Exploits

日期	标题	类型	平台	作者
2011-06-14	cubecart 2.0.7 – Multiple Vulnerabilities	webapps	php	Shamus
2011-06-13	Joomla! Component Minitek FAQ Book 1.3 – ‘id’ SQL Injection	webapps	php	kaMtiEz
2011-06-13	PHP-Nuke 8.3 – ‘upload.php’ Arbitrary File Upload (2)	webapps	php	pentesters.ir
2011-06-13	PHP-Nuke 8.3 – ‘upload.php’ Arbitrary File Upload (1)	webapps	php	pentesters.ir
2011-06-13	Microsoft Lync Server 2010 – ‘ReachJoin.aspx’ Remote Command Injection	webapps	asp	Mark Lachniet
2011-06-13	WebFileExplorer 3.6 – ‘user’ / ‘pass’ SQL Injection	webapps	php	pentesters.ir
2011-06-13	Microsoft Windows XP – ‘tskill’ Local Privilege Escalation	local	windows	Todor Donev
2011-06-13	Joomla! Component Scriptegrator 1.5 – Local File Inclusion	webapps	php	jdc
2011-06-13	Oracle HTTP Server – Cross-Site Scripting Header Injection	webapps	multiple	Yasser ABOUKIR
2011-06-12	IBM Tivoli Endpoint Manager – POST Query Buffer Overflow (Metasploit)	remote	windows	Metasploit
2011-06-11	Linux Kernel 2.6.28/3.0 (DEC Alpha Linux) – Local Privilege Escalation	local	linux	Dan Rosenberg
2011-06-11	SUBRION CMS – Multiple Vulnerabilities	webapps	php	Karthik R
2011-06-11	Technote 7.2 – Blind SQL Injection	webapps	php	BlueH4G
2011-06-11	Trend Micro Data Loss Prevention Virtual Appliance 5.5 – Directory Traversal	webapps	windows	White Hat Consultores
2011-06-11	UUSEE ActiveX < 6.11.0412.1 - Buffer Overflow	dos	windows	huimaozi
2011-06-11	The KMPlayer 3.0.0.1440 (Windows 7) – ‘.mp3’ Local Buffer Overflow (ASLR Bypass)	local	windows	xsploitedsec
2011-06-10	Tolinet Agencia – ‘id’ SQL Injection	webapps	php	Andrea Bocchetti
2011-06-10	Tele Data Contact Management Server – Directory Traversal	webapps	windows	AutoSec Tools
2011-06-10	Simple Web Server 1.2 – Directory Traversal	remote	windows	AutoSec Tools
2011-06-10	Angora Guestbook 1.5 – Local File Inclusion	webapps	php	AutoSec Tools
2011-06-10	Pacer Edition CMS 2.1 – ‘l’ Local File Inclusion	webapps	php	LiquidWorm
2011-06-10	Pacer Edition CMS 2.1 – ‘rm’ Arbitrary File Deletion	webapps	php	LiquidWorm
2011-06-09	Polycom IP Phone – Web Interface Data Disclosure	webapps	hardware	Yakir Wizman
2011-06-09	Aastra IP Phone 9480i – Web Interface Data Disclosure	webapps	hardware	Yakir Wizman
2011-06-09	EquiPCS – SQL Injection	webapps	asp	Sideswipe
2011-06-09	7-Technologies IGSS 9 – IGSSdataServer .Rms Rename Buffer Overflow (Metasploit)	remote	windows	Metasploit
2011-06-08	VideoLAN VLC Media Player 1.1.9 – XSPF Playlist Local File Integer Overflow	dos	windows	TecR0c
2011-06-08	Perl Data::FormValidator 4.66 Module – ‘results()’ Security Bypass	remote	linux	dst
2011-06-08	WordPress Plugin GD Star Rating – ‘votes’ SQL Injection	webapps	php	anonymous
2011-06-08	ActFax Server FTP – (Authenticated) Remote Buffer Overflow	remote	windows	b33f
2011-06-07	Dataface – Local File Inclusion	webapps	php	ITSecTeam
2011-06-07	IBM Tivoli Endpoint 4.1.1 – Remote SYSTEM	remote	windows	Jeremy Brown
2011-06-07	The Pacer Edition CMS 2.1 – ’email’ Cross-Site Scripting	webapps	php	LiquidWorm
2011-06-07	Blog:CMS 4.2 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Stefan Schurtz
2011-06-07	Xataface 1.x – ‘action’ Local File Inclusion	webapps	php	ITSecTeam
2011-06-06	Joomla! Component CCBoard – SQL Injection / Arbitrary File Upload	webapps	php	KedAns-Dz
2011-06-06	vBulletin vBExperience 3 – ‘sortorder’ Cross-Site Scripting	webapps	php	Mr.ThieF
2011-06-06	Cisco AnyConnect VPN Client – ActiveX URL Property Download and Execute (Metasploit)	remote	windows	Metasploit
2011-06-06	The KMPlayer 3.0.0.1440 (Windows XP SP3) – ‘.mp3’ File Buffer Overflow (DEP Bypass)	local	windows	dookie & ronin
2011-06-06	1ClickUnzip 3.00 – ‘.zip’ Heap Overflow	dos	windows	C4SS!0 G0M3S
2011-06-06	Squiz Matrix 4 – ‘colour_picker.php’ Cross-Site Scripting	webapps	php	Patrick Webster
2011-06-06	PopScript – ‘index.php’ Multiple Input Validation Vulnerabilities	webapps	php	NassRawI
2011-06-06	Multiple WordPress WooThemes Themes – ‘test.php’ Cross-Site Scripting	webapps	php	MustLive
2011-06-06	Nakid CMS 1.0.2 – ‘CKEditorFuncNum’ Cross-Site Scripting	webapps	php	AutoSec Tools
2011-06-04	OpenDrive 1.3.141 – Local Password Disclosure	local	windows	Glafkos Charalambous
2011-06-04	Xitami Web Server 2.5b4 – Remote Buffer Overflow (Egghunter)	remote	windows	Glafkos Charalambous
2011-06-04	WebSVN 2.3.2 – Unproper Metacharacters Escaping ‘exec()’ Remote Command Injection	webapps	windows	rgod
2011-06-03	Xitami Web Server 2.5b4 – Remote Buffer Overflow	remote	windows	mr.pr0n
2011-06-02	Linux Kernel 2.6.x – KSM Local Denial of Service	dos	linux	Andrea Righi
2011-06-02	Ushahidi 2.0.1 – ‘range’ SQL Injection	webapps	php	Gjoko Krstic