Exploits

日期	标题	类型	平台	作者
2012-03-21	phpList 2.10.17 – SQL Injection / Cross-Site Scripting	webapps	php	LiquidWorm
2012-03-21	D-Link DIR-605 – Cross-Site Request Forgery	webapps	hardware	iqzer0
2012-03-21	Oreans WinLicense 2.1.8.0 – XML File Handling Memory Corruption	dos	windows	LiquidWorm
2012-03-20	Adobe Photoshop 12.1 – ‘.tiff’ Parsing Use-After-Free	dos	windows	Francis Provencher
2012-03-20	OneFileCMS – Failure to Restrict URL Access	webapps	php	Abhi M Balakrishnan
2012-03-20	OneForum – ‘topic.php’ SQL Injection	webapps	php	Red Security TEAM
2012-03-20	Android FTPServer 1.9.0 – Remote Denial of Service	dos	android	G13
2012-03-20	Tiny Server 1.1.9 – HEAD Denial of Service	dos	windows	brock haun
2012-03-20	PeerFTP Server 4.01 – Remote Crash (PoC)	dos	windows	localh0t
2012-03-20	WebGlimpse 2.14.1/2.18.8 – ‘webglimpse.cgi’ Remote Command Injection	webapps	cgi	Kevin Perry
2012-03-20	GNUBoard 4.34.20 – ‘download.php’ HTML Injection	webapps	php	wh1ant
2012-03-19	ManageEngine DeviceExpert 5.6 Java Server ScheduleResultViewer servlet – Directory Traversal	webapps	jsp	rgod
2012-03-19	2X ApplicationServer 10.1 – TuxSystem Class ActiveX Control Remote File Overwrite	remote	windows	rgod
2012-03-19	2X Client for RDP 10.1.1204 – ClientSystem Class ActiveX Control Download and Execute	remote	windows	rgod
2012-03-19	ClassifiedsGeek.com Vacation Packages – ‘listing_search’ SQL Injection	webapps	php	r45c4l
2012-03-19	LANDesk Lenovo ThinkManagement Suite 9.0.3 Core Server – Arbitrary File Deletion	remote	windows	rgod
2012-03-19	LANDesk Lenovo ThinkManagement Suite 9.0.3 – Core Server Remote Code Execution	remote	windows	rgod
2012-03-19	Dell Webcam Software Bundled – ActiveX Remote Buffer Overflow	remote	windows	rgod
2012-03-19	TYPSoft FTP Server 1.1 – ‘APPE’ Remote Buffer Overflow	dos	windows	brock haun
2012-03-19	Apache Tomcat – Account Scanner / ‘PUT’ Request Command Execution	remote	multiple	kingcope
2012-03-19	Joomla! 2.5.0 < 2.5.1 - Blind SQL Injection	webapps	php	A. Ramos
2012-03-18	Pre Printing Press – ‘product_desc.php?pid’ SQL Injection	webapps	php	Easy Laster
2012-03-18	WebGlimpse 2.x – ‘wgarcmin.cgi’ Full Path Disclosure	webapps	cgi	Websecurity
2012-03-18	JavaBB 0.99 – ‘userId’ Cross-Site Scripting	webapps	java	sonyy
2012-03-17	TYPSoft FTP Server 1.1 – ‘APPE’ Remote Denial of Service	dos	windows	brock haun
2012-03-17	PRE PRINTING STUDIO – SQL Injection	webapps	php	r45c4l
2012-03-17	ASP Classifieds – SQL Injection	webapps	php	r45c4l
2012-03-16	JPM Article Script 6 – ‘page2’ SQL Injection	webapps	php	Vulnerability Research Laboratory
2012-03-16	RM Downloader 3.1.3.3.2010.06.26 – ‘.m3u’ Local Buffer Overflow (Metasploit)	local	windows	KaHPeSeSe
2012-03-16	Tiny Server 1.1.5 – Arbitrary File Disclosure	remote	windows	KaHPeSeSe
2012-03-16	FlexCMS 3.2.1 – Multiple Cross-Site Request Forgery Vulnerabilities	webapps	php	Ivano Binetti
2012-03-16	FlexCMS 3.2.1 – Persistent Cross-Site Scripting	webapps	php	storm
2012-03-16	OneFileCMS 1.1.5 – Local File Inclusion	webapps	php	mr.pr0n
2012-03-16	Microsoft Terminal Services – Use-After-Free (MS12-020)	dos	windows	Luigi Auriemma
2012-03-15	Citrix 11.6.1 – Licensing Administration Console Denial of Service	dos	windows	Rune
2012-03-15	Asterisk – ‘ast_parse_digest()’ Stack Buffer Overflow (PoC)	dos	linux	Russell Bryant
2012-03-15	sockso 1.5 – Directory Traversal	webapps	windows	Luigi Auriemma
2012-03-15	Netmechanica NetDecision HTTP Server 4.5.1 – Remote Buffer Overflow (Metasploit)	remote	windows	Metasploit
2012-03-14	asaanCart – Cross-Site Scripting / Local File Inclusion	webapps	php	Number 7
2012-03-14	Encaps PHP Gallery – SQL Injection	webapps	php	Daniel Godoy
2012-03-14	Max’s PHP Photo Album 1.0 – ‘id’ Local File Inclusion	webapps	php	n0tch
2012-03-14	Sitecom WLM-2501 – Cross-Site Request Forgery	webapps	hardware	Ivano Binetti
2012-03-14	Max’s Guestbook 1.0 – Multiple Remote Vulnerabilities	webapps	php	n0tch
2012-03-14	Max Guestbook 1.0 – Multiple Vulnerabilities	webapps	php	n0tch
2012-03-14	Simple Posting System – Multiple Vulnerabilities	webapps	php	n0tch
2012-03-14	ModX 2.2.0 – Multiple Vulnerabilities	webapps	php	n0tch
2012-03-14	F5 FirePass 7.0 – SQL Injection	remote	hardware	anonymous
2012-03-14	TVersity 1.9.7 – Arbitrary File Download	webapps	windows	Luigi Auriemma
2012-03-14	VideoLAN VLC Media Player 1.1.11 – ‘.EAC3’ File Denial of Service	dos	multiple	Dan Fosco
2012-03-14	Epson EventManager 2.50 – Denial of Service	dos	windows	Luigi Auriemma