Exploits

日期	标题	类型	平台	作者
2011-09-30	WordPress Theme Morning Coffee 3.5 – ‘index.php’ Cross-Site Scripting	webapps	php	SiteWatch
2011-09-30	ProjectForum 7.0.1 3038 – ‘more’ Object HTML Injection	webapps	php	Paul Davis
2011-09-30	WordPress Plugin WP Bannerize 2.8.7 – ‘ajax_sorter.php’ SQL Injection	webapps	php	Miroslav Stampar
2011-09-30	Feed on Feeds 0.5 – Remote PHP Code Injection	webapps	php	EgiX
2011-09-30	WordPress Theme RedLine 1.65 – ‘s’ Cross-Site Scripting	webapps	php	SiteWatch
2011-09-30	Marinet CMS – ‘room.php’ Blind SQL Injection	webapps	php	BHG Security Center
2011-09-29	Typo3 – File Disclosure	webapps	php	Number 7
2011-09-29	ScriptFTP 3.3 – Remote Buffer Overflow (Metasploit)	remote	windows	otoy
2011-09-29	NCSS 07.1.21 – Array Overflow with Write2	dos	windows	Luigi Auriemma
2011-09-29	WordPress Theme Pixiv Custom Theme 2.1.5 – ‘cpage’ Cross-Site Scripting	webapps	php	SiteWatch
2011-09-29	WordPress Theme EvoLve 1.2.5 – ‘s’ Cross-Site Scripting	webapps	php	SiteWatch
2011-09-29	WordPress Theme Elegant Grunge 1.0.3 – ‘s’ Cross-Site Scripting	webapps	php	SiteWatch
2011-09-29	WordPress Theme Atahualpa 3.6.7 – ‘s’ Cross-Site Scripting	webapps	php	SiteWatch
2011-09-29	Bitweaver 2.8.1 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Stefan Schurtz
2011-09-29	Joomla! < 1.7.0 - Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Aung Khant
2011-09-28	Norman Security Suite 8 – ‘nprosec.sys’ Local Privilege Escalation	local	windows	Xst3nZ
2011-09-28	Apple Mac OSX < 10.6.7 - Kernel Panic (Denial of Service)	dos	osx	hkpco
2011-09-28	timelive time and expense tracking 4.1.1 – Multiple Vulnerabilities	webapps	asp	Nathaniel Carew
2011-09-28	A2CMS – ‘index.php’ Local File Disclosure	webapps	php	St493r
2011-09-28	Traq 2.2 – Multiple SQL Injections / Cross-Site Scripting	webapps	php	High-Tech Bridge SA
2011-09-27	ServersCheck Monitoring Software 8.8.x – Multiple Vulnerabilities	remote	windows	Vulnerability-Lab
2011-09-27	Vanira CMS – ‘vtpidshow’ SQL Injection	webapps	php	kurdish hackers team
2011-09-27	Adobe ColdFusion 7 – Multiple Cross-Site Scripting Vulnerabilities	webapps	cfm	MustLive
2011-09-27	redmind Online-Shop / E-Commerce-System – SQL Injection	webapps	php	Indonesian BlackCoder
2011-09-27	Omnidocs – Multiple Vulnerabilities	webapps	jsp	Sohil Garg
2011-09-27	PcVue 10.0 – Multiple Vulnerabilities	dos	windows	Luigi Auriemma
2011-09-27	Jarida 1.0 – Multiple Vulnerabilities	webapps	php	Ptrace Security
2011-09-27	WordPress Plugin Mingle Forum 1.0.31 – SQL Injection	webapps	php	Miroslav Stampar
2011-09-26	GMER 1.0.15.15641 – MFT Overwrite	dos	windows	Heurs
2011-09-26	Sterling Trader 7.0.2 – Integer Overflow	dos	windows	Luigi Auriemma
2011-09-26	Joomla! Component Biitatemplateshop – ‘groups’ SQL Injection	webapps	php	BHG Security Group
2011-09-26	S9Y Serendipity Freetag-plugin 3.23 – ‘serendipity[tagview]’ Cross-Site Scripting	webapps	php	Stefan Schurtz
2011-09-26	AdaptCMS 2.0.1 – Cross-Site Scripting / Information Disclosure	webapps	php	Stefan Schurtz
2011-09-26	WordPress Plugin BuddyPress 1.2.10 / WordPress Theme DEV Blogs Mu 1.2.6 (WordPress 3.1.4) – Regular Subscriber HTML Injection	webapps	php	knull
2011-09-26	GTA SA-MP server.cfg – Local Buffer Overflow	local	windows	Silent_Dream
2011-09-26	Muse Music All-in-One 1.5.0.001 – ‘.pls’ Local Buffer Overflow (DEP Bypass)	local	windows	C4SS!0 G0M3S
2011-09-26	WordPress Plugin CevherShare 2.0 – SQL Injection	webapps	php	bd0rk
2011-09-24	WordPress Plugin AdRotate 3.6.5 – SQL Injection	webapps	php	Miroslav Stampar
2011-09-24	WordPress Plugin Link Library 5.2.1 – SQL Injection	webapps	php	Miroslav Stampar
2011-09-24	WordPress Theme Web Minimalist 1.1 – ‘index.php’ Cross-Site Scripting	webapps	php	SiteWatch
2011-09-24	WordPress Theme Cover WP 1.6.5 – ‘s’ Cross-Site Scripting	webapps	php	jabdah
2011-09-24	IceWarp Mail Server 10.3.2 server/webmail.php Soap Message Parsing – Arbitrary File Disclosure	webapps	php	David Kirkpatrick
2011-09-24	PHP PDORow Object – Remote Denial of Service	dos	php	anonymous
2011-09-24	WordPress Theme F8 Lite 4.2.1 – ‘s’ Cross-Site Scripting	webapps	php	SiteWatch
2011-09-24	WordPress Theme Trending 0.1 – ‘cpage’ Cross-Site Scripting	webapps	php	SiteWatch
2011-09-24	WordPress Theme Hybrid 0.9 – ‘cpage’ Cross-Site Scripting	webapps	php	SiteWatch
2011-09-23	Freefloat FTP Server – Remote Buffer Overflow (DEP Bypass)	remote	windows	blake
2011-09-23	sunway ForceControl 6.1 sp3 – Multiple Vulnerabilities	dos	windows	Luigi Auriemma
2011-09-22	Zyncro 3.0.1.20 – Social Network Message Menu SQL Injection	webapps	php	Ferran Pichel Llaquet
2011-09-22	Zyncro 3.0.1.20 – Multiple HTML Injection Vulnerabilities	webapps	php	Ferran Pichel Llaquet