Exploits

日期	标题	类型	平台	作者
2011-09-22	TWiki 5.0.2 SlideShowPlugin – Slide Show Pages URI Cross-Site Scripting	webapps	php	Mesut Timur
2011-09-22	TWiki 5.0.2 – ‘/bin/view/Main/Jump?newtopic’ Cross-Site Scripting	webapps	php	Mesut Timur
2011-09-22	Zyncro 3.0.1.20 – Social Network Message Menu SQL Injection	webapps	php	Ferran Pichel Llaquet
2011-09-22	Cogent Datahub 7.1.1.63 – Remote Unicode Buffer Overflow	remote	windows	mr_me
2011-09-22	Zyncro 3.0.1.20 – Multiple HTML Injection Vulnerabilities	webapps	php	Ferran Pichel Llaquet
2011-09-22	Blue Coat Reporter – Directory Traversal	remote	hardware	nitr0us
2011-09-21	MetaServer RT 3.2.1.450 – Multiple Vulnerabilities	dos	windows	Luigi Auriemma
2011-09-21	i-Gallery 3.4 – ‘d’ Cross-Site Scripting	webapps	asp	Kurd-Team
2011-09-21	EViews 7.0.0.1 (aka 7.2) – Multiple Vulnerabilities	dos	windows	Luigi Auriemma
2011-09-21	OneCMS 2.6.4 – Multiple SQL Injections	webapps	php	kurdish hackers team
2011-09-20	eSignal and eSignal Pro 10.6.2425.1208 – File Parsing Buffer Overflow in QUO (Metasploit)	local	windows	Metasploit
2011-09-20	IBM Lotus Domino 8.5.2 – ‘NSFComputeEvaluateExt()’ Remote Stack Buffer Overflow	remote	windows	rmallof
2011-09-20	AVCon – DEP Bypass	local	windows	blake
2011-09-20	ScriptFTP 3.3 – Remote Buffer Overflow (LIST) (1)	remote	windows	modpr0be
2011-09-20	Netgear Wireless Cable Modem Gateway – Authentication Bypass / Cross-Site Request Forgery	webapps	hardware	Sense of Security
2011-09-20	SharePoint 2007/2010 and DotNetNuke < 6 - File Disclosure (via XEE)	webapps	windows	Nicolas Gregoire
2011-09-19	WordPress Plugin Livesig 0.4 – Remote File Inclusion	webapps	php	Ben Schmidt
2011-09-19	WordPress Plugin Annonces 1.2.0.0 – Remote File Inclusion	webapps	php	Ben Schmidt
2011-09-19	WordPress Plugin WPEasyStats 1.8 – Remote File Inclusion	webapps	php	Ben Schmidt
2011-09-19	WordPress Plugin AllWebMenus 1.1.3 – Remote File Inclusion	webapps	php	Ben Schmidt
2011-09-19	WordPress Plugin TheCartPress 1.1.1 – Remote File Inclusion	webapps	php	Ben Schmidt
2011-09-19	Card sharj 1.0 – Multiple SQL Injections	webapps	php	Net.Edit0r
2011-09-19	Toko Lite CMS 1.5.2 – ‘edit.php’ HTTP Response Splitting	webapps	php	LiquidWorm
2011-09-19	Apple Mac OSX (Lion) – Directory Services Security Bypass	local	osx	Defence in Depth
2011-09-19	WordPress Plugin Filedownload 0.1 – ‘download.php’ Remote File Disclosure	webapps	php	Septemb0x
2011-09-19	net4visions (Multiple Products) – ‘dir’ Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Gjoko Krstic
2011-09-19	Aspgwy Access 1.0 – ‘matchword’ Cross-Site Scripting	webapps	asp	kurdish hackers team
2011-09-19	Multiple WordPress Plugins – ‘timthumb.php’ File Upload	webapps	php	Ben Schmidt
2011-09-19	Toko Lite CMS 1.5.2 – HTTP Response Splitting / Cross-Site Scripting	webapps	php	Gjoko Krstic
2011-09-19	Cisco TelePresence SOS-11-010 – Multiple Vulnerabilities	webapps	hardware	Sense of Security
2011-09-19	KnFTP 1.0.0 Server – ‘USER’ Remote Buffer Overflow	remote	windows	mr.pr0n
2011-09-19	WordPress Plugin Relocate Upload 0.14 – Remote File Inclusion	webapps	php	Ben Schmidt
2011-09-19	WordPress Plugin Mini Mail Dashboard Widget 1.36 – Remote File Inclusion	webapps	php	Ben Schmidt
2011-09-19	WordPress Plugin Zingiri Web Shop 2.2.0 – Remote File Inclusion	webapps	php	Ben Schmidt
2011-09-19	WordPress Plugin Mailing List 1.3.2 – Remote File Inclusion	webapps	php	Ben Schmidt
2011-09-19	WordPress Plugin Disclosure Policy 1.0 – Remote File Inclusion	webapps	php	Ben Schmidt
2011-09-18	phpRS 2.8.1 – Multiple SQL Injections / Cross-Site Scripting	webapps	php	iM4n
2011-09-18	WordPress Plugin Count per Day 2.17 – SQL Injection	webapps	php	Miroslav Stampar
2011-09-18	KnFTP 1.0.0 Server – Multiple Buffer Overflows (PoC) (SEH)	dos	windows	loneferret
2011-09-18	DaqFactory – HMI NETB Request Overflow (Metasploit)	remote	windows	Metasploit
2011-09-18	ASP Basit Haber Script 1.0 – ‘id’ SQL Injection	webapps	asp	m3rciL3Ss
2011-09-17	Ay Computer (Multiple Products) – Multiple SQL Injections	webapps	asp	m3rciL3Ss
2011-09-17	MY MP3 Player 3.0 – ‘.m3u’ DEP Bypass	local	windows	blake
2011-09-17	iManager Plugin 1.2.8 – ‘d’ Arbitrary File Deletion	webapps	php	LiquidWorm
2011-09-17	iManager Plugin 1.2.8 – ‘lang’ Local File Inclusion	webapps	php	LiquidWorm
2011-09-17	iBrowser Plugin 1.4.1 – ‘lang’ Local File Inclusion	webapps	php	LiquidWorm
2011-09-17	RealNetworks Realplayer – QCP Parsing Heap Overflow (Metasploit)	remote	windows	Metasploit
2011-09-16	Mini-stream Ripper 2.9.7 – DEP Bypass	local	windows	blake
2011-09-16	PunBB 1.3.5 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Piotr Duszynski
2011-09-16	Measuresoft ScadaPro 4.0.0 – Remote Command Execution (Metasploit)	remote	windows	Metasploit