Exploits

日期	标题	类型	平台	作者
2011-06-22	Easewe FTP OCX ActiveX Control 4.5.0.9 – ‘EaseWeFtp.ocx’ Multiple Insecure Method Vulnerabilities	dos	windows	High-Tech Bridge SA
2011-06-22	FanUpdate 3.0 – ‘pageTitle’ Cross-Site Scripting	webapps	php	High-Tech Bridge SA
2011-06-22	Eshop Manager – Multiple SQL Injections	webapps	php	Number 7
2011-06-22	H3C ER5100 – Authentication Bypass	webapps	asp	128bit
2011-06-21	Sielco Sistemi Winlog – Remote Buffer Overflow (Metasploit)	remote	windows	Metasploit
2011-06-21	FactoryLink – ‘vrn.exe’ Opcode 9 Buffer Overflow (Metasploit)	remote	windows	Metasploit
2011-06-21	iGiveTest 2.1.0 – SQL Injection	webapps	php	Brendan Coles
2011-06-21	Black Ice Cover Page – ActiveX Control Arbitrary File Download (Metasploit)	remote	windows	Metasploit
2011-06-21	WordPress Plugin WPtouch 1.9.27 – URL redirection	webapps	php	MaKyOtOx
2011-06-21	DreamBox DM800 – Arbitrary File Download	remote	hardware	ShellVision
2011-06-21	Sitemagic CMS 2010.04.17 – ‘SMExt’ Cross-Site Scripting	webapps	php	Gjoko Krstic
2011-06-20	Black Ice Fax Voice SDK 12.6 – Remote Code Execution	remote	windows	mr_me
2011-06-20	Black Ice Cover Page SDK – Insecure Method ‘DownloadImageFileURL()’ (Metasploit)	remote	windows	mr_me
2011-06-20	XnView 1.98 – Denial of Service (PoC)	dos	windows	BraniX
2011-06-20	Mozilla Firefox – ‘nsTreeRange’ Dangling Pointer (2)	remote	windows	Abysssec
2011-06-20	IF-CMS 2.07 – Local File Inclusion (Metasploit) (2)	webapps	php	TecR0c
2011-06-20	DATAC RealWin SCADA Server 2 – On_FC_CONNECT_FCS_a_FILE Buffer Overflow (Metasploit)	remote	windows	Metasploit
2011-06-19	Joomla! Component com_calcbuilder – ‘id’ Blind SQL Injection	webapps	php	Chip d3 bi0s
2011-06-19	Burning Board 3.1.5 – Full Path Disclosure	webapps	php	linc0ln.dll
2011-06-19	Nibbleblog 3 – Multiple SQL Injections	webapps	php	KedAns-Dz
2011-06-19	Joomla! Component com_team – SQL Injection	webapps	php	CoBRa_21
2011-06-18	Cisco Unified Operations Manager 8.5 – iptm/eventmon Multiple Cross-Site Scripting Vulnerabilities	remote	hardware	Sense of Security
2011-06-18	Cisco Unified Operations Manager 8.5 – ‘iptm/ddv.do?deviceInstanceName’ Cross-Site Scripting	remote	hardware	Sense of Security
2011-06-18	Taha Portal 3.2 – ‘sitemap.php’ Cross-Site Scripting	webapps	php	Bl4ck.Viper
2011-06-18	Cisco Unified Operations Manager 8.5 – ‘iptm/advancedfind.do?extn’ Cross-Site Scripting	remote	hardware	Sense of Security
2011-06-18	Immophp 1.1.1 – Cross-Site Scripting / SQL Injection	webapps	php	KedAns-Dz
2011-06-18	Joomla! Component A Cool Debate 1.0.3 – Local File Inclusion	webapps	php	Chip d3 bi0s
2011-06-18	AiCart 2.0 – Multiple Vulnerabilities	webapps	php	takeshix
2011-06-18	Cisco Unified Operations Manager 8.5 – ‘/iptm/logicalTopo.do’ Multiple Cross-Site Scripting Vulnerabilities	remote	hardware	Sense of Security
2011-06-18	Cisco Unified Operations Manager 8.5 – ‘/iptm/faultmon/ui/dojo/Main/eventmon_wrapper.jsp’ Multiple Cross-Site Scripting Vulnerabilities	remote	hardware	Sense of Security
2011-06-17	Sunway ForceControl 6.1 – Multiple Heap Buffer Overflow Vulnerabilities	remote	windows	Dillon Beresford
2011-06-17	Microsoft Internet Explorer – MSHTML!CObjectElement Use-After-Free (MS11-050) (Metasploit)	remote	windows	Metasploit
2011-06-17	WeBid 1.0.2 – Persistent Cross-Site Scripting (via SQL Injection)	webapps	php	Saif
2011-06-17	Wireshark 1.4.5 – ‘bytes_repr_len()’ Null Pointer Dereference Denial of Service	dos	windows	rouli
2011-06-16	Catalog Builder eCommerce Software – Blind SQL Injection	webapps	php	takeshix
2011-06-16	Adobe Reader/Acrobat 10.0.1 – Denial of Service	dos	windows	Soroush Dalili
2011-06-15	MyBloggie 2.1.6 – HTML Injection / SQL Injection	webapps	php	Robin Verton
2011-06-15	miniblog 1.0 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	High-Tech Bridge SA
2011-06-15	IBM Websphere Application Server 7.0.0.13 – Cross-Site Request Forgery	webapps	multiple	Core Security
2011-06-15	Free Simple CMS 1.0 – Multiple Vulnerabilities	webapps	php	High-Tech Bridge SA
2011-06-15	AMHSHOP 3.7.0 – SQL Injection	webapps	php	Yassin Aboukir
2011-06-14	Microsoft Office XP – Remote code Execution	dos	windows	Francis Provencher
2011-06-14	Microsoft Windows Media Player with K-Lite Codec Pack – Denial of Service (PoC)	dos	windows	Nicolas Krassas
2011-06-14	Opera Web Browser 11.11 – Remote Crash	dos	windows	echo
2011-06-14	cubecart 2.0.7 – Multiple Vulnerabilities	webapps	php	Shamus
2011-06-14	vBTube 1.2.9 – ‘vBTube.php’ Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Mr.ThieF
2011-06-14	MPlayer – ‘.SAMI’ Subtitle File Buffer Overflow (DEP Bypass) (Metasploit)	local	windows	James Fitts
2011-06-14	Opera Web Browser 11.11 – Denial of Service	dos	multiple	echo
2011-06-14	PHP 5.3.6 – Security Bypass	remote	php	Krzysztof Kotowicz
2011-06-14	Microsoft HyperV – Persistent Denial of Service (MS11-047)	dos	windows	Core Security