Exploits

日期	标题	类型	平台	作者
2012-02-08	Gazelle CMS 1.0 – Update Statement SQL Injection	webapps	php	hackme
2012-02-07	eFront 3.6.10 – ‘administrator.php’ Cross-Site Scripting	webapps	php	Chokri B.A
2012-02-07	ManageEngine ADManager Plus 5.2 Build 5210 – ‘domainName’ Cross-Site Scripting	webapps	java	LiquidWorm
2012-02-07	ManageEngine ADManager Plus 5.2 Build 5210 – ‘Operation’ Cross-Site Scripting	webapps	java	LiquidWorm
2012-02-07	Simple Groupware 0.742 – ‘export’ Cross-Site Scripting	webapps	php	Infoserve Security Team
2012-02-07	TYPSoft FTP Server 1.10 – Multiple Denial of Service Vulnerabilities	dos	windows	Balazs Makany
2012-02-07	Flyspray 0.9.9.6 – Cross-Site Request Forgery	webapps	php	Vaibhav Gupta
2012-02-06	BASE 1.4.5 – ‘base_qry_main.php?t_view’ SQL Injection	webapps	php	a.kadir altan
2012-02-06	Vespa 0.8.6 – ‘getid3.php’ Local File Inclusion	webapps	php	T0x!c
2012-02-06	Apache 2.2.15 mod_proxy – Reverse Proxy Security Bypass	remote	linux	Tomas Hoger
2012-02-06	Edraw Diagram Component 5 – ActiveX Control ‘LicenseName()’ Method Buffer Overflow	dos	windows	Senator of Pirates
2012-02-06	XRayCMS 1.1.1 – SQL Injection	webapps	php	chap0
2012-02-06	Tube Ace (Adult PHP Tube Script) – SQL Injection	webapps	php	Daniel Godoy
2012-02-05	GAzie 5.20 – Cross-Site Request Forgery	webapps	php	Giuseppe D'Inverno
2012-02-05	PDF Viewer Component – ActiveX Denial of Service	dos	windows	Senator of Pirates
2012-02-04	Edraw Diagram Component 5 – ActiveX Buffer Overflow (Denial of Service) (PoC)	dos	windows	Senator of Pirates
2012-02-04	PHP 5.4.0RC6 (x64) – Denial of Service	dos	php	Stefan Esser
2012-02-03	PHP 5.4SVN-2012-02-03 – htmlspecialchars/entities Buffer Overflow	dos	php	cataphract
2012-02-03	torrent-stats – ‘httpd.c’ Denial of Service	dos	linux	otr
2012-02-03	PHP-Fusion 7.2.4 – ‘weblink_id’ SQL Injection	webapps	php	Am!r
2012-02-03	project-open 3.4.x – ‘account-closed.tcl’ Cross-Site Scripting	webapps	php	Michail Poultsakis
2012-02-02	Achievo 1.4.3 – Multiple Web Vulnerabilities	webapps	php	Vulnerability-Lab
2012-02-02	osCommerce 3.0.2 – Persistent Cross-Site Scripting	webapps	php	Vulnerability-Lab
2012-02-02	NetSarang Xlpd Printer Daemon 4 – Denial of Service	dos	windows	SecPod Research
2012-02-02	OfficeSIP Server 3.1 – Denial of Service	dos	windows	SecPod Research
2012-02-02	Apache Struts – Multiple Persistent Cross-Site Scripting Vulnerabilities	webapps	multiple	SecPod Research
2012-02-02	Joomla! Component Currency Converter 1.0.0 – ‘from’ Cross-Site Scripting	webapps	php	BHG Security Center
2012-02-02	Sphinix Mobile Web Server 3.1.2.47 – Multiple Persistent Cross-Site Scripting Vulnerabilities	webapps	windows	SecPod Research
2012-02-02	iknSupport ‘search’ Module – Cross-Site Scripting	webapps	php	Red Security TEAM
2012-02-02	Icona SpA C6 Messenger – DownloaderActiveX Control Arbitrary File Download and Execute (Metasploit)	remote	windows	Metasploit
2012-02-02	Joomla! Component com_bnf – ‘seccion_id’ SQL Injection	webapps	php	Daniel Godoy
2012-02-02	Sunway ForceControl – SNMP ‘NetDBServer.exe’ Opcode 0x57 (Metasploit)	remote	windows	Metasploit
2012-02-02	GForge 5.7.1 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	sonyy
2012-02-01	phpLDAPadmin 1.2.0.5-2 – ‘server_id’ Cross-Site Scripting	webapps	php	andsarmiento
2012-02-01	Webkit Normalize Bug – Android 2.2	remote	android	MJ Keith
2012-02-01	phpLDAPadmin 1.2.2 – ‘base’ Cross-Site Scripting	webapps	php	andsarmiento
2012-02-01	sit! support incident tracker 3.64 – Multiple Vulnerabilities	webapps	php	High-Tech Bridge SA
2012-02-01	swDesk – Multiple Vulnerabilities	webapps	php	Red Security TEAM
2012-02-01	OpenEMR 4.1 – ‘/Interface/fax/fax_dispatch.php?File’ ‘exec()’ Call Arbitrary Shell Command Execution	webapps	php	High-Tech Bridge SA
2012-02-01	OpenEMR 4.1 – ‘/contrib/acog/print_form.php?formname’ Traversal Local File Inclusion	webapps	php	High-Tech Bridge SA
2012-02-01	OpenEMR 4.1 – ‘/Interface/patient_file/encounter/load_form.php?formname’ Traversal Local File Inclusion	webapps	php	High-Tech Bridge SA
2012-02-01	OpenEMR 4.1 – ‘/Interface/patient_file/encounter/trend_form.php?formname’ Traversal Local File Inclusion	webapps	php	High-Tech Bridge SA
2012-01-31	Joomla! Component com_crhotels – ‘catid’ SQL Injection	webapps	php	the_cyber_nuxbie
2012-01-31	Apache – httpOnly Cookie Disclosure	remote	multiple	pilate
2012-01-31	Vastal I-Tech Agent Zone – ‘search.php’ Blind SQL Injection	webapps	php	Cagri Tepebasili
2012-01-31	EdrawSoft Office Viewer Component ActiveX 5.6 – ‘officeviewermme.ocx’ Buffer Overflow (PoC)	dos	windows	LiquidWorm
2012-01-31	PragmaMX 1.2.10 – Persistent Cross-Site Scripting	webapps	php	HauntIT
2012-01-31	Ez Album – Blind SQL Injection	webapps	php	Red Security TEAM
2012-01-31	Adobe Flash Player – MP4 SequenceParameterSetNALUnit Remote Code Execution	remote	windows	Abysssec
2012-01-31	sudo 1.8.0 < 1.8.3p1 - Format String	dos	linux	joernchen