Exploits

日期	标题	类型	平台	作者
2012-01-21	Joomla! Component Vik Real Estate 1.0 – Multiple SQL Injections	webapps	php	the_cyber_nuxbie
2012-01-21	Joomla! Component Full – ‘id’ SQL Injection	webapps	php	the_cyber_nuxbie
2012-01-21	Tribiq CMS – ‘index.php’ SQL Injection	webapps	php	Skote Vahshat
2012-01-21	Acidcat ASP CMS 3.5 – Multiple Cross-Site Scripting Vulnerabilities	webapps	asp	Avram Marius
2012-01-21	Savant Web Server 3.1 – Remote Buffer Overflow (4)	remote	windows	red-dragon
2012-01-21	ARYADAD – Multiple Vulnerabilities	webapps	asp	Red Security TEAM
2012-01-21	iSupport 1.x – Cross-Site Request Forgery / HTML Code Injection (Add Admin)	webapps	php	Or4nG.M4N
2012-01-21	Nova CMS – Directory Traversal	webapps	php	Red Security TEAM
2012-01-21	PHP iReport 1.0 – Remote Html Code Injection	webapps	php	Or4nG.M4N
2012-01-21	Raven 1.0 – ‘connector.asp’ Arbitrary File Upload	webapps	asp	HELLBOY
2012-01-21	Savant Web Server 3.1 – Remote Buffer Overflow (Egghunter)	remote	windows	red-dragon
2012-01-21	Joomla! Component com_kp – ‘Controller’ Local File Inclusion	webapps	php	the_cyber_nuxbie
2012-01-21	Joomla! Component com_bulkenquery – ‘Controller’ Local File Inclusion	webapps	php	the_cyber_nuxbie
2012-01-21	Joomla! Component com_some – ‘Controller’ Local File Inclusion	webapps	php	the_cyber_nuxbie
2012-01-20	EasyPage – SQL Injection	webapps	asp	Red Security TEAM
2012-01-20	ICTimeAttendance – Authentication Bypass	webapps	asp	v3n0m
2012-01-20	Gitorious – Arbitrary Command Execution (Metasploit)	remote	linux	Metasploit
2012-01-20	HP OpenView Network Node Manager – ‘ov.dll’ _OVBuildPath Buffer Overflow (Metasploit)	remote	windows	Metasploit
2012-01-20	Syneto Unified Threat Management 1.3.3/1.4.2 – Multiple Cross-Site Scripting / HTML Injection Vulnerabilities	webapps	php	Alexander Fuchs
2012-01-20	Snitz Forums 2000 – ‘TOPIC_ID’ SQL Injection	webapps	asp	snup
2012-01-20	VideoLAN VLC Media Player 1.2.0 – ‘libtaglib_pluggin.dll’ Denial of Service	dos	windows	Mitchell Adair
2012-01-20	Avaya WinPDM UniteHostRouter 3.8.2 – Remote Command Execution	remote	windows	Abysssec
2012-01-20	WhatsApp – Remote Change Status	webapps	php	emgent
2012-01-19	appRain CMF 0.1.5 – ‘Uploadify.php’ Unrestricted Arbitrary File Upload	webapps	php	EgiX
2012-01-19	WordPress Plugin ucan post 1.0.09 – Persistent Cross-Site Scripting	webapps	php	Gianluca Brindisi
2012-01-19	Drupal Module CKEditor 3.0 < 3.6.2 - Persistent EventHandler Cross-Site Scripting	webapps	php	MaXe
2012-01-19	Vastal EzineShop – ‘view_mags.php’ SQL Injection	webapps	php	Lazmania61
2012-01-19	PostNuke pnAddressbook Module – ‘id’ SQL Injection	webapps	php	Robert Cooper
2012-01-18	Freelance Zone – ‘show_code.php’ SQL Injection	webapps	php	Lazmania61
2012-01-18	MMORPG Zone – ‘view_news.php’ SQL Injection	webapps	php	Lazmania61
2012-01-18	Toner Cart – ‘show_series_ink.php’ SQL Injection	webapps	php	Lazmania61
2012-01-18	DZCP (deV!L`z Clanportal) 1.5.5 Moviebase Addon – Blind SQL Injection	webapps	php	Easy Laster
2012-01-18	DZCP (deV!L`z Clanportal) Gamebase Addon – SQL Injection	webapps	php	Easy Laster
2012-01-18	PHPBridges Blog System – ‘members.php’ SQL Injection	webapps	php	3spi0n
2012-01-18	pGB 2.12 – ‘kommentar.php’ SQL Injection	webapps	php	3spi0n
2012-01-18	Sysax Multi Server 5.50 – Create Folder Buffer Overflow	remote	windows	Craig Freyman
2012-01-18	HP Easy Printer Care – XMLCacheMgr Class ActiveX Control Remote Code Execution (Metasploit)	remote	windows	Metasploit
2012-01-18	OneOrZero AIMS – ‘index.php’ Cross-Site Scripting	webapps	php	High-Tech Bridge SA
2012-01-17	McAfee SaaS MyCioScan ShowReport – Remote Command Execution (Metasploit)	remote	windows	Metasploit
2012-01-17	BS.Player 2.57 – Local Buffer Overflow (SEH Unicode) (Metasploit)	local	windows	Metasploit
2012-01-17	OverlayFS inode Security Checks – ‘inode.c’ Local Security Bypass	local	linux	Gary Poster
2012-01-17	Rockwell Automation FactoryTalk Activation Server – Multiple Denial of Service Vulnerabilities	dos	multiple	Luigi Auriemma
2012-01-17	Joomla! Component com_discussions – SQL Injection	webapps	php	Red Security TEAM
2012-01-17	Linux Kernel 2.6.36 IGMP – Remote Denial of Service	dos	linux	kingcope
2012-01-17	Mozilla Firefox 3.6.16 (OSX) – mChannel Use-After-Free (Metasploit) (2)	remote	osx	Metasploit
2012-01-16	PHPDomainRegister 0.4a-RC2-dev – Multiple Vulnerabilities	webapps	php	Or4nG.M4N
2012-01-16	BoltWire 3.4.16 – ‘index.php’ Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Stefan Schurtz
2012-01-16	PHP Membership Site Manager Script 2.1 – ‘index.php’ Cross-Site Scripting	webapps	php	Atmon3r
2012-01-16	Annuaire PHP – ‘sites_inscription.php’ Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Atmon3r
2012-01-16	Giveaway Manager – ‘members.php’ Cross-Site Scripting	webapps	php	Am!r