Exploits

日期	标题	类型	平台	作者
2012-01-03	OpenKM Document Management System 5.1.7 – Command Execution	webapps	jsp	Cyrill Brunschwiler
2012-01-03	PHP Hash Table Collision – Denial of Service (PoC)	dos	php	Christian Mehlmauer
2012-01-03	WordPress Plugin WHOIS 1.4.2 3 – ‘domain’ Cross-Site Scripting	webapps	php	Atmon3r
2012-01-02	FuseTalk Forums 3.2 – ‘windowed’ Cross-Site Scripting	webapps	php	sonyy
2012-01-02	MyPHPDating 1.0 – SQL Injection	webapps	php	ITTIHACK
2012-01-02	PHP-X-Links Script – SQL Injection	webapps	php	H4ckCity Security Team
2012-01-02	WSN Links Script 2.3.4 – SQL Injection	webapps	php	H4ckCity Security Team
2012-01-01	WordPress Plugin WP Live.php 1.2.1 – ‘s’ Cross-Site Scripting	webapps	php	H4ckCity Security Team
2012-01-01	Siena CMS 1.242 – ‘err’ Cross-Site Scripting	webapps	php	Net.Edit0r
2012-01-01	PHP 5.3.8 – Hashtables Denial of Service	dos	php	infodox
2011-12-31	WordPress Plugin TheCartPress 1.6 – ‘OptionsPostsList.php’ Cross-Site Scripting	webapps	php	6Scan
2011-12-31	WordPress Plugin The Welcomizer 1.3.9.4 – ‘twiz-index.php’ Cross-Site Scripting	webapps	php	Am!r
2011-12-31	lighttpd – Denial of Service (PoC)	dos	linux	pi3
2011-12-30	Neturf eCommerce Shopping Cart – ‘searchFor’ Cross-Site Scripting	webapps	php	farbodmahini
2011-12-30	Akiva WebBoard 8.x – SQL Injection	webapps	php	Alexander Fuchs
2011-12-30	Dede CMS – SQL Injection	webapps	php	CWH & Nafsh
2011-12-30	Reaver – WiFi Protected Setup (WPS)	remote	hardware	cheffner
2011-12-29	Winn Guestbook 2.4.8c – Persistent Cross-Site Scripting	webapps	php	G13
2011-12-29	DIY-CMS blog mod – SQL Injection	webapps	php	snup
2011-12-29	Linux Kernel 3.1.8 – KVM Local Denial of Service	dos	linux	Stephan Sattler
2011-12-29	Pligg CMS 1.1.4 – ‘SERVER[php_self]’ Cross-Site Scripting	webapps	php	SiteWatch
2011-12-29	Pligg CMS 1.1.2 – ‘status’ SQL Injection	webapps	php	SiteWatch
2011-12-28	Joomla! Component Module Simple File Upload 1.3 – Remote Code Execution	webapps	php	gmda
2011-12-28	VideoLAN VLC Media Player 1.1.11 – libav ‘libavcodec_plugin.dll’ Denial of Service	dos	windows	Mitchell Adair
2011-12-27	CoCSoft Stream Down 6.8.0 – Universal (Metasploit)	remote	windows	Fady Mohammed Osman
2011-12-26	TelnetD encrypt_keyid – Function Pointer Overwrite	remote	linux	NighterMan & BatchDrake
2011-12-26	Nagios Plugins check_ups – Local Buffer Overflow (PoC)	dos	linux	Stefan Schurtz
2011-12-26	Free Image Hosting Script – Arbitrary File Upload	webapps	php	ySecurity
2011-12-26	WordPress Plugin Mailing List – Arbitrary File Download	webapps	php	6Scan
2011-12-25	OpenEMR 4 – Multiple Vulnerabilities	webapps	php	Level
2011-12-24	Microsoft Windows Explorer – Denial of Service	dos	windows	Level
2011-12-24	Microsoft Windows Media Player 11.0.5721.5262 – Remote Denial of Service	dos	windows	Level
2011-12-24	Putty 0.60 – Crash (PoC)	dos	windows	Level
2011-12-24	MySQL 5.5.8 – Remote Denial of Service	dos	windows	Level
2011-12-24	freeSSHd – Denial of Service (PoC)	dos	windows	Level
2011-12-23	Open Conference/Journal/Harvester Systems 2.3.x – Multiple Remote Code Execution Vulnerabilities	webapps	php	mr_me
2011-12-22	Tiki Wiki CMS Groupware 8.2 – ‘snarf_ajax.php’ Remote PHP Code Injection	webapps	php	EgiX
2011-12-21	Plone and Zope – Remote Command Execution	webapps	multiple	Nick Miles
2011-12-21	SpamTitan 5.08 – Multiple Vulnerabilities	webapps	php	Vulnerability-Lab
2011-12-21	Barracuda Control Center 620 – Multiple Web Vulnerabilities	webapps	jsp	Vulnerability-Lab
2011-12-21	Infoproject Business Hero – Multiple Vulnerabilities	webapps	php	LiquidWorm
2011-12-21	Kaspersky Internet Security/Anti-Virus – ‘.cfg’ File Memory Corruption	local	windows	Vulnerability Research Laboratory
2011-12-21	Barracuda Control Center 620 – Cross-Site Scripting / HTML Injection	remote	hardware	Vulnerability-Lab
2011-12-21	epesi BIM 1.2 rev 8154 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	High-Tech Bridge SA
2011-12-20	Tiki Wiki CMS Groupware 8.1 – ‘show_errors’ HTML Injection	webapps	php	Stefan Schurtz
2011-12-20	Joomla! Component com_tsonymf – ‘idofitem’ SQL Injection	webapps	php	CoBRa_21
2011-12-20	TORCS 1.3.1 – acc Buffer Overflow	local	windows	Andrés Gómez
2011-12-20	IrfanView – ‘.tiff’ Image Processing Buffer Overflow	dos	windows	Francis Provencher
2011-12-20	IrfanView FlashPix PlugIn – Double-Free	dos	windows	Francis Provencher
2011-12-20	Cyberoam UTM 10 – ‘tableid’ SQL Injection	webapps	php	Benjamin Kunz Mejri