Exploits

日期	标题	类型	平台	作者
2012-04-26	Concrete5 CMS 5.5.2.1 – Information Disclosure / SQL Injection / Cross-Site Scripting	webapps	php	Jakub Galczyk
2012-04-26	WordPress Plugin Zingiri Web Shop 2.4.0 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Mehmet Ince
2012-04-26	Parallels PLESK 9.x – Insecure Permissions	local	linux	Nicolas Krassas
2012-04-25	Shadow Stream Recorder 3.0.1.7 – Local Buffer Overflow (Metasploit)	local	windows	Metasploit
2012-04-25	Microsoft Windows – MSCOMCTL ActiveX Buffer Overflow (MS12-027) (Metasploit)	remote	windows	Metasploit
2012-04-25	mount.cifs – ‘chdir()’ Arbitrary Root File Identification	local	linux	Sha0
2012-04-25	piwigo 2.3.3 – Multiple Vulnerabilities	webapps	php	High-Tech Bridge SA
2012-04-24	RuggedCom Devices – Backdoor Access	remote	hardware	jc
2012-04-24	PHP Ticket System Beta 1 – ‘index.php?p’ SQL Injection	webapps	php	G13
2012-04-24	Microsoft .NET Framework EncoderParameter – Integer Overflow (MS12-025)	dos	windows	Akita Software Security
2012-04-24	BeyondCHM 1.1 – Buffer Overflow	dos	windows	shinnai
2012-04-24	Joomla! Component com_videogallery – Local File Inclusion / SQL Injection	webapps	php	KedAns-Dz
2012-04-23	WebCalendar 1.2.4 – Remote Code Execution	webapps	php	EgiX
2012-04-23	Mobipocket Reader 6.2 Build 608 – Buffer Overflow	dos	windows	shinnai
2012-04-23	exponentcms 2.0.5 – Multiple Vulnerabilities	webapps	php	Onur Yılmaz
2012-04-23	Havalite CMS 1.0.4 – Multiple Vulnerabilities	webapps	php	Vulnerability-Lab
2012-04-23	SumatraPDF 2.0.1 – ‘.chm’ / ‘.mobi’ Memory Corruption	dos	windows	shinnai
2012-04-23	Joomla! Component CCNewsLetter 1.0.7 – ‘id’ SQL Injection	webapps	php	E1nzte1N
2012-04-22	Liferay 6.0.x – WebDAV File Reading	remote	multiple	Jelmer Kuperus
2012-04-22	vTiger CRM 5.1.0 – Local File Inclusion	webapps	php	Pi3rrot
2012-04-22	Mega File Manager – File Download	webapps	php	i2sec-Min Gi Jo
2012-04-22	Oracle GlassFish Server – REST Cross-Site Request Forgery	webapps	windows	Roberto Suggi Liverani
2012-04-22	Samsung NET-i ware 1.37 – Multiple Vulnerabilities	dos	windows	Luigi Auriemma
2012-04-22	Oracle GlassFish Server 3.1.1 (build 12) – Multiple Cross-Site Scripting Vulnerabilities	webapps	windows	Roberto Suggi Liverani
2012-04-20	Adobe Flash Player – ActionScript Launch Command Execution (Metasploit)	remote	linux	Metasploit
2012-04-20	Anchor CMS 0.6-14-ga85d0a0 – ‘id’ Multiple HTML Injection Vulnerabilities	webapps	php	Gjoko Krstic
2012-04-20	xRadio 0.95b – Local Buffer Overflow (Metasploit)	local	windows	Metasploit
2012-04-20	Pendulab ChatBlazer 8.5 – ‘Username’ Cross-Site Scripting	webapps	php	sonyy
2012-04-20	TFTP Server 1.4 – ST WRQ Buffer Overflow (Metasploit)	remote	windows	Metasploit
2012-04-20	Waylu CMS – ‘/products_xx.php’ SQL Injection / HTML Injection	webapps	php	TheCyberNuxbie
2012-04-19	Wireshark – ‘call_dissector()’ Null Pointer Dereference Denial of Service	dos	multiple	Wireshark
2012-04-19	VideoLAN VLC Media Player 2.0.1 – ‘.mp4’ Crash (PoC)	dos	windows	Senator of Pirates
2012-04-19	OpenSSL – ASN1 BIO Memory Corruption	dos	multiple	Tavis Ormandy
2012-04-19	Microsoft Windows – ‘afd.sys’ Local Kernel (PoC) (MS11-046)	dos	windows	fb1h2s
2012-04-19	LibreOffice 3.5.2.2 – Memory Corruption	dos	multiple	shinnai
2012-04-19	XOOPS 2.5.4 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	High-Tech Bridge SA
2012-04-19	newscoop 3.5.3 – Multiple Vulnerabilities	webapps	php	High-Tech Bridge SA
2012-04-19	Samsung D6000 TV – Multiple Vulnerabilities	dos	hardware	Luigi Auriemma
2012-04-19	Scrutinizer NetFlow & sFlow Analyzer – Multiple Vulnerabilities	webapps	multiple	Trustwave's SpiderLabs
2012-04-18	ownCloud 3.0.0 – ‘index.php?redirect_url’ Arbitrary Site Redirect	webapps	php	Tobias Glemser
2012-04-18	XOOPS 2.5.4 – ‘/tiny_mce/plugins/xoopsimagemanager/xoopsimagebrowser.php’ Multiple Cross-Site Scripting Vulnerabilities	webapps	php	High-Tech Bridge SA
2012-04-18	XOOPS 2.5.4 – ‘/modules/pm/pmlite.php?to_userid’ Cross-Site Scripting	webapps	php	High-Tech Bridge SA
2012-04-18	Microsoft Office 2008 SP0 (Mac) – RTF pFragments	local	osx	Abhishek Lyall
2012-04-18	GSM SIM Editor 5.15 – Local Buffer Overflow (Metasploit)	local	windows	Metasploit
2012-04-18	CyberLink Power2Go – name Attribute (p2g) Stack Buffer Overflow (Metasploit)	local	windows	Metasploit
2012-04-17	Acuity CMS 2.6.2 – ‘Username’ Cross-Site Scripting	webapps	php	Aung Khant
2012-04-17	Joomla! Component JA T3 Framework – Directory Traversal	webapps	php	indoushka
2012-04-17	TeamPass 2.1.5 – ‘login’ HTML Injection	webapps	php	Marcos Garcia
2012-04-16	Bioly 1.3 – ‘/index.php’ Cross-Site Scripting / SQL Injection	webapps	php	T0xic
2012-04-16	McAfee Web Gateway 7.1.5.x – ‘Host’ HTTP Header Security Bypass	remote	multiple	Gabriel Menezes Nunes