Exploits

日期	标题	类型	平台	作者
2011-10-17	Dominant Creature BBG/RPG Browser Game – Persistent Cross-Site Scripting	webapps	php	M.Jock3R
2011-10-17	WordPress Plugin BackWPUp 2.1.4 – Code Execution	webapps	php	Sense of Security
2011-10-17	Apple Safari – ‘file://’ Arbitrary Code Execution (Metasploit)	remote	osx	Metasploit
2011-10-17	Toshiba e-Studio (Multiple Devices) – Security Bypass	remote	multiple	Deral Heiland PercX
2011-10-17	asgbookPHP 1.9 – ‘index.php’ Cross-Site Scripting	webapps	php	indoushka
2011-10-16	Real Networks Netzip Classic 7.5.1 86 – File Parsing Buffer Overflow (Metasploit)	local	windows	Metasploit
2011-10-16	Ruubikcms 1.1.0 – ‘/extra/image.php’ Local File Inclusion	webapps	php	Sangyun YOO
2011-10-15	WordPress Plugin Photo Album Plus 4.1.1 – SQL Injection	webapps	php	Skraps
2011-10-15	BlueZone Desktop – ‘.zap’ file Local Denial of Service	dos	windows	Silent_Dream
2011-10-15	Microsoft Windows – TCP/IP Stack Denial of Service (MS11-064)	dos	windows	Byoungyoung Lee
2011-10-15	vTiger CRM 5.2 – ‘onlyforuser’ SQL Injection	webapps	php	Aung Khant
2011-10-14	PROMOTIC 8.1.3 – Multiple Vulnerabilities	remote	windows	Luigi Auriemma
2011-10-14	WordPress Plugin Contact Form 2.7.5 – SQL Injection	webapps	php	Skraps
2011-10-14	Xenon – ‘id’ Multiple SQL Injections	webapps	php	m3rciL3Ss
2011-10-13	G-WAN 2.10.6 – Buffer Overflow (Denial of Service) (PoC)	dos	multiple	Fredrik Widlund
2011-10-13	WordPress Plugin Pretty Link 1.4.56 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	High-Tech Bridge SA
2011-10-13	Microsoft Windows – ‘.fon’ Kernel-Mode Buffer Overrun (PoC) (MS11-077)	dos	windows	Byoungyoung Lee
2011-10-13	Mozilla Firefox – ‘Array.reduceRight()’ Integer Overflow (Metasploit) (2)	remote	windows	Metasploit
2011-10-13	Microsys PROMOTIC 8.1.4 – ActiveX GetPromoticSite Unitialized Pointer	dos	windows	Luigi Auriemma
2011-10-12	PcVue 10.0 SV.UIGrdCtrl.1 – ‘LoadObject()’/’SaveObject()’ Trusted DWORD (Metasploit)	remote	windows	Metasploit
2011-10-12	BugFree 2.1.3 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	High-Tech Bridge SA
2011-10-12	Mozilla Firefox – ‘Array.reduceRight()’ Integer Overflow (1)	remote	windows	ryujin
2011-10-12	Joomla! Component com_sgicatalog 1.0 – ‘id’ SQL Injection	webapps	php	BHG Security Center
2011-10-12	WordPress Plugin GD Star Rating 1.9.10 – SQL Injection	webapps	php	Miroslav Stampar
2011-10-12	MyBB MyStatus 3.1 – SQL Injection	webapps	php	Mario_Vs
2011-10-11	JBoss AS 2.0 – Remote Command Execution	remote	windows	kingcope
2011-10-11	Microsoft Internet Explorer 8 – Select Element Memory Corruption	remote	windows	Ivan Fratric
2011-10-11	SilverStripe CMS 2.4.5 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Stefan Schurtz
2011-10-11	WordPress Plugin WP-SpamFree Spam Plugin – SQL Injection	webapps	php	cheki
2011-10-11	Apache mod_proxy – Reverse Proxy Exposure	remote	multiple	Rodrigo Marcos
2011-10-11	2Moons 1.4 – Multiple Remote File Inclusions	webapps	php	indoushka
2011-10-11	TugZip 3.5 Archiver – ‘.ZIP’ File Parsing Buffer Overflow (Metasploit)	local	windows	Metasploit
2011-10-11	Joomla! Component com_shop – ‘id’ SQL Injection	webapps	php	CoBRa_21
2011-10-11	Joomla! Component com_br – ‘state_id’ SQL Injection	webapps	php	CoBRa_21
2011-10-11	Joomla! Component com_tree – ‘key’ SQL Injection	webapps	php	CoBRa_21
2011-10-10	GoAhead Web Server 2.18 – ‘adduser.asp’ Multiple Cross-Site Scripting Vulnerabilities	remote	windows	Silent Dream
2011-10-10	IRAI AUTOMGEN 8.0.0.7 – Use-After-Free	dos	windows	Luigi Auriemma
2011-10-10	GoAhead Web Server 2.18 – ‘addlimit.asp?url’ Cross-Site Scripting	remote	windows	Silent Dream
2011-10-10	atvise webMI2ADS Web Server 1.0 – Multiple Vulnerabilities	dos	windows	Luigi Auriemma
2011-10-10	GoAhead Web Server 2.18 – ‘addgroup.asp?group’ Cross-Site Scripting	remote	windows	Silent Dream
2011-10-10	MyBB Forum Userbar Plugin (Userbar 2.2) – SQL Injection	webapps	php	Mario_Vs
2011-10-10	Jaws 0.8.14 – Multiple Remote File Inclusions	webapps	php	indoushka
2011-10-10	MyBB Advanced Forum Signatures – ‘afsignatures-2.0.4’ SQL Injection	webapps	php	Mario_Vs
2011-10-10	Opera Browser 10/11/12 – ‘SVG Layout’ Memory Corruption (Metasploit)	remote	windows	Jose A. Vazquez
2011-10-10	POSH – Multiple Vulnerabilities	webapps	php	Crashfr
2011-10-10	cotonti CMS 0.9.4 – Multiple Vulnerabilities	webapps	php	LiquidWorm
2011-10-10	Roundcube Webmail 0.3.1 – Cross-Site Request Forgery / SQL Injection	webapps	php	Smith Falcon
2011-10-10	6kbbs – Multiple Vulnerabilities	webapps	php	labs insight
2011-10-10	Filmis 0.2 Beta – Multiple Vulnerabilities	webapps	php	M.Jock3R
2011-10-10	KaiBB 2.0.1 – SQL Injection	webapps	php	Stefan Schurtz