Exploits

日期	标题	类型	平台	作者
2011-11-13	Aviosoft Digital TV Player Professional 1.0 – Local Stack Buffer Overflow (Metasploit)	local	windows	Metasploit
2011-11-13	Support Incident Tracker 3.65 – Remote Command Execution (Metasploit)	webapps	php	Metasploit
2011-11-11	Kool Media Converter 2.6.0 – ‘.ogg’ File Buffer Overflow	dos	windows	swami
2011-11-11	Infoblox NetMRI 6.2.1 – Admin Login Page Multiple Cross-Site Scripting Vulnerabilities	webapps	java	Jose Carlos de Arriba
2011-11-11	Kool Media Converter 2.6.0 – Denial of Service	dos	windows	swami
2011-11-11	Soda PDF Professional 1.2.155 – ‘.pdf’ / ‘.WWF’ File Handling Denial of Service	dos	windows	LiquidWorm
2011-11-10	Joomla! Component com_alfcontact 1.9.3 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Jose Carlos de Arriba
2011-11-10	glibc – ‘LD_AUDIT’ Arbitrary DSO Load Privilege Escalation	local	linux	zx2c4
2011-11-09	AbsoluteFTP 1.9.6 < 2.2.10 - 'LIST' Remote Buffer Overflow (Metasploit)	remote	windows	Node
2011-11-09	COMTREND CT-5624 Router – Root/Support Password Disclosure/Change	webapps	hardware	Todor Donev
2011-11-09	labwiki 1.1 – Multiple Vulnerabilities	webapps	php	muuratsalo
2011-11-09	osCSS2 – ‘_ID’ Local file Inclusion	webapps	php	Stefan Schurtz
2011-11-09	Aviosoft Digital TV Player Professional 1.x – Local Stack Buffer Overflow	local	windows	modpr0be
2011-11-09	AShop – Open Redirection / Cross-Site Scripting	webapps	php	Infoserve Security Team
2011-11-09	OpenPAM – ‘pam_start()’ Local Privilege Escalation	local	bsd	IKCE
2011-11-08	11in1 CMS 1.0.1 – ‘do.php’ CRLF Injection	webapps	php	LiquidWorm
2011-11-08	Microsoft Windows – TCP/IP Stack Reference Counter Integer Overflow (MS11-083)	dos	windows	anonymous
2011-11-08	PBCS Technology – ‘articlenav.php’ SQL Injection	webapps	php	Kalashinkov3
2011-11-07	Oracle NoSQL 11g 1.1.100 R2 – ‘log’ Directory Traversal	webapps	java	Buherátor
2011-11-07	XAMPP 1.7.7 – ‘PHP_SELF’ Multiple Cross-Site Scripting Vulnerabilities	remote	windows	Gjoko Krstic
2011-11-07	Admin Bot – ‘news.php’ SQL Injection	webapps	php	baltazar
2011-11-07	SmartJobBoard – ‘keywords’ Cross-Site Scripting	webapps	php	Mr.PaPaRoSSe
2011-11-07	Oracle – xdb.xdb_pitrig_pkg.PITRIG_DROPMETADATA procedure	remote	windows	David Maman
2011-11-07	Oracle Hyperion Strategic Finance 12.x – Tidestone Formula One WorkBook OLE Control TTF16.ocx Remote Heap Overflow	remote	windows	rgod
2011-11-07	OrderSys 1.6.4 – SQL Injection	webapps	php	muuratsalo
2011-11-07	LabStoRe 1.5.4 – SQL Injection	webapps	php	muuratsalo
2011-11-07	KnFTP 1.0 – Remote Buffer Overflow (DEP Bypass) (Metasploit)	remote	windows	pasta
2011-11-07	WHMCompleteSolution 3.x/4.x – Multiple Vulnerabilities	webapps	php	ZxH-Labs
2011-11-07	Linux Kernel 3.0.4 – ‘/proc/interrupts’ Password Length Local Information Disclosure	local	linux	Vasiliy Kulikov
2011-11-05	ZenPhoto 1.4.1.4 – ‘ajax_create_folder.php’ Remote Code Execution	webapps	php	EgiX
2011-11-05	Microsoft Excel 2007 – ‘.xlb’ Local Buffer Overflow (MS11-021) (Metasploit)	local	windows	Metasploit
2011-11-05	Calibre E-Book Reader – Local Privilege Escalation (3)	local	linux	zx2c4
2011-11-05	aidiCMS 3.55 – ‘ajax_create_folder.php’ Remote Code Execution	webapps	php	EgiX
2011-11-05	PHPMyFAQ 2.7.0 – ‘ajax_create_folder.php’ Remote Code Execution	webapps	php	EgiX
2011-11-04	Mini-stream Ripper 3.0.1.1 – Local Buffer Overflow (Metasploit) (3)	local	windows	Metasploit
2011-11-04	WHMCompleteSolution (WHMCS) 3.x – ‘clientarea.php’ Local File Disclosure	webapps	php	red virus
2011-11-04	Linux Kernel 2.6.37-rc1 – ‘serial_multiport_struct’ Local Information Leak	local	linux	Todor Donev
2011-11-04	Libc – ‘regcomp()’ Stack Exhaustion Denial of Service	dos	multiple	Maksymilian Arciemowicz
2011-11-04	DreamBox DM800 1.5rc1 – File Disclosure	remote	hardware	Todor Donev
2011-11-04	WordPress Theme Bonus 1.0 – ‘s’ Cross-Site Scripting	webapps	php	3spi0n
2011-11-04	Microsoft Excel 2003 11.8335.8333 – Use-After-Free	dos	windows	Luigi Auriemma
2011-11-04	DreamBox DM800 – ‘file’ Local File Disclosure	webapps	hardware	Todor Donev
2011-11-04	HP Data Protector Media Operations 6.20 – Directory Traversal	webapps	windows	Luigi Auriemma
2011-11-04	Advanced Poll 2.02 – SQL Injection	webapps	php	Yassin Aboukir
2011-11-04	Ajax File and Image Manager 1.0 Final – Remote Code Execution	webapps	php	EgiX
2011-11-04	Centreon 2.3.1 – ‘command_name’ Remote Command Execution	webapps	php	Christophe de la Fuente
2011-11-03	CmyDocument – Multiple Cross-Site Scripting Vulnerabilities	webapps	asp	demonalex
2011-11-03	Google Android 2.3.5 – PowerVR SGX Driver Information Disclosure	remote	android	Geremy Condra
2011-11-03	S9Y Serendipity 1.5.5 – ‘serendipity[filter][bp.ALT]’ Cross-Site Scripting	webapps	php	Stefan Schurtz
2011-11-03	Calibre E-Book Reader – Race Condition Privilege Escalation	local	linux	zx2c4