Exploits

日期	标题	类型	平台	作者
2011-07-20	Cyberoam UTM – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Patrick Webster
2011-07-20	Oracle Sun GlassFish Enterprise Server – Persistent Cross-Site Scripting	webapps	jsp	Sense of Security
2011-07-20	Tiki Wiki CMS Groupware 7.2 – ‘snarf_ajax.php’ Cross-Site Scripting	webapps	php	High-Tech Bridge SA
2011-07-20	Joomla! < 1.6.5 - Multiple Cross-Site Scripting Vulnerabilities	webapps	php	YGN Ethical Hacker Group
2011-07-19	Freefloat FTP Server 1.0 – ‘ACCL’ Remote Buffer Overflow	remote	windows	mortis
2011-07-19	Lotus Domino SMTP Router & Email Server and Client – Denial of Service	dos	multiple	anonymous
2011-07-19	Freefloat FTP Server – ‘REST’ Remote Buffer Overflow (Metasploit)	remote	windows	KaHPeSeSe
2011-07-18	Freefloat FTP Server 1.0 – ‘REST’ / ‘PASV’ Remote Buffer Overflow	remote	windows	C4SS!0 G0M3S
2011-07-18	Iskratel SI2000 Callisto 821+ – Cross-Site Request Forgery / HTML Injection	remote	hardware	MustLive
2011-07-18	GDI+ – ‘gdiplus.dll’ CreateDashedPath Integer Overflow	dos	windows	Abysssec
2011-07-18	BlueSoft (Multiple Products) – Multiple SQL Injections	webapps	php	Lazmania61
2011-07-18	Freefloat FTP Server – ‘MKD’ Remote Buffer Overflow (Metasploit)	remote	windows	James Fitts
2011-07-17	BlueSoft Social Networking CMS – SQL Injection	webapps	php	Lazmania61
2011-07-17	Iconics GENESIS32 9.21.201.01 – Integer Overflow (Metasploit)	remote	windows	Metasploit
2011-07-17	Freefloat FTP Server 1.0 – ‘MKD’ Remote Buffer Overflow	remote	windows	C4SS!0 G0M3S
2011-07-16	HP OpenView Network Node Manager (OV NNM) – ‘Toolbar.exe’ CGI Cookie Handling Buffer Overflow (Metasploit)	remote	windows	Metasploit
2011-07-15	Joomla! Component Controller – ‘Itemid’ SQL Injection	webapps	php	SOLVER
2011-07-15	Joomla! Component com_hospital – SQL Injection	webapps	php	SOLVER
2011-07-15	Joomla! Component Juicy Gallery – ‘picId’ SQL Injection	webapps	php	SOLVER
2011-07-15	Joomla! Component Foto – ‘id_categoria’ SQL Injection	webapps	php	SOLVER
2011-07-15	Easy Estate Rental – ‘s_location’ SQL Injection	webapps	php	Lazmania61
2011-07-15	Auto Web Toolbox – ‘id’ SQL Injection	webapps	php	Lazmania61
2011-07-15	AJ Classifieds – ‘listingid’ SQL Injection	webapps	php	Lazmania61
2011-07-15	Joomla! Component com_newssearch – SQL Injection	webapps	php	Robert Cooper
2011-07-15	Java RMI – Server Insecure Default Configuration Java Code Execution (Metasploit)	remote	multiple	Metasploit
2011-07-14	Inscribe Webmedia – SQL Injection	webapps	php	Netrondoank
2011-07-14	PG eLms Pro vDEC_2007_01 – Multiple Blind SQL Injections	webapps	php	LiquidWorm
2011-07-14	PG eLms Pro vDEC_2007_01 – ‘contact_us.php’ Multiple POST Cross-Site Scripting Vulnerabilities	webapps	php	LiquidWorm
2011-07-14	Joomla! Component com_sobi2 2.9.3.2 – Blind SQL Injections	webapps	php	jdc
2011-07-13	Chyrp 2.x – ‘/includes/JavaScript.php?action’ Cross-Site Scripting	webapps	php	Wireghoul
2011-07-13	Chyrp 2.x – ‘/admin/help.php’ Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Wireghoul
2011-07-13	TCExam 11.2.x – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Gjoko Krstic
2011-07-13	TCExam 11.2.011 – Multiple SQL Injections	webapps	php	LiquidWorm
2011-07-13	LiteRadius 3.2 – Multiple Blind SQL Injections	webapps	php	Robert Cooper
2011-07-12	Flowplayer 3.2.7 – ‘linkUrl’ Cross-Site Scripting	webapps	multiple	Szymon Gruszecki
2011-07-12	Sphider 1.3.x – Admin Panel Multiple SQL Injections	webapps	php	Karthik R
2011-07-12	Alice Modem 1111 – ‘rulename’ Cross-Site Scripting / Denial of Service	dos	hardware	Moritz Naumann
2011-07-12	Solar FTP Server 2.1.1 – PASV Buffer Overflow	remote	windows	Craig Freyman
2011-07-12	Joomla! Component com_xmap 1.2.11 – Blind SQL Injection	webapps	php	jdc
2011-07-12	Pandora Fms 3.2.1 – Cross-Site Request Forgery	webapps	php	mehdi boukazoula
2011-07-12	Tradingeye E-Commerce Shopping Cart – Multiple Vulnerabilities	webapps	php	$#4d0\/\/[r007k17]
2011-07-12	Fire Soft Board 2.0.1 – Persistent Cross-Site Scripting (Admin Panel)	webapps	php	_jill for A-S
2011-07-11	Gilnet News – ‘read_more.php’ SQL Injection	webapps	php	Err0R
2011-07-11	WordPress Plugin bSuite 4.0.7 – Multiple HTML Injection Vulnerabilities	webapps	php	IHTeam
2011-07-11	ICMusic 1.2 – ‘music_id’ SQL Injection	webapps	php	kaMtiEz
2011-07-11	Prontus CMS – ‘page’ Cross-Site Scripting	webapps	php	Zerial
2011-07-10	Mozilla Firefox – ‘nsTreeRange’ Dangling Pointer (Metasploit) (1)	remote	windows	Metasploit
2011-07-10	Freefloat FTP Server – ‘LIST’ Remote Buffer Overflow	remote	windows	Zer0 Thunder
2011-07-10	Tugux CMS 1.2 – ‘pid’ Arbitrary File Deletion	webapps	php	LiquidWorm
2011-07-09	phpMyAdmin 3.x – Swekey Remote Code Injection	webapps	php	Mango