Exploits

日期	标题	类型	平台	作者
2011-12-20	Tiki Wiki CMS Groupware 8.1 – ‘show_errors’ HTML Injection	webapps	php	Stefan Schurtz
2011-12-20	Joomla! Component com_tsonymf – ‘idofitem’ SQL Injection	webapps	php	CoBRa_21
2011-12-19	PHP Booking Calendar 10e – ‘page_info_message’ Cross-Site Scripting	webapps	php	G13
2011-12-19	Free Mp3 Player 1.0 – Local Denial of Service	dos	windows	JaMbA
2011-12-19	Joomla! Component com_dshop – SQL Injection	webapps	php	CoBRa_21
2011-12-19	DotA OpenStats 1.3.9 – SQL Injection	webapps	php	HvM17
2011-12-19	appRain CMF 0.1.5 – Multiple Web Vulnerabilities	webapps	php	Vulnerability-Lab
2011-12-18	Video Community Portal – ‘userID’ SQL Injection	webapps	php	Lazmania61
2011-12-18	novell sentinel log manager 1.2.0.1 – Directory Traversal	webapps	multiple	Andrea Fabrizi
2011-12-18	Apple Safari – GdiDrawStream Blue Screen of Death	dos	windows_x86-64	webDEViL
2011-12-18	PHP 5.3.8 – Remote Denial of Service	dos	php	anonymous
2011-12-17	Social Network Community 2 – ‘userID’ SQL Injection	webapps	php	Lazmania61
2011-12-17	Flirt-Projekt 4.8 – ‘rub’ SQL Injection	webapps	php	Lazmania61
2011-12-16	Fork CMS 3.1.5 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Avram Marius
2011-12-16	mPDF 5.3 – File Disclosure	webapps	php	ZadYree
2011-12-16	Capexweb 1.1 – SQL Injection	webapps	multiple	D1rt3 Dud3
2011-12-16	Seotoaster – SQL Injection	webapps	php	Stefan Schurtz
2011-12-15	Websense 7.6 Products – ‘favorites.exe’ Authentication Bypass	webapps	cgi	Ben Williams
2011-12-15	Websense 7.6 Triton – ‘ws_irpt.exe’ Remote Command Execution	webapps	cgi	Ben Williams
2011-12-15	Websense 7.6 – Triton Report Management Interface Cross-Site Scripting	webapps	cgi	Ben Williams
2011-12-15	Owl Intranet Engine 1.00 – ‘userid’ Authentication Bypass	webapps	php	RedTeam Pentesting GmbH
2011-12-15	Splunk – Remote Command Execution	remote	multiple	Gary O'Leary-Steele
2011-12-14	BrowserCRM 5.100.1 – URI Cross-Site Scripting	webapps	php	High-Tech Bridge SA
2011-12-14	BrowserCRM 5.100.1 – ‘contact_id’ SQL Injection	webapps	php	High-Tech Bridge SA
2011-12-14	BrowserCRM 5.100.1 – ‘parent_id’ SQL Injection	webapps	php	High-Tech Bridge SA
2011-12-14	Pulse Pro 1.7.2 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Avram Marius
2011-12-14	Nagios XI – Multiple Cross-Site Scripting / HTML Injection Vulnerabilities	remote	multiple	anonymous
2011-12-14	BrowserCRM 5.100.1 – ‘login[]’ Cross-Site Scripting	webapps	php	High-Tech Bridge SA
2011-12-14	BrowserCRM 5.100.1 – ‘clients.php’ Cross-Site Scripting	webapps	php	High-Tech Bridge SA
2011-12-14	BrowserCRM 5.100.1 – ‘framed’ Cross-Site Scripting	webapps	php	High-Tech Bridge SA
2011-12-14	PmWiki 2.2.34 – ‘pagelist’ Remote PHP Code Injection (2) (Metasploit)	webapps	php	Metasploit
2011-12-13	CoDeSys SCADA 2.3 – WebServer Stack Buffer Overflow (Metasploit)	remote	windows	Metasploit
2011-12-13	Traq 2.3 – Authentication Bypass / Remote Code Execution (Metasploit)	webapps	php	Metasploit
2011-12-13	WordPress Plugin flash-album-gallery – ‘flagshow.php’ Cross-Site Scripting	webapps	php	Am!r
2011-12-12	WordPress Plugin GRAND FlAGallery 1.57 – ‘flagshow.php’ Cross-Site Scripting	webapps	php	Am!r
2011-12-12	Opera Web Browser < 11.60 - Denial of Service / Multiple Vulnerabilities	dos	windows	anonymous
2011-12-11	Pixie 1.04 – Blog Post Cross-Site Request Forgery	webapps	php	hackme
2011-12-11	zFTPServer Suite 6.0.0.52 – ‘rmdir’ Directory Traversal	remote	windows	Stefan Schurtz
2011-12-11	Xoops 2.5.4 – Blind SQL Injection	webapps	php	blkhtc0rp
2011-12-11	FCMS CMS 2.7.2 – Multiple Cross-Site Request Forgery Vulnerabilities	webapps	php	Ahmed Elhady Mohamed
2011-12-11	WordPress Plugin UPM Polls 1.0.4 – Blind SQL Injection	webapps	php	Saif
2011-12-10	Family CMS 2.7.2 – Multiple Persistent Cross-Site Scripting Vulnerabilities	webapps	php	Ahmed Elhady Mohamed
2011-12-10	Acpid 1:2.0.10-1ubuntu2 (Ubuntu 11.04/11.10) – Boundary Crossing Privilege Escalation	local	linux	otr
2011-12-09	Pet Listing – ‘preview.php’ Cross-Site Scripting	webapps	php	Mr.PaPaRoSSe
2011-12-09	CSF Firewall – Buffer Overflow (PoC)	dos	linux	FoX HaCkEr
2011-12-09	Docebo Lms 4.0.4 – ‘Messages’ Remote Code Execution	webapps	php	mr_me
2011-12-09	Free Opener – Local Denial of Service	dos	windows	Iolo Morganwg
2011-12-09	SePortal 2.5 – SQL Injection (1)	webapps	php	Don
2011-12-09	Apache – Denial of Service	dos	linux	Ramon de C Valle
2011-12-09	CyberLink (Multiple Products) – File Project Handling Stack Buffer Overflow (PoC)	dos	windows	modpr0be