Exploits

日期	标题	类型	平台	作者
2012-03-14	presto! pagemanager 9.01 – Multiple Vulnerabilities	dos	multiple	Luigi Auriemma
2012-03-14	asaanCart – Cross-Site Scripting / Local File Inclusion	webapps	php	Number 7
2012-03-14	Encaps PHP Gallery – SQL Injection	webapps	php	Daniel Godoy
2012-03-13	LightDM 1.0.6 – Arbitrary File Deletion	local	linux	Ryan Lortie
2012-03-13	Omnistar Live – Cross-Site Scripting / SQL Injection	webapps	php	sonyy
2012-03-13	4Images Image Gallery Management System – Cross-Site Request Forgery	webapps	php	Dmar al3noOoz
2012-03-13	Cycade Gallery – SQL Injection	webapps	php	-DownFall
2012-03-13	PBLang Bulletin Board System – Local File Inclusion	webapps	php	Number 7
2012-03-12	Litespeed Web Server – ‘gtitle’ Cross-Site Scripting	remote	multiple	K1P0D
2012-03-12	Wikidforum 2.10 – Advanced Search Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Stefan Schurtz
2012-03-12	Wikidforum 2.10 – Search Field Cross-Site Scripting	webapps	php	Stefan Schurtz
2012-03-12	Wikidforum 2.10 – Advanced Search Multiple Field SQL Injections	webapps	php	Stefan Schurtz
2012-03-12	TP-Link TL-WR740N 111130 – ‘ping_addr’ HTML Injection	remote	hardware	l20ot
2012-03-12	Acal Calendar 2.2.6 – Cross-Site Request Forgery	webapps	php	Number 7
2012-03-12	Synology Photo Station 5 DSM 3.2 – ‘photo_one.php’ Script Cross-Site Scripting	webapps	php	Simon Ganiere
2012-03-12	Network Instrument Observer – SNMP SetRequest Denial of Service	dos	windows	Francis Provencher
2012-03-12	XnView FlashPix Image Processing – Heap Overflow	dos	windows	Francis Provencher
2012-03-12	GOM Media Player 2.1.37 – Buffer Overflow	dos	windows	longrifle0x
2012-03-12	Saman Portal – Local File Inclusion	webapps	php	TMT
2012-03-12	Zend Server 5.6.0 – Multiple Remote Script Insertion Vulnerabilities	webapps	cgi	LiquidWorm
2012-03-11	CreateVision CMS – ‘id’ SQL Injection	webapps	php	Zwierzchowski Oskar
2012-03-11	EJBCA 4.0.7 – ‘issuer’ Cross-Site Scripting	webapps	java	MustLive
2012-03-11	Singapore 0.10.1 – ‘gallery’ Cross-Site Scripting	webapps	php	T0xic
2012-03-10	PyPAM Python bindings for PAM – Double-Free Corruption	dos	linux	Markus Vervier
2012-03-10	PHP Address Book 6.2.12 – Multiple Vulnerabilities	webapps	php	Stefan Schurtz
2012-03-09	PHPMyVisites 2.4 – ‘PHPmv2/index.php’ Multiple Cross-Site Scripting Vulnerabilities	webapps	php	AkaStep
2012-03-08	SAP Business Objects InfoView System – ‘/webi/webi_modify.aspx?id’ Cross-Site Scripting	webapps	asp	vulns@dionach.com
2012-03-08	RazorCMS 1.2.1 STABLE – Arbitrary File Upload	webapps	php	i2sec_Hyo jun Oh
2012-03-08	SAP Business Objects InfoView System – ‘/help/helpredir.aspx?guide’ Cross-Site Scripting	webapps	asp	vulns@dionach.com
2012-03-08	Adobe Flash Player – ‘.mp4 cprt’ Remote Overflow (Metasploit)	remote	windows	Metasploit
2012-03-08	SAP Business Objects InfoVew System – ‘listing.aspx?searchText’ Cross-Site Scripting	webapps	asp	vulns@dionach.com
2012-03-08	Barracuda CudaTel Communication Server 2.0.029.1 – Multiple HTML Injection Vulnerabilities	remote	hardware	Benjamin Kunz Mejri
2012-03-08	Ilient SysAid 8.5.5 – Multiple Cross-Site Scripting / HTML Injection Vulnerabilities	webapps	jsp	Julien Ahrens
2012-03-08	Macro Toolworks 7.5 – Local Buffer Overflow	local	windows	Julien Ahrens
2012-03-08	ToendaCMS 1.6.2 – ‘/setup/index.php?site’ Traversal Local File Inclusion	webapps	php	AkaStep
2012-03-08	LeKommerce – ‘id’ SQL Injection	webapps	php	Mazt0r
2012-03-08	RazorCMS 1.2.1 Stable – Cross-Site Request Forgery (Delete Web Pages)	webapps	php	Ivano Binetti
2012-03-07	Exponent CMS 2.0 – ‘src’ SQL Injection	webapps	php	Rob Miller
2012-03-07	NetDecision 4.6.1 – Multiple Directory Traversal Vulnerabilities	remote	windows	Luigi Auriemma
2012-03-07	promise webpam 2.2.0.13 – Multiple Vulnerabilities	webapps	php	LiquidWorm
2012-03-07	HomeSeer HS2 and HomeSeer PRO – Multiple Vulnerabilities	webapps	windows	Silent_Dream
2012-03-07	Iciniti Store – SQL Injection	webapps	asp	Sense of Security
2012-03-07	LotusCMS 3.0 – ‘eval()’ Remote Command Execution (Metasploit)	remote	php	Metasploit
2012-03-07	OSClass 2.3.x – Directory Traversal / Arbitrary File Upload	webapps	php	Filippo Cavallarin
2012-03-06	Fork CMS 3.2.x – Multiple Cross-Site Scripting / HTML Injection Vulnerabilities	webapps	php	Gjoko Krstic
2012-03-05	Joomla! 2.5.1 – ‘redirect.php’ Blind SQL Injection	webapps	php	Colin Wong
2012-03-05	11in1 CMS 1.2.1 – ‘admin/tps?id’ SQL Injection	webapps	php	Chokri B.A
2012-03-05	11in1 CMS 1.2.1 – ‘admin/comments?topicID’ SQL Injection	webapps	php	Chokri B.A
2012-03-05	Open Realty 2.5.x – ‘select_users_template’ Local File Inclusion	webapps	php	Aung Khant
2012-03-05	lizard cart – ‘search.php’ SQL Injection	webapps	php	Number 7