Exploits

日期	标题	类型	平台	作者
2011-09-15	StarDevelop LiveHelp 2.0 – ‘index.php’ Local File Inclusion	webapps	php	KedAns-Dz
2011-09-15	Nortel Contact Recording Centralized Archive 6.5.1 – SQL Injection	webapps	jsp	rgod
2011-09-14	Cogent DataHub 7.1.1.63 – Stack Overflow	dos	windows	Luigi Auriemma
2011-09-14	eSignal and eSignal Pro 10.6.2425.1208 – Multiple Vulnerabilities	dos	windows	Luigi Auriemma
2011-09-14	Equis MetaStock 11 – Use-After-Free	dos	windows	Luigi Auriemma
2011-09-14	Beckhoff TwinCAT 2.11.0.2004 – Denial of Service	dos	windows	Luigi Auriemma
2011-09-14	WordPress Plugin Auctions 1.8.8 – ‘wpa_id’ SQL Injection	webapps	php	sherl0ck_
2011-09-14	WordPress Plugin E-Commerce 3.8.6 – SQL Injection	webapps	php	Miroslav Stampar
2011-09-14	Microsoft SharePoint 2007/2010 – ‘Source’ Multiple Open Redirections	webapps	asp	Irene Abezgauz
2011-09-14	Measuresoft ScadaPro 4.0.0 – Multiple Vulnerabilities	dos	windows	Luigi Auriemma
2011-09-14	Rockwell RSLogix 19 – Denial of Service	dos	windows	Luigi Auriemma
2011-09-14	progea movicon / powerhmi 11.2.1085 – Multiple Vulnerabilities	dos	windows	Luigi Auriemma
2011-09-14	DaqFactory 5.85 build 1853 – Stack Overflow	dos	windows	Luigi Auriemma
2011-09-14	Cogent DataHub 7.1.1.63 – Source Disclosure	webapps	windows	Luigi Auriemma
2011-09-14	Cogent DataHub 7.1.1.63 – Integer Overflow	dos	windows	Luigi Auriemma
2011-09-13	ScadaTEC ScadaPhone 5.3.11.1230 – Local Stack Buffer Overflow (Metasploit)	local	windows	Metasploit
2011-09-13	Microsoft WINS – ECommEndDlg Input Validation Error (MS11-035/MS11-070)	dos	windows	Core Security
2011-09-13	Microsoft WINS Service 5.2.3790.4520 – Memory Corruption (MS11-035)	dos	windows	Luigi Auriemma
2011-09-13	dotProject 2.1.5 – SQL Injection	webapps	php	sherl0ck_
2011-09-13	WordPress Plugin Forum Server 1.7 – SQL Injection	webapps	php	Miroslav Stampar
2011-09-13	Carel PlantVisor 2.4.4 – Directory Traversal	webapps	windows	Luigi Auriemma
2011-09-12	Aika 0.2 – colladaconverter Xml Parsing Buffer Overflow	local	windows	isciurus
2011-09-12	KnFTP Server – Remote Buffer Overflow	remote	windows	blake
2011-09-12	TomatoCart 1.1 – (Authenticated) Local File Inclusion	webapps	php	brain[pillow]
2011-09-12	ScadaTEC ModbusTagServer & ScadaPhone – ‘.zip’ Local Buffer Overflow	local	windows	mr_me
2011-09-12	Orion Network Performance Monitor 10.1.3 – ‘CustomChart.aspx’ Cross-Site Scripting	webapps	asp	Gustavo Roberto
2011-09-12	Papoo CMS Light 4.0 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Stefan Schurtz
2011-09-12	Procyon Core Server HMI 1.13 – ‘Coreservice.exe’ Remote Stack Buffer Overflow (Metasploit)	remote	windows	Metasploit
2011-09-12	AstroCMS – Multiple Vulnerabilities	webapps	php	brain[pillow]
2011-09-12	Slaed CMS – Code Execution	webapps	php	brain[pillow]
2011-09-12	NetCat CMS – Multiple Vulnerabilities	webapps	php	brain[pillow]
2011-09-12	PHP Support Tickets 2.2 – Code Execution	webapps	php	brain[pillow]
2011-09-12	Wav Player 1.1.3.6 – ‘.pll’ Local Buffer Overflow	local	windows	Iván García Ferreira
2011-09-10	WordPress Plugin Tune Library 2.17 – SQL Injection	webapps	php	Miroslav Stampar
2011-09-09	MelOn Player 1.0.11.x – Denial of Service (PoC)	dos	windows	modpr0be
2011-09-09	WordPress Plugin Event Registration 5.44 – SQL Injection	webapps	php	serk
2011-09-09	Xataface WebAuction and Xataface Librarian DB – Multiple Vulnerabilities	webapps	php	SecPod Research
2011-09-09	MYRE Real Estate Software – Multiple Vulnerabilities	webapps	php	SecPod Research
2011-09-09	BisonWare BisonFTP Server 3.5 – Remote Buffer Overflow (Metasploit)	remote	windows	SecPod Research
2011-09-09	Spring Security – HTTP Header Injection	remote	multiple	David Mas
2011-09-09	WordPress Plugin A to Z Category Listing 1.3 – SQL Injection	webapps	php	Miroslav Stampar
2011-09-09	WordPress Plugin WP-Filebase Download Manager 0.2.9 – SQL Injection	webapps	php	Miroslav Stampar
2011-09-08	AM4SS 1.2 – Cross-Site Request Forgery (Add Admin)	webapps	php	red virus
2011-09-08	In-link 2.3.4/5.1.3 RC1 – ‘cat’ SQL Injection	webapps	php	SubhashDasyam
2011-09-08	WordPress Plugin Community Events 1.2.1 – SQL Injection	webapps	php	Miroslav Stampar
2011-09-08	SkaDate – ‘blogs.php’ Cross-Site Scripting	webapps	php	sonyy
2011-09-08	WordPress Plugin Paid Downloads 2.01 – SQL Injection	webapps	php	Miroslav Stampar
2011-09-08	Pluck CMS 4.7 – Multiple Local File Inclusion / File Disclosure Vulnerabilities	webapps	php	Bl4k3
2011-09-08	Wireshark 1.6.1 – Malformed Packet Trace File Remote Denial of Service	dos	windows	Wireshark
2011-09-08	OpenCart 1.5.1.2 – Blind SQL Injection	webapps	php	RiRes Walid