Exploits

日期	标题	类型	平台	作者
2011-08-07	Simple Machines Forum (SMF) 2.0 – Session Hijacking	webapps	php	seth
2011-08-07	HP JetDirect PJL – Query Execution (Metasploit)	remote	hardware	Myo Soe
2011-08-07	HP JetDirect PJL – Interface Universal Directory Traversal (Metasploit)	remote	hardware	Myo Soe
2011-08-07	Free CD to MP3 Converter 3.1 – Universal DEP Bypass	local	windows	C4SS!0 G0M3S
2011-08-06	Cart Software – Multiple Vulnerabilities	webapps	php	hosinn
2011-08-06	ATutor 2.0.2 – Multiple Vulnerabilities	webapps	php	LiquidWorm
2011-08-06	AChecker 1.2 – Multiple Error-Based SQL Injection Vulnerabilities	webapps	php	LiquidWorm
2011-08-06	acontent 1.1 – Multiple Vulnerabilities	webapps	php	LiquidWorm
2011-08-06	WordPress Plugin Media Library Categories 1.0.6 – SQL Injection	webapps	php	Miroslav Stampar
2011-08-06	WordPress Plugin UPM Polls 1.0.3 – SQL Injection	webapps	php	Miroslav Stampar
2011-08-05	Softbiz Recipes Portal Script – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Net.Edit0r
2011-08-05	threedify designer 5.0.2 – Multiple Vulnerabilities	dos	windows	High-Tech Bridge SA
2011-08-05	CiscoKits 1.0 – TFTP Server Directory Traversal	remote	windows	SecPod Research
2011-08-05	CiscoKits 1.0 – TFTP Server ‘Write Command’ Denial of Service	dos	windows	SecPod Research
2011-08-05	WordPress Plugin Social Slider 5.6.5 – SQL Injection	webapps	php	Miroslav Stampar
2011-08-05	WordPress Plugin ProPlayer 4.7.7 – SQL Injection	webapps	php	Miroslav Stampar
2011-08-05	Sun/Oracle GlassFish Server – (Authenticated) Code Execution (Metasploit)	webapps	jsp	Metasploit
2011-08-05	HP Data Protector (HP-UX) – Remote Shell	remote	hp-ux	Adrian Puente Z.
2011-08-05	WordPress Plugin E-Commerce 3.8.4 – SQL Injection	webapps	php	IHTeam
2011-08-05	Mozilla Firefox 3.6.16 – OBJECT mChannel Remote Code Execution (DEP Bypass) (Metasploit)	remote	windows	Rh0
2011-08-05	Unrar 3.9.3 – Local Stack Overflow	local	linux	ZadYree
2011-08-05	OpenSLP 1.2.1 / < 1647 trunk - Denial of Service	dos	multiple	Nicolas Gregoire
2011-08-04	Community Server 2007/2008 – ‘TagSelector.aspx’ Cross-Site Scripting	webapps	asp	PontoSec
2011-08-04	FreeAmp 2.0.7 – ‘.fat’ Local Buffer Overflow (Metasploit)	local	windows	James Fitts
2011-08-04	WordPress Plugin WP E-Commerce 3.8.6 – ‘cart_messages[]’ Cross-Site Scripting	webapps	php	High-Tech Bridge SA
2011-08-04	DZYGroup CMS Portal – Multiple SQL Injections	webapps	multiple	Netrondoank
2011-08-04	ABBS Electronic Flashcards 2.1 – Local Buffer Overflow (Metasploit)	local	windows	James Fitts
2011-08-04	Xpdf 3.02-13 – ‘zxpdf’ Security Bypass	remote	multiple	Chung-chieh Shan
2011-08-04	ABBS Audio Media Player 3.0 – Local Buffer Overflow (Metasploit)	local	windows	James Fitts
2011-08-03	WordPress Plugin TimThumb 1.32 – Remote Code Execution	webapps	php	MaXe
2011-08-03	foomatic-gui python-foomatic 0.7.9.4 – ‘pysmb.py’ Arbitrary Shell Command Execution	remote	multiple	daveb
2011-08-03	Omnicom Alpha 4.0e LPD Server – Denial of Service	dos	windows	Craig Freyman
2011-08-03	Joomla! Component com_xeslidegalfx – ‘id’ SQL Injection	webapps	php	Ne0 H4ck3R
2011-08-03	Zinf Audio Player 2.2.1 – ‘.pls’ Local Buffer Overflow (DEP Bypass)	local	windows	C4SS!0 & h1ch4m
2011-08-03	Ataccan E-Ticaret Scripti – ‘id’ SQL Injection	webapps	asp	Err0R
2011-08-03	BESNI OKUL PORTAL – ‘sayfa.asp’ Cross-Site Scripting	webapps	asp	Err0R
2011-08-03	mt LinkDatenbank – ‘b’ Cross-Site Scripting	webapps	php	Err0R
2011-08-03	Kolibri HTTP Server 2.0 – HEAD Buffer Overflow (Metasploit)	remote	windows	Metasploit
2011-08-03	HESK 2.2 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	High-Tech Bridge SA
2011-08-03	Joomla! Component com_community – ‘userid’ SQL Injection	webapps	php	Ne0 H4ck3R
2011-08-03	Joomla! Component com_jdirectory – SQL Injection	webapps	php	Caddy Dz
2011-08-02	SiteGenius – Blind SQL Injection	webapps	php	AutoRUN & dR.sqL
2011-08-02	MyBB MyTabs Plugin – SQL Injection	webapps	php	AutoRUN & dR.sqL
2011-08-02	Open Handset Alliance Android 2.3.4/3.1 – Browser Sandbox Security Bypass	remote	multiple	Roee Hay
2011-08-02	MyBB MyTabs Plugin – ‘tab’ SQL Injection	webapps	php	AutoRUN & dR.sqL
2011-08-01	CA Arcserve D2D GWT RPC – Credential Information Disclosure (Metasploit)	webapps	jsp	Metasploit
2011-08-01	ZoneMinder 1.24.3 – Remote File Inclusion	webapps	php	iye
2011-08-01	CMSPro! 2.08 – Cross-Site Request Forgery	webapps	php	Xadpritox
2011-08-01	Skype 5.3 – ‘Mobile Phone’ HTML Injection	remote	multiple	noptrix
2011-08-01	Curverider Elgg 1.7.9 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Aung Khant