 0.12 – Multiple Vulnerabilities	webapps	php	Vulnerability-Lab
2012-05-01	opencart 1.5.2.1 – Multiple Vulnerabilities	webapps	php	waraxe
2012-05-01	McAfee Virtual Technician MVTControl 6.3.0.1911 – GetObject (Metasploit)	remote	windows	Metasploit
2012-05-01	GENU CMS 2012.3 – Multiple SQL Injections	webapps	php	Vulnerability-Lab
2012-05-01	SAMSUNG NET-i Viewer 1.37 – Overwrite (SEH)	local	windows	blake
2012-05-01	WordPress Plugin Zingiri Web Shop 2.4.2 – Persistent Cross-Site Scripting	webapps	php	Mehmet Ince
2012-04-30	Car Portal CMS 3.0 – Multiple Vulnerabilities	webapps	php	Vulnerability-Lab
2012-04-30	WordPress Plugin WPsc MijnPress – ‘rwflush’ Cross-Site Scripting	webapps	php	Am!r
2012-04-30	McAfee Virtual Technician 6.3.0.1911 MVT.MVTControl.6300 – ActiveX ‘GetObject()’ Code Execution	remote	windows	rgod
2012-04-30	DIY CMS 1.0 Poll – Multiple Vulnerabilities	webapps	php	Vulnerability-Lab
2012-04-30	Opial CMS 2.0 – Multiple Vulnerabilities	webapps	php	Vulnerability-Lab
2012-04-30	C4B XPhone UC Web 4.1.890S R1 – Cross-Site Scripting	webapps	asp	Vulnerability-Lab
2012-04-29	Alienvault Open Source SIEM (OSSIM) 3.1 – Multiple Vulnerabilities	webapps	php	Stefan Schurtz
2012-04-29	Remote-Anything Player 5.60.15 – Denial of Service	dos	windows	Saint Patrick
2012-04-29	Soco CMS – Local File Inclusion	webapps	php	BHG Security Center
2012-04-29	WebCalendar 1.2.4 – Remote Code Injection (Metasploit)	webapps	linux	Metasploit
2012-04-29	Croogo CMS 1.3.4 – Multiple HTML Injection Vulnerabilities	webapps	perl	Chokri Ben Achor
2012-04-28	Shawn Bradley PHP Volunteer Management 1.0.2 – ‘id’ SQL Injection	webapps	php	eidelweiss
2012-04-27	MySQLDumper 1.24.4 – ‘filemanagement.php?f’ Traversal Arbitrary File Access	webapps	php	AkaStep
2012-04-27	MySQLDumper 1.24.4 – ‘sql.php’ Multiple Cross-Site Scripting Vulnerabilities	webapps	php	AkaStep
2012-04-27	MySQLDumper 1.24.4 – ‘install.php’ Multiple Cross-Site Scripting Vulnerabilities	webapps	php	AkaStep
2012-04-27	MySQLDumper 1.24.4 – ‘install.php?language’ Traversal Arbitrary File Access	webapps	perl	AkaStep
2012-04-27	MySQLDumper 1.24.4 – ‘restore.php?Filename’ Cross-Site Scripting	webapps	php	AkaStep
2012-04-27	Nokia PC Suite Video Manager 7.1.180.64 – ‘.mp4’ Denial of Service	dos	windows	Senator of Pirates
2012-04-27	Axous 1.1.0 – SQL Injection	webapps	php	H4ckCity Secuirty TeaM
2012-04-27	CPE17 Autorun Killer 1.7.1 – Local Stack Buffer Overflow (Metasploit)	local	windows	Xenithz xpt
2012-04-27	BBSXP CMS – Multiple SQL Injections	webapps	asp	Farbod Mahini
2012-04-27	WordPress Core 3.3.1 – Multiple Cross-Site Request Forgery Vulnerabilities	webapps	php	Ivano Binetti
2012-04-27	Uiga FanClub – ‘p’ SQL Injection	webapps	php	Farbod Mahini
2012-04-27	XM Forum – ‘id’ Multiple SQL Injections	webapps	asp	Farbod Mahini
2012-04-27	MySQLDumper 1.24.4 – ‘menu.php’ PHP Remote Code Execution	webapps	php	AkaStep
2012-04-27	SKYUC 3.2.1 – ‘encode’ Cross-Site Scripting	webapps	php	farbodmahini
2012-04-27	MySQLDumper 1.24.4 – ‘index.php?page’ Cross-Site Scripting	webapps	php	AkaStep
2012-04-27	SilverStripe CMS 2.4.7 – ‘install.php’ PHP Code Injection	webapps	php	Mehmet Ince
2012-04-27	MySQLDumper 1.24.4 – ‘main.php’ Multiple Cross-Site Request Forgery Vulnerabilities	webapps	php	AkaStep
2012-04-27	MySQLDumper 1.24.4 – Multiple Script Direct Request Information Disclosures	webapps	php	AkaStep
2012-04-26	Quick.CMS 4.0 – ‘p’ Cross-Site Scripting	webapps	php	Jakub Galczyk
2012-04-26	gpEasy 2.3.3 – ‘jsoncallback’ Cross-Site Scripting	webapps	php	Jakub Galczyk
2012-04-26	PHP Volunteer management 1.0.2 – Multiple Vulnerabilities	webapps	php	G13