Exploits

日期	标题	类型	平台	作者
2011-07-31	Joomla! Component obSuggest – Local File Inclusion	webapps	php	v3n0m
2011-07-31	Digital Scribe 1.5 – register_form()’ Multiple POST Cross-Site Scripting Vulnerabilities	webapps	php	LiquidWorm
2011-07-31	Actfax FTP Server 4.27 – ‘USER’ Stack Buffer Overflow (Metasploit)	remote	windows	mr_me
2011-07-30	Link Station Pro – Multiple Vulnerabilities	webapps	php	$#4d0\/\/[r007k17]
2011-07-29	ManageEngine ServiceDesk Plus 8.0 Build 8013 – Multiple Cross-Site Scripting Vulnerabilities	webapps	jsp	Narendra Shinde
2011-07-29	Chyrp 2.x swfupload Extension – ‘upload_handler.php’ Arbitrary File Upload / Arbitrary PHP Code Execution	webapps	php	Wireghoul
2011-07-29	cFTP 0.1 – ‘r80’ Arbitrary File Upload	webapps	php	leviathan
2011-07-29	Chyrp 2.x – ‘/includes/lib/gz.php?File’ Traversal Arbitrary File Access	webapps	php	Wireghoul
2011-07-29	Chyrp 2.x – ‘action’ Traversal Local File Inclusion	webapps	php	Wireghoul
2011-07-28	Sitecore CMS 6.4.1 – ‘url’ Open Redirection	webapps	asp	Tom Neaves
2011-07-28	HP Network Automation 9.10 – SQL Injection	webapps	php	anonymous
2011-07-28	Citrix XenApp / XenDesktop XML Service – Heap Corruption	dos	windows	n.runs AG
2011-07-28	Citrix XenApp / XenDesktop – Stack Buffer Overflow	dos	windows	n.runs AG
2011-07-28	MyWebServer 1.0.3 – Arbitrary File Download	remote	windows	X-h4ck
2011-07-28	MyWebServer 1.0.3 – Denial of Service	dos	windows	X-h4ck
2011-07-28	Joomla! Component com_virtuemart 1.1.7/1.5 – Blind SQL Injection (Metasploit)	webapps	php	TecR0c
2011-07-27	Sagem F@st 3304 Routers – PPPoE Credentials Information Disclosure	remote	hardware	securititracker
2011-07-27	MinaliC WebServer 2.0 – Remote Source Disclosure	remote	windows	X-h4ck
2011-07-27	SWAT Samba Web Administration Tool – Cross-Site Request Forgery	webapps	cgi	Narendra Shinde
2011-07-27	PHPJunkYard GBook 1.6/1.7 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	High-Tech Bridge SA
2011-07-27	MBoard 1.3 – ‘url’ Open Redirection	webapps	php	High-Tech Bridge SA
2011-07-26	Support Incident Tracker (SiT!) 3.63 p1 – ‘billable_incidents.php?sites[]’ SQL Injection	webapps	php	Yuri Goltsev
2011-07-26	Support Incident Tracker (SiT!) 3.63 p1 – ‘report_marketing.php?exc[]’ SQL Injection	webapps	php	Yuri Goltsev
2011-07-26	Apple Safari 5.0.5 – SVG Remote Code Execution (DEP Bypass)	remote	windows	Abysssec
2011-07-26	CA ARCserve D2D r15 GWT RPC – Multiple Vulnerabilities	webapps	jsp	rgod
2011-07-26	PHP-Barcode 0.3pl1 – Remote Code Execution	webapps	php	beford
2011-07-26	ManageEngine ServiceDesk Plus 8.0.0 Build 8013 – Improper User Privileges	webapps	multiple	Narendra Shinde
2011-07-26	Support Incident Tracker (SiT!) 3.63 p1 – ‘tasks.php?selected[]’ SQL Injection	webapps	php	Yuri Goltsev
2011-07-26	OpenX Ad Server 2.8.7 – Cross-Site Request Forgery	webapps	php	Narendra Shinde
2011-07-26	Support Incident Tracker (SiT!) 3.63 p1 – ‘search.php?search_string’ SQL Injection	webapps	php	Yuri Goltsev
2011-07-25	Apple Safari 5.0.6/5.1 – SVG DOM Processing (PoC)	dos	osx	Nikita Tarakanov
2011-07-25	Joomla! Component com_virtualmoney 1.5 – SQL Injection	webapps	php	FL0RiX
2011-07-25	CobraScripts Trading Marketplace Script – ‘cid’ SQL Injection	webapps	php	Ehsan_Hp200
2011-07-25	Willscript Recipes Website Script Silver Edition – ‘viewRecipe.php’ SQL Injection	webapps	php	Lazmania61
2011-07-25	Online Grades 3.2.5 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Gjoko Krstic
2011-07-25	Godly Forums – ‘id’ SQL Injection	webapps	php	3spi0n
2011-07-25	Ciscokits 1.0 – TFTP Server File Name Denial of Service	dos	windows	Craig Freyman
2011-07-25	CA Arcserve D2D – GWT RPC Credential Information Disclosure (Metasploit)	local	windows	Metasploit
2011-07-25	MusicBox 3.7 – Multiple Vulnerabilities	webapps	php	R@1D3N
2011-07-24	MPlayer Lite r33064 – ‘.m3u’ Local Buffer Overflow (DEP Bypass)	local	windows	C4SS!0 & h1ch4m
2011-07-23	Download Accelerator Plus (DAP) 9.7 – ‘.M3U’ File Buffer Overflow (SEH Unicode)	local	windows	C4SS!0 G0M3S
2011-07-23	ExtCalendar2 – Cookie Authentication Bypass / Backdoor Upload	webapps	php	Lagripe-Dz
2011-07-22	Kingsoft AntiVirus 2012 ‘KisKrnl.sys’ 2011.7.8.913 – Kernel Mode Privilege Escalation	local	windows	MJ0011
2011-07-21	Joomla! Component mod_spo – SQL Injection	webapps	php	SeguridadBlanca
2011-07-21	Joomla! Component JE Story Submit – Local File Inclusion	webapps	php	v3n0m
2011-07-21	vBulletin 4.0.x 4.1.3 – ‘messagegroupid’ SQL Injection	webapps	php	fb1h2s
2011-07-21	Mevin Basic PHP Events Lister 2.03 – Cross-Site Request Forgery	webapps	php	Crazy_Hacker
2011-07-21	Synergy Software – ‘id’ SQL Injection	webapps	php	Ehsan_Hp200
2011-07-21	Dell IT Assistant – detectIESettingsForITA.ocx ActiveX Control	remote	windows	rgod
2011-07-20	Joomla! Component com_rsappt_pro2 – Local File Inclusion	webapps	php	Don Tukulesto