Exploits

日期	标题	类型	平台	作者
2011-08-31	WordPress Plugin grapefile 1.1 – Arbitrary File Upload	webapps	php	Hrvoje Spoljar
2011-08-31	Web Professional – ‘default.php’ SQL Injection	webapps	php	The_Exploited
2011-08-31	S9Y Serendipity 1.5.1 – ‘research_display.php’ SQL Injection	webapps	php	The_Exploited
2011-08-31	TinyWebGallery 1.8.4 – Local File Inclusion / SQL Injection	webapps	php	KedAns-Dz
2011-08-30	WordPress Plugin Couponer 1.2 – SQL Injection	webapps	php	Miroslav Stampar
2011-08-30	WordPress Plugin PureHTML 1.0.0 – SQL Injection	webapps	php	Miroslav Stampar
2011-08-30	WordPress Plugin yolink Search 1.1.4 – SQL Injection	webapps	php	Miroslav Stampar
2011-08-30	WordPress Plugin Audio Gallery Playlist 0.12 – SQL Injection	webapps	php	Miroslav Stampar
2011-08-30	WordPress Plugin Crawl Rate Tracker 2.0.2 – SQL Injection	webapps	php	Miroslav Stampar
2011-08-30	DVD X Player 5.5.0 Professional / Standard – ‘.plf’ File Universal (ASLR + DEP Bypass)	local	windows	sickness
2011-08-30	FileBox File Hosting & Sharing Script 1.5 – SQL Injection	webapps	php	SubhashDasyam
2011-08-30	vAuthenticate 3.0.1 – Authentication Bypass	webapps	php	bd0rk
2011-08-30	WordPress Plugin Event Registration 5.4.3 – SQL Injection	webapps	php	Miroslav Stampar
2011-08-30	WordPress Plugin Advertizer 1.0 – SQL Injection	webapps	php	Miroslav Stampar
2011-08-30	CS-Cart 2.2.1 – ‘products.php’ SQL Injection	webapps	php	Net.Edit0r
2011-08-30	MapServer 6.0 – ‘.Map’ File Double-Free Remote Denial of Service	dos	windows	rouault
2011-08-30	IBM Open Admin Tool 2.71 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Sumit Kumar Soni
2011-08-29	WordPress Plugin iCopyright(R) Article Tools 1.1.4 – SQL Injection	webapps	php	Miroslav Stampar
2011-08-29	WordPress Plugin SH Slideshow 3.1.4 – SQL Injection	webapps	php	Miroslav Stampar
2011-08-29	DVD X Player 5.5 Professional – ‘.plf’ Universal Buffer Overflow	local	windows	D3r K0n!G
2011-08-29	ClickCMS – Denial of Service / CAPTCHA Bypass	webapps	php	MustLive
2011-08-29	Mini-stream Ripper 2.9.7.273 – ‘.m3u’ Universal Buffer Overflow	local	windows	D3r K0n!G
2011-08-28	LifeSize Room – Command Injection (Metasploit)	webapps	php	Spencer McIntyre
2011-08-28	Mini FTP Server 1.1 – Buffer Corruption Remote Denial of Service	dos	windows	LiquidWorm
2011-08-28	Omnistar Mailer – Multiple Vulnerabilities	webapps	php	Sid3^effects
2011-08-28	WordPress Plugin mySTAT 2.6 – SQL Injection	webapps	php	Miroslav Stampar
2011-08-28	WordPress Plugin Profiles 2.0 RC1 – SQL Injection	webapps	php	Miroslav Stampar
2011-08-28	WordPress Plugin Evarisk 5.1.3.6 – SQL Injection	webapps	php	Miroslav Stampar
2011-08-28	WordPress Plugin Facebook Promotions 1.3.3 – SQL Injection	webapps	php	Miroslav Stampar
2011-08-28	Joomla! Component mod_simpleFileLister 1.0 – Directory Traversal	webapps	php	evilsocket
2011-08-28	Yahoo! player 1.5 – ‘.m3u’ Universal Buffer Overflow (SEH)	local	windows	D3r K0n!G
2011-08-28	Joomla! Component joomlacontenteditor 2.0.10 – Multiple Vulnerabilities	webapps	php	AmnPardaz
2011-08-28	Ferdows CMS Pro 1.1.0 – Multiple Vulnerabilities	webapps	asp	AmnPardaz
2011-08-27	Free MP3 CD Ripper 1.1 – Local Buffer Overflow	local	windows	X-h4ck
2011-08-27	WordPress Plugin MM Forms Community 1.2.3 – SQL Injection	webapps	php	Miroslav Stampar
2011-08-27	WordPress Plugin Js-appointment 1.5 – SQL Injection	webapps	php	Miroslav Stampar
2011-08-27	phpWebSite 1.7.1 – ‘mod.php’ SQL Injection	webapps	php	Ehsan_Hp200
2011-08-27	Free MP3 CD Ripper 1.1 – DEP Bypass	local	windows	C4SS!0 G0M3S
2011-08-27	WordPress Plugin Photoracer 1.0 – Multiple Vulnerabilities	webapps	php	Yakir Wizman
2011-08-27	WordPress Plugin oQey Headers 0.3 – SQL Injection	webapps	php	Miroslav Stampar
2011-08-27	WordPress Plugin Collision Testimonials 3.0 – SQL Injection	webapps	php	Miroslav Stampar
2011-08-27	WordPress Plugin Super CAPTCHA 2.2.4 – SQL Injection	webapps	php	Miroslav Stampar
2011-08-26	Jcow Social Networking Script 4.2 < 5.2 - Arbitrary Code Execution (Metasploit)	webapps	php	Aung Khant
2011-08-26	Mambo 4.6.5 – ‘index.php’ Cross-Site Request Forgery	webapps	php	Caddy-Dz
2011-08-26	Sunway Force Control SCADA 6.1 SP3 – ‘httpsrv.exe’ Remote Overflow	remote	windows	Canberk BOLAT
2011-08-26	WordPress Plugin Photoracer 1.0 – SQL Injection	webapps	php	evilsocket
2011-08-26	RealVNC – Authentication Bypass (Metasploit)	remote	windows	Metasploit
2011-08-26	Groovy Media Player 2.6.0 – ‘.m3u’ Local Buffer Overflow (PoC)	dos	windows	D3r K0n!G
2011-08-25	Simple Machines Forum (SMF) 1.1.14/2.0 – ‘[img]’ BBCode Tag Cross-Site Request Forgery	webapps	php	Christian Yerena
2011-08-25	Zazavi 1.2.1 – ‘/FileManager/Controller.php’ Arbitrary File Upload	webapps	php	KedAns-Dz