Exploits

日期	标题	类型	平台	作者
2011-08-25	WordPress Plugin SendIt 1.5.9 – Blind SQL Injection	webapps	php	evilsocket
2011-08-24	VicBlog – ‘tag’ SQL Injection	webapps	php	Eyup CELIK
2011-08-24	Tourismscripts Hotel Portal – ‘hotel_city’ HTML Injection	webapps	php	Eyup CELIK
2011-08-24	CommodityRentals Real Estate Script – ‘txtsearch’ HTML Injection	webapps	php	Eyup CELIK
2011-08-24	F-Secure (Multiple Products) – ActiveX HeapSpray Overwrite (SEH)	local	windows	41.w4r10r
2011-08-24	Help Desk Software 1.1g – Cross-Site Request Forgery (Add Admin)	webapps	php	G13
2011-08-23	Open Classifieds 1.7.2 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Yassin Aboukir
2011-08-23	ManageEngine ServiceDesk Plus 8.0 – Multiple Persistent Cross-Site Scripting Vulnerabilities	webapps	jsp	LiquidWorm
2011-08-22	TotalShopUK 1.7.2 – ‘index.php’ SQL Injection	webapps	php	Eyup CELIK
2011-08-22	DV Cart Shopping Cart software – SQL Injection	webapps	php	Eyup CELIK
2011-08-22	Pandora FMS 3.x – ‘index.php’ Cross-Site Scripting	webapps	php	mehdi boukazoula
2011-08-22	Bonza Digital Cart Script – SQL Injection	webapps	php	Eyup CELIK
2011-08-22	Web Solutions Wcs2u – SQL Injection	webapps	php	tempe_mendoan
2011-08-22	WordPress Plugin MM Duplicate 1.2 – SQL Injection	webapps	php	Miroslav Stampar
2011-08-22	Concrete 5.4.1 1 – ‘rcID’ Cross-Site Scripting	webapps	php	Aung Khant
2011-08-22	Adobe Photoshop CS5 – ‘.gif’ Remote Code Execution	dos	windows	Francis Provencher
2011-08-22	Redlab CMS – Multiple SQL Injections	webapps	asp	tempe_mendoan
2011-08-21	OneFileCMS 1.1.1 – ‘onefilecms.php’ Cross-Site Scripting	webapps	php	mr.pr0n
2011-08-21	OneFileCMS 1.1.1 – Multiple Vulnerabilities	webapps	php	mr.pr0n
2011-08-21	EasySiteEdit – Remote File Inclusion	webapps	php	koskesh jakesh
2011-08-20	WordPress Plugin UnGallery 1.5.8 – Local File Disclosure	webapps	php	Miroslav Stampar
2011-08-20	Axis Commerce (E-Commerce System) – Persistent Cross-Site Scripting	webapps	php	Eyup CELIK
2011-08-20	WordPress Plugin Block-Spam-By-Math-Reloaded – Bypass	webapps	php	Tiago Ferreira & Heyder Andrade
2011-08-20	HP Easy Printer Care – XMLSimpleAccessor Class ActiveX Control Remote Code Execution (Metasploit)	remote	windows	Metasploit
2011-08-20	Freefloat FTP Server – ‘ALLO’ Remote Buffer Overflow	remote	windows	Black.Spook
2011-08-19	Solar FTP Server 2.1.2 – PASV Buffer Overflow (Metasploit)	remote	windows	Qnix
2011-08-19	Apache Struts < 2.2.0 - Remote Command Execution (Metasploit)	remote	multiple	Metasploit
2011-08-19	Xlight FTP Server 3.7 – Remote Buffer Overflow	dos	windows	KedAns-Dz
2011-08-19	PHP < 5.3.7 - Multiple Null Pointer Dereference Denial of Service Vulnerabilities	dos	php	Maksymilian Arciemowicz
2011-08-19	Symantec System Center Alert Management System – ‘hndlrsvc.exe’ Arbitrary Command Execution (Metasploit)	remote	windows	Metasploit
2011-08-19	Symantec System Center Alert Management System – ‘xfr.exe’ Arbitrary Command Execution (Metasploit)	remote	windows	Metasploit
2011-08-19	Oracle Secure Backup – Authentication Bypass/Command Injection (Metasploit)	webapps	php	Metasploit
2011-08-19	Apache – Remote Memory Exhaustion (Denial of Service)	dos	multiple	kingcope
2011-08-19	PHPMyRealty 1.0.7 – SQL Injection	webapps	php	H4T$A
2011-08-19	network tracker .95 – Persistent Cross-Site Scripting	webapps	php	G13
2011-08-18	WordPress Plugin Menu Creator 1.1.7 – SQL Injection	webapps	php	Miroslav Stampar
2011-08-18	WordPress Plugin Allow PHP in Posts and Pages 2.0.0.RC1 – SQL Injection	webapps	php	Miroslav Stampar
2011-08-18	WordPress Plugin Global Content Blocks 1.2 – SQL Injection	webapps	php	Miroslav Stampar
2011-08-18	Mantis Bug Tracker 1.1.8 – Cross-Site Scripting / SQL Injection	webapps	php	Net.Edit0r
2011-08-18	WordPress Plugin Ajax Gallery 3.0 – SQL Injection	webapps	php	Miroslav Stampar
2011-08-18	Adobe ColdFusion – ‘probe.cfm’ Cross-Site Scripting	webapps	cfm	G.R0b1n
2011-08-18	Elgg 1.7.10 – Multiple Vulnerabilities	webapps	php	Aung Khant
2011-08-18	WordPress Plugin Forum 1.7.8 – SQL Injection	webapps	php	Miroslav Stampar
2011-08-18	WordPress Plugin DS FAQ 1.3.2 – SQL Injection	webapps	php	Miroslav Stampar
2011-08-17	SoftwareDEP Classified Script 2.5 – SQL Injection (1)	webapps	php	v3n0m
2011-08-17	Joomla! Component JoomTouch 1.0.2 – Local File Inclusion	webapps	php	NoGe
2011-08-17	WordPress Plugin WP-Stats-Dashboard 2.6.5.1 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	High-Tech Bridge SA
2011-08-17	WordPress Plugin Fast Secure Contact Form 3.0.3.1 – ‘index.php’ Cross-Site Scripting	webapps	php	High-Tech Bridge SA
2011-08-17	Code Widgets Multiple Question – Multiple Choice Online Questionnaire SQL Injections	webapps	asp	L0rd CrusAd3r
2011-08-17	StudioLine Photo Basic 3.70.34.0 – ‘NMSDVDXU.dll’ ActiveX Control Arbitrary File Overwrite	remote	windows	High-Tech Bridge SA