Exploits

日期	标题	类型	平台	作者
2011-11-30	CoDeSys 3.4 – Null Pointer Invalid HTTP Request Parsing Remote Denial of Service	dos	multiple	Luigi Auriemma
2011-11-30	WikkaWiki 1.3.2 – Multiple Vulnerabilities	webapps	php	EgiX
2011-11-30	CoDeSys 3.4 – POST Null Pointer Content-Length Parsing Remote Denial of Service	dos	multiple	Luigi Auriemma
2011-11-30	Microsoft Windows XP/2003 – ‘afd.sys’ Local Privilege Escalation (MS11-080)	local	windows	ryujin
2011-11-30	GOM Player 2.1.33.5071 – ‘.asx’ File Unicode Stack Buffer Overflow	local	windows	Debasish Mandal
2011-11-30	Bugbear FlatOut 2005 – ‘.bed’ File Buffer Overflow	dos	windows	Silent_Dream
2011-11-30	CTEK SkyRouter 4200/4300 – Command Execution (Metasploit)	remote	hardware	Metasploit
2011-11-30	Java Applet Rhino Script Engine – Remote Code Execution (Metasploit)	remote	multiple	Metasploit
2011-11-29	Oxide WebServer – Directory Traversal	remote	windows	demonalex
2011-11-29	Virtual Vertex Muster 6.1.6 – Web Interface Directory Traversal	webapps	asp	Nick Freeman
2011-11-28	Siemens SIMATIC WinCC Flexible (Runtime) – Multiple Vulnerabilities	dos	windows	Luigi Auriemma
2011-11-28	siemens automation license manager 500.0.122.1 – Multiple Vulnerabilities	dos	windows	Luigi Auriemma
2011-11-28	Google Android – ‘content://’ URI Multiple Information Disclosure Vulnerabilities	webapps	android	Thomas Cannon
2011-11-28	Manx 1.0.1 – ‘/admin/admin_pages.php?Filename’ Traversal Arbitrary File Access	webapps	php	LiquidWorm
2011-11-28	Manx 1.0.1 – ‘/admin/admin_blocks.php?Filename’ Traversal Arbitrary File Access	webapps	php	LiquidWorm
2011-11-28	Manx 1.0.1 – ‘/admin/tiny_mce/plugins/ajaxfilemanager_OLD/ajax_get_file_listing.php’ Multiple Cross-Site Scripting Vulnerabilities	webapps	php	LiquidWorm
2011-11-28	Manx 1.0.1 – ‘/admin/tiny_mce/plugins/ajaxfilemanager/ajax_get_file_listing.php’ Multiple Cross-Site Scripting Vulnerabilities	webapps	php	LiquidWorm
2011-11-28	WordPress Plugin Skysa App Bar – ‘idnews’ Cross-Site Scripting	webapps	php	Amir
2011-11-28	JQuery-Real-Person plugin – Bypass Captcha	webapps	php	Alberto_García_Illera
2011-11-26	eSyndiCat Pro 2.3.5 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	d3v1l
2011-11-25	XChat 2.8.9 – Heap Overflow Denial of Service	dos	linux	Jane Doe
2011-11-25	PHP video script – SQL Injection	webapps	php	longrifle0x
2011-11-25	Titan FTP Server 8.40 – ‘APPE’ Remote Denial of Service	dos	windows	Houssam Sahli
2011-11-24	HP Network Node Manager (NMM) i 9.10 – ‘nnm/protected/configurationpoll.jsp?nodename’ Cross-Site Scripting	webapps	jsp	anonymous
2011-11-24	HP Network Node Manager (NMM) i 9.10 – ‘/nnm/mibdiscover?node’ Cross-Site Scripting	webapps	jsp	anonymous
2011-11-24	Apache 7.0.x mod_proxy – Reverse Proxy Security Bypass	remote	linux	Prutha Parikh
2011-11-24	Balitbang CMS 3.3 – ‘alumni.php?hal’ SQL Injection	webapps	php	X-Cisadane
2011-11-24	Balitbang CMS 3.3 – ‘index.php?hal’ SQL Injection	webapps	php	X-Cisadane
2011-11-24	AdaptCMS 2.0 – SQL Injection	webapps	php	X-Cisadane
2011-11-24	Zabbix 1.8.4 – ‘popup.php’ SQL Injection	webapps	php	Marcio Almeida
2011-11-24	LibLime Koha 4.2 – Local File Inclusion	webapps	cgi	Akin Tosunlar
2011-11-24	Log1 CMS 2.0 – ‘ajax_create_folder.php’ Remote Code Execution	webapps	php	Adel SBM
2011-11-24	HP Network Node Manager (NMM) i 9.10 – ‘nnm/protected/traceroute.jsp?nodename’ Cross-Site Scripting	webapps	jsp	anonymous
2011-11-24	HP Network Node Manager (NMM) i 9.10 – ‘nnm/protected/statuspoll.jsp?nodename’ Cross-Site Scripting	webapps	jsp	anonymous
2011-11-24	HP Network Node Manager (NMM) i 9.10 – ‘nnm/protected/ping.jsp?nodename’ Cross-Site Scripting	webapps	jsp	anonymous
2011-11-23	WordPress Plugin ClickDesk Live Support 2.0 – ‘cdwidget’ Cross-Site Scripting	webapps	php	Amir
2011-11-23	Dolibarr ERP/CRM 3.1.0 – ‘/admin/boxes.php?rowid’ SQL Injection	webapps	php	High-Tech Bridge SA
2011-11-23	Pro Clan Manager 0.4.2 – SQL Injection	webapps	php	anonymous
2011-11-23	Dolibarr ERP/CRM 3.1.0 – ‘/user/info.php?id’ SQL Injection	webapps	php	High-Tech Bridge SA
2011-11-23	Dolibarr ERP/CRM 3.1.0 – ‘/user/index.php’ Multiple SQL Injections	webapps	php	High-Tech Bridge SA
2011-11-23	Zen Cart CMS 1.3.9h – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	RPinto
2011-11-23	Dolibarr ERP/CRM 3.1 – Multiple Script URI Cross-Site Scripting Vulnerabilities	webapps	php	High-Tech Bridge SA
2011-11-23	PmWiki 2.2.34 – ‘pagelist’ Remote PHP Code Injection (1)	webapps	php	EgiX
2011-11-23	Prestashop 1.4.4.1 – ‘displayImage.php’ HTTP Response Splitting	webapps	php	RGouveia
2011-11-23	PHP-Nuke 8.1.0.3.5b – ‘Downloads’ Blind SQL Injection	webapps	php	Dante90
2011-11-23	PrestaShop 1.4.4.1 – ‘/admin/ajaxfilemanager/ajax_save_text.php’ Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Prestashop
2011-11-23	bzexe (bzip2) – Race Condition	local	linux	vladz
2011-11-23	PrestaShop 1.4.4.1 – ‘/modules/mondialrelay/kit_mondialrelay/SuiviExpedition_ajax.php?Expedition’ Cross-Site Scripting	webapps	php	Prestashop
2011-11-23	PrestaShop 1.4.4.1 – ‘/modules/mondialrelay/googlemap.php’ Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Prestashop
2011-11-23	PrestaShop 1.4.4.1 mondialrelay (kit_mondialrelay) – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Prestashop