Exploits

日期	标题	类型	平台	作者
2011-10-25	phpLDAPadmin 1.2.1.1 – Remote PHP Code Injection (Metasploit) (2)	webapps	php	Metasploit
2011-10-25	BlueZone Desktop – Multiple Malformed Files Local Denial of Service Vulnerabilities	dos	windows	Silent_Dream
2011-10-24	InverseFlow 2.4 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Amir Expl0its
2011-10-24	e107 0.7.24 – ‘cmd’ Remote Command Execution	webapps	php	Matt Bergin
2011-10-24	Oracle AutoVue 20.0.1 – ‘AutoVueX.ocx’ ActiveX Control ‘ExportEdaBom()’ Insecure Method	remote	windows	rgod
2011-10-24	SAP Management Console – OSExecute Payload Execution (Metasploit)	webapps	windows	Metasploit
2011-10-24	BlueZone – ‘.zft’ File Local Denial of Service	dos	windows	Iolo Morganwg
2011-10-24	zFTPServer – ‘cwd/stat’ Remote Denial of Service	dos	windows	Myo Soe
2011-10-24	Cytel Studio 9.0 – ‘.CY3’ Local Stack Buffer Overflow (Metasploit)	local	windows	Metasploit
2011-10-23	Google Chrome – Denial of Service	dos	multiple	Prashant Uniyal
2011-10-23	Microsoft Win32k – Null Pointer De-reference (PoC) (MS11-077)	dos	windows	KiDebug
2011-10-23	phpLDAPadmin 0.9.4b – Denial of Service	dos	php	Alguien
2011-10-23	InverseFlow 2.4 – Cross-Site Request Forgery (Add Admin)	webapps	php	EjRaM HaCkEr
2011-10-23	phpLDAPadmin 1.2.1.1 – Remote PHP Code Injection (1)	webapps	php	EgiX
2011-10-23	Jara 1.6 – SQL Injection	webapps	php	muuratsalo
2011-10-22	Google Chrome – Killing Thread (PoC)	dos	windows	pigtail23
2011-10-21	SportsPHool 1.0 – Remote File Inclusion	webapps	php	cr4wl3r
2011-10-21	Cyclope Internet Filtering Proxy 4.0 – ‘CEPMServer.exe’ Denial of Service (PoC)	dos	windows	loneferret
2011-10-21	Oracle AutoVue 20.0.1 AutoVueX – ActiveX Control SaveViewStateToFile	remote	windows	rgod
2011-10-21	Opera 11.51 – Use-After-Free Crash (PoC)	dos	windows	Roberto Suggi Liverani
2011-10-21	DELL Quest One Password Manager – CAPTCHA Security Bypass	remote	multiple	Johnny Bravo
2011-10-20	Opera 11.52 – Stack Overflow	dos	windows	pigtail23
2011-10-20	Oracle DataDirect – Multiple Native Wire Protocol ODBC Drivers HOST Attribute Stack Buffer Overflows (PoC)	dos	windows	rgod
2011-10-20	Opera 11.52 – Denial of Service (PoC)	dos	windows	pigtail23
2011-10-20	OCS Inventory NG 2.0.1 – Persistent Cross-Site Scripting	webapps	windows	Nicolas DEROUET
2011-10-20	Simple Free PHP Forum Script – SQL Injection	webapps	php	Skraps
2011-10-20	fims File Management System 1.2.1a – Multiple Vulnerabilities	webapps	php	Skraps
2011-10-20	Uiga Personal Portal – Multiple Vulnerabilities	webapps	php	Eyup CELIK
2011-10-20	Tine 2.0 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	High-Tech Bridge SA
2011-10-20	CMS mini 0.2.2 – Local File Inclusion	webapps	php	BeopSeong/I2Sec
2011-10-20	osCommerce – Arbitrary File Upload / File Disclosure	webapps	php	indoushka
2011-10-20	Splunk 4.1.6 Web Component – Remote Denial of Service	dos	multiple	Filip Palian
2011-10-20	Splunk 4.1.6 – ‘segment’ Cross-Site Scripting	remote	multiple	Filip Palian
2011-10-20	HP Power Manager – ‘formExportDataLogs’ Remote Buffer Overflow (Metasploit)	remote	cgi	Metasploit
2011-10-20	Innovate Portal 2.0 – ‘cat’ Cross-Site Scripting	webapps	php	Eyup CELIK
2011-10-20	Cyclope Internet Filtering Proxy 4.0 – Persistent Cross-Site Scripting	webapps	windows	loneferret
2011-10-20	Metasploit Web UI 4.1.0 – Persistent Cross-Site Scripting	webapps	multiple	Stefan Schurtz
2011-10-20	UnrealIRCd 3.2.8.1 – Local Configuration Stack Overflow	dos	windows	DiGMi
2011-10-20	Pre Studio Business Cards Designer – SQL Injection	webapps	asp	dr_zig
2011-10-19	1024 CMS 1.1.0 Beta – ‘force_download.php’ Local File Inclusion	webapps	php	Sangyun YOO
2011-10-19	WHMCompleteSolution (WHMCS) 3.x < 4.0.x - 'cart.php' Local File Disclosure	webapps	php	Lagripe-Dz & Mca-Crb
2011-10-19	Openemr-4.1.0 – SQL Injection	webapps	php	I2sec-dae jin Oh
2011-10-19	Yet Another CMS 1.0 – SQL Injection / Cross-Site Scripting	webapps	php	Stefan Schurtz
2011-10-19	Boonex Dolphin 6.1 – ‘get_list.php’ SQL Injection	webapps	php	Yuri Goltsev
2011-10-18	Site@School 2.4.10 – ‘/index.php’ Cross-Site Scripting / SQL Injection	webapps	php	Stefan Schurtz
2011-10-18	Check Point UTM-1 Edge and Safe 8.2.43 – Multiple Vulnerabilities	remote	hardware	Richard Brain
2011-10-18	Joomla! Plugin NoNumber Framework – Multiple Vulnerabilities	webapps	php	jdc
2011-10-18	Dolphin 7.0.7 – ‘member_menu_queries.php’ Remote PHP Code Injection	webapps	php	EgiX
2011-10-18	Apple Safari Webkit – libxslt Arbitrary File Creation (Metasploit)	remote	windows	Metasploit
2011-10-17	Dominant Creature BBG/RPG Browser Game – Persistent Cross-Site Scripting	webapps	php	M.Jock3R