Exploits

日期	标题	类型	平台	作者
2011-12-08	SantriaCMS – SQL Injection	webapps	php	Troy
2011-12-08	Joomla! Component com_qcontacts 1.0.6 – SQL Injection	webapps	php	Don
2011-12-08	HP Application Lifestyle Management 11 – ‘GetInstalledPackages’ Local Privilege Escalation	local	linux	anonymous
2011-12-08	HomeSeer HS2 2.5.0.20 – Web Interface Log Viewer Page URI Cross-Site Scripting	remote	hardware	Silent Dream
2011-12-07	SourceBans 1.4.8 – SQL Injection / Local File Inclusion Injection	webapps	php	Havok
2011-12-07	SMF 2.0.1 – SQL Injection / Privilege Escalation	webapps	php	The:Paradox
2011-12-07	Traq 2.3 – Authentication Bypass / Remote Code Execution	webapps	php	EgiX
2011-12-07	phpBB MyPage Plugin – SQL Injection	webapps	php	CrazyMouse
2011-12-07	PHP City Portal Script Software – SQL Injection	webapps	php	Don
2011-12-07	Family Connections CMS 2.7.1 – ‘less.php’ Remote Command Execution (Metasploit)	webapps	php	Metasploit
2011-12-07	Axis M10 Series Network Cameras – Cross-Site Scripting	remote	hardware	Matt Metzger
2011-12-07	PowerDVD 11.0.0.2114 – Remote Denial of Service	dos	windows	Luigi Auriemma
2011-12-07	Apache Struts 2.0.9/2.1.8 – Session Tampering Security Bypass	remote	multiple	Hisato Killing
2011-12-06	Alstrasoft EPay Enterprise 4.0 – Blind SQL Injection	webapps	php	Don
2011-12-06	Simple Machines Forum (SMF) 1.1.15 – ‘fckeditor’ Arbitrary File Upload	webapps	php	HELLBOY
2011-12-06	WordPress Plugin Pretty Link 1.5.2 – ‘pretty-bar.php’ Cross-Site Scripting	webapps	php	Am!r
2011-12-06	Linux Kernel 2.6.35 – Network Namespace Remote Denial of Service	dos	linux	Serge Hallyn
2011-12-05	Meditate Web Content Editor ‘username_input’ – SQL Injection	webapps	php	Stefan Schurtz
2011-12-05	SopCast 3.4.7 – ‘Diagnose.exe’ Improper Permissions	local	windows	LiquidWorm
2011-12-05	SopCast 3.4.7 – ‘sop://’ URI Handling Remote Stack Buffer Overflow (PoC)	dos	windows	LiquidWorm
2011-12-05	D-Link DNS-320 ShareCenter – Remote Reboot/Shutdown/Reset (Denial of Service)	dos	hardware	rigan
2011-12-05	Elxis CMS 2009 – ‘administrator/index.php’ URI Cross-Site Scripting	webapps	php	Ewerson Guimaraes
2011-12-05	Elxis CMS 2009 – ‘index.php?task’ Cross-Site Scripting	webapps	php	Ewerson Guimaraes
2011-12-05	Serv-U FTP Server 11.1.0.3 – Denial of Service / Security Bypass	dos	windows	Luigi Auriemma
2011-12-04	Family Connections CMS 2.5.0/2.7.1 – ‘less.php’ Remote Command Execution	webapps	php	mr_me
2011-12-03	NJStar Communicator MiniSmtp – Buffer Overflow (ASLR Bypass)	dos	windows	Zune
2011-12-03	CCMPlayer 1.5 – ‘.m3u’ Stack Buffer Overflow (Metasploit)	local	windows	Metasploit
2011-12-02	Ipswitch TFTP Server 1.0.0.24 – Directory Traversal	remote	windows	SecPod Research
2011-12-02	Hillstone Software HS TFTP Server 1.3.2 – Denial of Service	dos	windows	SecPod Research
2011-12-02	HP Device Access Manager for HP ProtectTools 5.0/6.0 – Heap Memory Corruption	dos	windows	High-Tech Bridge SA
2011-12-02	WSN Classifieds 6.2.12/6.2.18 – Multiple Vulnerabilities	webapps	php	d3v1l
2011-12-02	Joomla! Component com_jobprofile – SQL Injection	webapps	php	kaMtiEz
2011-12-02	RhinoSoft Serv-U FTPd Server < 4.2 - Remote Buffer Overflow (Metasploit)	remote	windows	Metasploit
2011-12-01	CoDeSys SCADA 2.3 – Remote Buffer Overflow	remote	windows	Celil Ünüver
2011-12-01	StoryBoard Quick 6 – Local Stack Buffer Overflow (Metasploit)	local	windows	Nick Freeman
2011-12-01	Muster Render Farm Management System – Arbitrary File Download	webapps	php	Nick Freeman
2011-12-01	Final Draft 8 – Multiple Stack Buffer Overflows (Metasploit)	local	windows	Nick Freeman
2011-12-01	AVID Media Composer Phonetic Indexer – Remote Stack Buffer Overflow (Metasploit)	remote	windows	Nick Freeman
2011-12-01	Serv-U FTP Server – Jail Break	remote	windows	kingcope
2011-12-01	FreeBSD – ‘ftpd / ProFTPd’ Remote Command Execution	remote	freebsd	kingcope
2011-12-01	Hero 3.69 – ‘month’ Cross-Site Scripting	webapps	asp	Gjoko Krstic
2011-12-01	AtMail 1.04 – ‘func’ Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Dognædis
2011-11-30	Java Applet Rhino Script Engine – Remote Code Execution (Metasploit)	remote	multiple	Metasploit
2011-11-30	SugarCRM Community Edition 6.3.0RC1 – ‘index.php’ Multiple SQL Injections	webapps	php	High-Tech Bridge SA
2011-11-30	WordPress Plugin flash-album-gallery – ‘facebook.php’ Cross-Site Scripting	webapps	php	Am!r
2011-11-30	WordPress Plugin 1-jquery-photo-gallery-Slideshow-flash 1.01 – Cross-Site Scripting	webapps	php	Am!r
2011-11-30	OrangeHRM 2.6.11 – ‘/lib/controllers/CentralController.php?id’ SQL Injection	webapps	php	High-Tech Bridge SA
2011-11-30	OrangeHRM 2.6.11 – ‘lib/controllers/CentralController.php’ URI Cross-Site Scripting	webapps	php	High-Tech Bridge SA
2011-11-30	IBM Lotus Domino Server Controller – Authentication Bypass	remote	jsp	Alexey Sintsov
2011-11-30	OrangeHRM 2.6.11 – ‘index.php’ Multiple Cross-Site Scripting Vulnerabilities	webapps	php	High-Tech Bridge SA