Exploits

日期	标题	类型	平台	作者
2011-10-10	openEngine 2.0 – Multiple Blind SQL Injection Vulnerabilities	webapps	php	Stefan Schurtz
2011-10-10	6KBBS 8.0 build 20101201 – Cross-Site Scripting / Information Disclosure	webapps	php	labs insight
2011-10-10	ACDSee FotoSlate – ‘.PLP’ File ‘id’ Local Overflow (Metasploit)	local	windows	Metasploit
2011-10-10	OPC Systems.NET 4.00.0048 – Denial of Service	dos	windows	Luigi Auriemma
2011-10-09	Joomla! Component com_expedition – ‘id’ SQL Injection	webapps	php	BHG Security Center
2011-10-09	GotoCode Online Classifieds – Multiple Vulnerabilities	webapps	php	Nathaniel Carew
2011-10-09	MyBB 1.6.4 – Backdoor Access (Metasploit)	webapps	php	Metasploit
2011-10-09	ScriptFTP 3.3 – LIST Remote Buffer Overflow (Metasploit) (2)	remote	windows	Metasploit
2011-10-09	Snortreport – ‘/nmap.php’ / ‘nbtscan.php’ Remote Command Execution (Metasploit)	webapps	php	Metasploit
2011-10-08	NexusPHP 1.5 – SQL Injection	webapps	php	flyh4t
2011-10-08	Joomla! Component Time Returns 2.0 – SQL Injection	webapps	php	kaMtiEz
2011-10-08	BOOKSolved 1.2.2 – Remote File Disclosure	webapps	php	bd0rk
2011-10-08	pkexec – Race Condition Privilege Escalation	local	linux	xi4oyu
2011-10-07	Spreecommerce 0.60.1 – Arbitrary Command Execution (Metasploit)	webapps	linux	Metasploit
2011-10-07	BuzzyWall 1.3.2 – ‘resolute.php’ Information Disclosure	webapps	php	cr4wl3r
2011-10-07	BlazeVideo HDTV Player 6.6 Professional – Universal ASLR + DEP Bypass	local	windows	modpr0be
2011-10-07	EFront 3.6.9 Community Edition – Multiple Vulnerabilities	webapps	php	IHTeam
2011-10-07	URL Shortener Script 1.0 – SQL Injection	webapps	php	M.Jock3R
2011-10-06	Active CMS 1.2 – ‘mod’ Cross-Site Scripting	webapps	php	Stefan Schurtz
2011-10-06	Opera 10/11 – Bad Nesting with Frameset Tag Memory Corruption (Metasploit)	remote	windows	Jose A. Vazquez
2011-10-06	PHP 5.3.11/5.4.0RC2 – ‘header()’ HTTP Header Injection	remote	php	Mr. Tokumaru
2011-10-06	Tsmim Lessons Library – ‘show.php’ SQL Injection	webapps	php	M.Jock3R
2011-10-05	DivX Plus Web Player – ‘file://’ Buffer Overflow (PoC)	dos	windows	Snake
2011-10-05	PolicyKit polkit-1 < 0.101 - Local Privilege Escalation	local	linux	zx2c4
2011-10-04	CF Image Hosting Script 1.3.82 – File Disclosure	webapps	php	bd0rk
2011-10-04	Easy Hosting Control Panel – Admin Authentication Bypass	webapps	php	Jasman
2011-10-04	Concrete5 CMS < 5.4.2.1 - Multiple Vulnerabilities	webapps	php	Ryan Dewhurst
2011-10-04	SonicWALL – ‘SessId’ Cookie Brute Force / Admin Session Hijacking	remote	hardware	Hugo Vazquez
2011-10-04	GenStat 14.1.0.5943 – Multiple Vulnerabilities	dos	windows	Luigi Auriemma
2011-10-04	vTiger CRM 5.2.1 – ‘PHPrint.php’ Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Aung Khant
2011-10-04	Cytel Studio 9.0.0 – Multiple Vulnerabilities	dos	windows	Luigi Auriemma
2011-10-04	vTiger CRM 5.2.1 – ‘index.php’ Multiple Cross-Site Scripting Vulnerabilities (1)	webapps	php	Aung Khant
2011-10-04	Google Chrome < 14.0.835.163 - '.pdf' File Handling Memory Corruption	dos	windows	Mario Gomes
2011-10-04	Ashampoo Burning Studio Elements 10.0.9 – ‘.ashprj’ Heap Overflow	dos	windows	LiquidWorm
2011-10-03	Phorum 5.2.18 – ‘/admin/index.php’ Cross-Site Scripting	webapps	php	Stefan Schurtz
2011-10-03	Netvolution 2.5.8 – ‘referer’ Header SQL Injection	webapps	php	Patroklos Argyroudis
2011-10-03	JBoss & JMX Console – Misconfigured Deployment Scanner	webapps	jsp	y0ug
2011-10-03	GotoCode Online Bookstore – Multiple Vulnerabilities	webapps	asp	Nathaniel Carew
2011-10-02	Perl 5.x – Digest Module ‘Digest->new()’ Code Injection	remote	linux	anonymous
2011-10-02	CA Total Defense Suite – reGenerateReports Stored procedure SQL Injection (Metasploit)	webapps	cgi	Metasploit
2011-10-02	SonicWALL Viewpoint 6.0 – ‘scheduleID’ SQL Injection	webapps	php	Rem0ve
2011-10-02	Vivvo CMS – Local File Inclusion	webapps	php	JaBrOtxHaCkEr
2011-10-02	Banana Dance CMS and Wiki – SQL Injection	webapps	php	Aodrulez
2011-10-02	Adobe Photoshop Elements 8.0 – Multiple Arbitrary Code Execution Vulnerabilities	dos	windows	LiquidWorm
2011-10-02	ContaoCMS 2.10.1 – Cross-Site Scripting	webapps	php	Stefan Schurtz
2011-10-01	Polipo 1.0.4.1 – POST/PUT HTTP Header Processing Denial of Service	dos	multiple	Usman Saeed
2011-10-01	ezCourses – ‘admin.asp’ Security Bypass	webapps	php	J.O
2011-09-30	ProjectForum 7.0.1 3038 – ‘more’ Object HTML Injection	webapps	php	Paul Davis
2011-09-30	WordPress Plugin WP Bannerize 2.8.7 – ‘ajax_sorter.php’ SQL Injection	webapps	php	Miroslav Stampar
2011-09-30	Feed on Feeds 0.5 – Remote PHP Code Injection	webapps	php	EgiX