Exploits

日期	标题	类型	平台	作者
2012-01-16	phpVideoPro 0.8.x/0.9.7 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Stefan Schurtz
2012-01-16	Beehive Forum 101 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Stefan Schurtz
2012-01-16	ATutor 2.0.3 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Stefan Schurtz
2012-01-15	Cloupia End-to-end FlexPod Management – Directory Traversal	webapps	jsp	Chris Rock
2012-01-15	PHP Ringtone Website – ‘ringtones.php’ Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Atmon3r
2012-01-14	Microsoft Windows – Assembly Execution (MS12-005)	local	windows	Byoungyoung Lee
2012-01-14	phpMyAdmin 3.3.x/3.4.x – Local File Inclusion via XML External Entity Injection (Metasploit)	webapps	php	Marco Batista
2012-01-14	PHP 5.3.8 – Multiple Vulnerabilities	dos	multiple	Maksymilian Arciemowicz
2012-01-14	FreeBSD – Telnet Service Encryption Key ID Buffer Overflow (Metasploit)	remote	bsd	Metasploit
2012-01-14	WordPress Plugin Evarisk – ‘uploadPhotoApres.php’ Arbitrary File Upload	webapps	php	Sammy FORGIT
2012-01-14	Linux BSD-derived Telnet Service Encryption Key ID – Remote Buffer Overflow (Metasploit)	remote	linux	Metasploit
2012-01-14	XAMPP – WebDAV PHP Upload (Metasploit)	remote	windows	Metasploit
2012-01-14	Adobe Reader – U3D Memory Corruption (Metasploit)	local	windows	Metasploit
2012-01-14	Microsoft Internet Explorer – JavaScript OnLoad Handler Remote Code Execution (MS05-054) (Metasploit)	remote	windows	Metasploit
2012-01-13	MailEnable Webmail – Cross-Site Scripting	webapps	asp	Sajjad Pourali
2012-01-13	Contus Job Portal – ‘Category’ SQL Injection	webapps	java	Lazmania61
2012-01-13	Pragyan CMS 2.6.1 – Arbitrary File Upload	webapps	php	Dr.KroOoZ
2012-01-13	Tine 2.0 – Maischa Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Vulnerability-Lab
2012-01-12	Joomla! Component com_contushdvideoshare 1.3 – ‘id’ SQL Injection	webapps	php	Lazmania61
2012-01-12	MailEnable 6.02 – ‘ForgottonPassword.aspx’ Cross-Site Scripting	webapps	asp	Sajjad Pourali
2012-01-12	Linux Kernel 2.6.39 < 3.2.2 (x86/x64) - 'Mempodipper' Local Privilege Escalation (2)	local	linux	zx2c4
2012-01-12	GreenBrowser 6.0.1002 – Search Bar Short Cut Button Double-Free Remote Memory Corruption	remote	windows	NCNIPC
2012-01-12	WordPress Plugin Count Per Day – Multiple Vulnerabilities	webapps	php	6Scan
2012-01-12	WorldMail IMAPd 3.0 – Remote Overflow (SEH) (Egghunter)	remote	windows	TheXero
2012-01-12	WordPress Plugin wp-autoyoutube – Blind SQL Injection	webapps	php	longrifle0x
2012-01-12	Advanced Image Hosting Script – SQL Injection	webapps	php	Robert Cooper
2012-01-11	Apache 2.2 – Scoreboard Invalid Free On Shutdown	dos	linux	halfdog
2012-01-11	Kayako SupportSuite 3.x – Multiple Vulnerabilities	webapps	php	Yuri Goltsev
2012-01-11	KnowledgeTree 3.x – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	High-Tech Bridge SA
2012-01-11	ExpressView Browser Plugin 6.5.0.3330 – Multiple Integer Overflow / Remote Code Execution Vulnerabilities	remote	windows	Luigi Auriemma
2012-01-10	Microsoft AntiXSS 3/4.0 Library Sanitization Module – Security Bypass	remote	windows	Adi Cohen
2012-01-10	Novell Netware – XNFS caller_name xdrDecodeString Remote Code Execution	dos	netware	Francis Provencher
2012-01-10	WordPress Plugin Age Verification 0.4 – Open Redirect	webapps	php	Gianluca Brindisi
2012-01-10	SonicWALL AntiSpam & EMail 7.3.1 – Multiple Vulnerabilities	remote	multiple	Benjamin Kunz Mejri
2012-01-10	Blade API Monitor 3.6.9.2 – Unicode Stack Buffer Overflow	local	windows	FullMetalFouad
2012-01-10	w-CMS 2.01 – Multiple Vulnerabilities	webapps	php	th3.g4m3_0v3r
2012-01-10	Pragyan CMS 3.0 – Remote File Disclosure	webapps	php	Or4nG.M4N
2012-01-10	TFTP Server 1.4 – ST ‘RRQ’ Remote Buffer Overflow	remote	windows	b33f
2012-01-10	RazorCMS 1.2 – Directory Traversal	webapps	php	chap0
2012-01-10	Wireshark – Buffer Underflow / Denial of Service	dos	linux	Laurent Butti
2012-01-10	PHP-Fusion 7.2.4 – ‘downloads.php’ Cross-Site Scripting	webapps	php	Am!r
2012-01-10	WordPress Plugin Age Verification 0.4 – ‘redirect_to’ Open Redirection	webapps	php	Gianluca Brindisi
2012-01-09	Advanced File Management 1.4 – ‘users.php’ Cross-Site Scripting	webapps	php	Am!r
2012-01-09	Gregarius 0.6.1 – Multiple SQL Injections / Cross-Site Scripting	webapps	php	sonyy
2012-01-09	Marinet CMS – ‘gallery.php?id’ SQL Injection	webapps	php	H4ckCity Security Team
2012-01-09	Marinet CMS – ‘galleryphoto.php?id’ SQL Injection	webapps	php	H4ckCity Security Team
2012-01-09	Marinet CMS – ‘room2.php?roomid’ SQL Injection	webapps	php	H4ckCity Security Team
2012-01-09	Clipbucket 2.6 – ‘channels.php?time’ SQL Injection	webapps	php	YaDoY666
2012-01-09	Enigma2 Webinterface 1.5.x/1.6.x/1.7.x (Linux) – Remote File Disclosure	webapps	linux	Todor Donev
2012-01-09	Clipbucket 2.6 – ‘videos.php?time’ SQL Injection	webapps	php	YaDoY666