Exploits

日期	标题	类型	平台	作者
2011-07-01	NetBSD 5.1 – ‘libc/net’ Multiple Stack Buffer Overflows	remote	bsd	Maksymilian Arciemowicz
2011-07-01	HP – ‘OmniInet.exe’ Opcode 27 Buffer Overflow (Metasploit)	remote	windows	Metasploit
2011-07-01	Ollance Member Login Script – Multiple Vulnerabilities	webapps	php	$#4d0\/\/[r007k17]
2011-07-01	WordPress Core 3.1.3 – SQL Injection	webapps	php	SEC Consult
2011-07-01	Joomla! Component mDigg 2.2.8 – SQL Injection	webapps	php	Caddy Dz
2011-06-30	IBM DB2 – ‘DT_RPATH’ Insecure Library Loading Arbitrary Code Execution	remote	multiple	Tim Brown
2011-06-30	Rhythmbox – ‘.m3u’ Local Crash (PoC)	dos	linux	Caddy-Dz
2011-06-30	FreeBSD OpenSSH 3.5p1 – Remote Command Execution	remote	freebsd	kingcope
2011-06-30	HP Data Protector 6.20 – EXEC_CMD Buffer Overflow	dos	windows	Core Security
2011-06-30	Kaillera – Multiple Clients Buffer Overflow Vulnerabilities	remote	windows	Sil3nt_Dre4m
2011-06-29	HP Data Protector 6.20 – Multiple Vulnerabilities	dos	windows	Core Security
2011-06-29	Valve Steam Client Application 1559/1559 – Local Privilege Escalation	local	windows	LiquidWorm
2011-06-28	rgboard 4.2.1 – SQL Injection	webapps	php	hamt0ry
2011-06-28	Atlassian JIRA 3.13.5 – File Download Security Bypass	remote	multiple	Ignacio Garrido
2011-06-28	CygniCon CyViewer – ActiveX Control ‘SaveData()’ Insecure Method	remote	windows	High-Tech Bridge SA
2011-06-28	Flatpress 0.1010.1 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	High-Tech Bridge SA
2011-06-28	RealityServer Web Services RTMP Server 3.1.1 build 144525.5 – Null Pointer Dereference Denial of Service	dos	windows	Luigi Auriemma
2011-06-28	Joomla! 1.6.3 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Aung Khant
2011-06-27	Sybase Advantage Server 10.0.0.3 – ‘ADS’ Process Off-by-One Buffer Overflow	remote	windows	Luigi Auriemma
2011-06-27	Ubisoft CoGSManager ActiveX Control 1.0.0.23 – ‘Initialize()’ Method Stack Buffer Overflow	remote	windows	Luigi Auriemma
2011-06-27	Mambo 4.6.x – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Aung Khant
2011-06-27	Citrix Provisioning Services 5.6 – ‘streamprocess.exe’ Remote Buffer Overflow (Metasploit)	remote	windows	Metasploit
2011-06-27	Joomla! Component com_morfeoshow – ‘idm’ SQL Injection	webapps	php	Th3.xin0x
2011-06-27	SmallFTPd 1.0.3 – Denial of Service	dos	windows	Myo Soe
2011-06-27	WordPress Plugin Pretty Link Lite 1.4.56 – Multiple SQL Injections	webapps	php	MaKyOtOx
2011-06-27	MySQLDriverCS 4.0.1 – SQL Injection	remote	multiple	Qihan Luo
2011-06-26	WordPress Plugin Beer Recipes 1.0 – Cross-Site Scripting	webapps	php	TheUzuki.'
2011-06-26	Joomla! Component JoomlaXi – Persistent Cross-Site Scripting	webapps	php	Karthik R
2011-06-26	Microsoft Visio – ‘VISIODWG.dll .DXF’ File Handling (MS10-028) (Metasploit)	local	windows	Metasploit
2011-06-25	Siemens FactoryLink 8 – CSService Logging Path Parameter Buffer Overflow (Metasploit)	remote	windows	Metasploit
2011-06-24	FreeAmp 2.0.7 – ‘.pls’ Local Buffer Overflow	local	windows	C4SS!0 G0M3S
2011-06-24	AzeoTech DaqFactory – Denial of Service	dos	multiple	Knud Erik Hojgaard
2011-06-24	xAurora 10.00 – ‘RSRC32.dll’ DLL Loading Arbitrary Code Execution	remote	windows	Zer0 Thunder
2011-06-23	ManageEngine ServiceDesk Plus 8.0 – Directory Traversal	webapps	jsp	Keith Lee
2011-06-23	iSupport 1.8 – SQL Injection	webapps	php	Brendan Coles
2011-06-23	BrewBlogger 2.3.2 – Multiple Vulnerabilities	webapps	php	Brendan Coles
2011-06-23	Nodesforum – ‘_nodesforum_node’ SQL Injection	webapps	php	Andrea Bocchetti
2011-06-23	LeadTools Imaging LEADSmtp – ActiveX Control ‘SaveMessage()’ Insecure Method	remote	windows	High-Tech Bridge SA
2011-06-23	Lotus Notes 8.0.x < 8.5.2 FP2 - Autonomy Keyview ('.lzh' Attachment) (Metasploit)	remote	windows	Metasploit
2011-06-23	Sitemagic CMS – ‘SMTpl’ Directory Traversal	webapps	php	Andrea Bocchetti
2011-06-23	nodesforum 1.059 – Remote File Inclusion	webapps	php	bd0rk
2011-06-23	2Point Solutions – ‘cmspages.php’ SQL Injection	webapps	php	Newbie Campuz
2011-06-23	Webcat – Multiple Blind SQL Injections	webapps	php	w0rd
2011-06-23	ActivDesk 3.0 – Multiple Vulnerabilities	webapps	cgi	Brendan Coles
2011-06-23	ManageEngine Support Center Plus 7.8 Build 7801 – Directory Traversal	webapps	jsp	xistence
2011-06-23	FreeAmp 2.0.7 – ‘.fat’ Local Buffer Overflow	local	windows	Iván García Ferreira
2011-06-23	IBM Web Application Firewall – Bypass	remote	windows	Trustwave's SpiderLabs
2011-06-22	RealWin SCADA Server – DATAC Login Buffer Overflow (Metasploit)	remote	windows	Metasploit
2011-06-22	Same Team E-shop manager – SQL Injection	webapps	php	Number 7
2011-06-22	Cachelogic Expired Domains Script 1.0 – Multiple Vulnerabilities	webapps	php	Brendan Coles