Exploits

日期	标题	类型	平台	作者
2012-03-05	lizard cart – ‘search.php’ SQL Injection	webapps	php	Number 7
2012-03-05	Symfony2 – Local File Disclosure	webapps	php	Sense of Security
2012-03-05	Etano 1.20/1.22 – ‘photo_view.php?return’ Cross-Site Scripting	webapps	php	Aung Khant
2012-03-05	Etano 1.20/1.22 – ‘photo_search.php’ Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Aung Khant
2012-03-04	LastGuru ASP Guestbook – ‘View.asp’ SQL Injection	webapps	php	demonalex
2012-03-04	AneCMS 2e2c583 – Local File Inclusion	webapps	php	I2sec-Jong Hwan Park
2012-03-04	DZCP (deV!L`z Clanportal) Witze Addon 0.9 – SQL Injection	webapps	php	Easy Laster
2012-03-04	Sysax 5.53 – SSH ‘Username’ Remote Buffer Overflow (Metasploit)	remote	windows	Metasploit
2012-03-03	Timesheet Next Gen 1.5.2 – Multiple SQL Injections	webapps	php	G13
2012-03-03	Rivettracker 1.03 – Multiple SQL Injections	webapps	multiple	Ali Raheem
2012-03-03	Splash PRO 1.12.1 – ‘.avi’ File Denial of Service	dos	windows	Senator of Pirates
2012-03-03	Passport PC To Host – ‘.zws’ File Memory Corruption	dos	windows	Silent_Dream
2012-03-03	EasyFTP Server 1.7.0.11 – ‘APPE’ Remote Buffer Overflow	remote	windows	Swappage
2012-03-03	Endian UTM Firewall 2.4.x < 2.5.0 - Multiple Web Vulnerabilities	webapps	php	Vulnerability-Lab
2012-03-03	FlashFXP 4.1.8.1701 – Remote Buffer Overflow	remote	windows	Vulnerability-Lab
2012-03-02	starCMS – ‘q’ URI Cross-Site Scripting	webapps	php	Am!r
2012-03-02	phxEventManager 2.0 Beta 5 – ‘search.php’ search_terms SQL Injection	webapps	php	skysbsb
2012-03-02	VideoLAN VLC Media Player 0.9.5 – RealText Subtitle Overflow (Metasploit)	local	windows	Metasploit
2012-03-02	DJ Studio Pro 5.1 – ‘.pls’ Local Stack Buffer Overflow (Metasploit)	local	windows	Metasploit
2012-03-02	Drupal 7.12 – Multiple Vulnerabilities	webapps	php	Ivano Binetti
2012-03-01	Novell Groupwise – Address Book Remote Code Execution	dos	windows	Francis Provencher
2012-02-29	Traidnt Topics Viewer 2.0 – ‘main.php’ Cross-Site Request Forgery	webapps	php	Green Hornet
2012-02-29	Dotclear 2.4.1.2 – ‘/admin/plugin.php?page’ Cross-Site Scripting	webapps	php	High-Tech Bridge SA
2012-02-29	Wolf CMS 0.7.5 – Multiple Vulnerabilities	webapps	php	longrifle0x
2012-02-29	Dotclear 2.4.1.2 – ‘/admin/comments.php’ Multiple Cross-Site Scripting Vulnerabilities	webapps	php	High-Tech Bridge SA
2012-02-29	ImgPals Photo Host 1.0 – Admin Account Disactivation	webapps	php	CorryL
2012-02-29	Dotclear 2.4.1.2 – ‘/admin/blogs.php?nb’ Cross-Site Scripting	webapps	php	High-Tech Bridge SA
2012-02-29	Netmechanica NetDecision Dashboard Server – Information Disclosure	remote	windows	SecPod Research
2012-02-29	Dotclear 2.4.1.2 – ‘/admin/auth.php?login_data’ Cross-Site Scripting	webapps	php	High-Tech Bridge SA
2012-02-29	Netmechanica NetDecision Traffic Grapher Server – Information Disclosure	remote	windows	SecPod Research
2012-02-29	GNOME NetworkManager 0.x – Local Arbitrary File Access	local	linux	Ludwig
2012-02-29	Netmechanica NetDecision HTTP Server – Denial of Service	dos	windows	SecPod Research
2012-02-29	Yealink VOIP Phone – Persistent Cross-Site Scripting	webapps	hardware	Narendra Shinde
2012-02-29	IBM Personal Communications I-Series Access Workstation 5.9 – Profile (Metasploit)	remote	windows	Metasploit
2012-02-29	ASUS Net4Switch – ‘ipswcom.dll’ ActiveX Stack Buffer Overflow (Metasploit)	remote	windows	Metasploit
2012-02-28	Fork CMS 3.x – ‘/backend/modules/error/actions/index.php?parse()’ Multiple Error Display Cross-Site Scripting Vulnerabilities	webapps	php	anonymous
2012-02-28	Fork CMS 3.x – ‘/private/en/locale/index?name’ Cross-Site Scripting	webapps	php	anonymous
2012-02-28	WebfolioCMS 1.1.4 – Cross-Site Request Forgery (Add Admin/Modify Pages)	webapps	php	Ivano Binetti
2012-02-27	Sysax 5.53 – SSH ‘Username’ Remote Buffer Overflow Remote Code Execution (Egghunter)	remote	windows	Craig Freyman
2012-02-27	Sysax Multi Server 5.53 – SFTP (Authenticated) (SEH)	remote	windows	Craig Freyman
2012-02-27	Socusoft Photo 2 Video 8.05 – Local Buffer Overflow	local	windows	Vulnerability-Lab
2012-02-27	Mozilla Firefox 4.0.1 – ‘Array.reduceRight()’ Remote Overflow	remote	windows	pa_kt
2012-02-27	Endian Firewall 2.4 – ‘dansguardian.cgi?addrule’ Cross-Site Scripting	remote	hardware	Vulnerability Research Laboratory
2012-02-27	Endian Firewall 2.4 – ‘dnat.cgi?createrule’ Cross-Site Scripting	remote	hardware	Vulnerability Research Laboratory
2012-02-27	Endian Firewall 2.4 – ‘openvpn_users.cgi?PATH_INFO’ Cross-Site Scripting	remote	hardware	Vulnerability Research Laboratory
2012-02-27	OSQA’s CMS – Multiple HTML Injection Vulnerabilities	webapps	php	Ucha Gobejishvili
2012-02-27	Bontq – ‘user/’ URI Cross-Site Scripting	webapps	php	sonyy
2012-02-26	MyJobList 0.1.3 – ‘eid’ SQL Injection	webapps	php	Red Security TEAM
2012-02-26	ContaoCMS (aka TYPOlight) 2.11 – Cross-Site Request Forgery (Delete Admin / Delete Article)	webapps	php	Ivano Binetti
2012-02-26	Webglimpse 2.x – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	MustLive