Exploits

日期	标题	类型	平台	作者
2011-06-02	MODACOM URoad-5000 1450 – Remote Command Execution / Backdoor Access	remote	hardware	Alex Stanev
2011-06-02	Golden FTP Server 4.70 – PASS Stack Buffer Overflow (Metasploit)	remote	windows	Metasploit
2011-06-01	EasyFTP Server 1.7.0.2 – (Authenticated) Buffer Overflow (2)	remote	windows	b33f
2011-06-01	TEDE Simplificado 1.01/S2.04 – Multiple SQL Injections	webapps	php	KnocKout
2011-06-01	Nagios 3.2.3 – ‘expand’ Cross-Site Scripting	remote	multiple	Stefan Schurtz
2011-06-01	Netgear WNDAP350 Wireless Access Point – Multiple Information Disclosure Vulnerabilities	remote	hardware	Juerd Waalboer
2011-06-01	ARSC Really Simple Chat 3.3-rc2 – Cross-Site Scripting / Multiple SQL Injections	webapps	php	High-Tech Bridge SA
2011-06-01	PikaCMS – Multiple Local File Disclosure Vulnerabilities	webapps	php	KnocKout
2011-05-31	Brother HL-5370DW – series Authentication Bypass printer flooder	dos	hardware	chrisB
2011-05-31	iPhone4 FTP Server 1.0 – Empty CWD-RETR Remote Crash	dos	hardware	offsetIntruder
2011-05-31	libxmlInvalid 2.7.x – XPath Multiple Memory Corruption Vulnerabilities	remote	linux	Chris Evans
2011-05-31	Microsoft Windows Live Messenger 14 – ‘dwmapi.dll’ DLL Loading Arbitrary Code Execution	remote	windows	Kalashinkov3
2011-05-31	S9Y Serendipity Freetag-plugin 3.21 – ‘index.php’ Cross-Site Scripting	webapps	php	Stefan Schurtz
2011-05-31	Kentico CMS 5.5R2.23 – ‘userContextMenu_Parameter’ Cross-Site Scripting	webapps	asp	LiquidWorm
2011-05-30	7-Technologies IGSS 9 – Data Server/Collector Packet Handling (Metasploit)	remote	windows	Metasploit
2011-05-30	Guru JustAnswer Professional 1.25 – Multiple SQL Injections	webapps	php	v3n0m
2011-05-30	Belkin F5D7234-4 v5 G Wireless Router – Remote Hash Exposed	webapps	hardware	Aodrulez
2011-05-30	Easy Media Script – SQL Injection	webapps	php	Lagripe-Dz
2011-05-30	w-Agora Forum 4.2.1 – Arbitrary File Upload	webapps	php	Treasure Priyamal
2011-05-30	Cotonti 0.9.2 – Multiple SQL Injections	webapps	php	KedAns-Dz
2011-05-29	HP Data Protector Client 6.11 – ‘EXEC_SETUP’ Remote Code Execution	remote	windows	fdiskyou
2011-05-29	Invisionix Roaming System Remote metasys 0.2 – Local File Inclusion	webapps	php	Treasure Priyamal
2011-05-29	Puzzle Apps CMS 3.2 – Local File Inclusion	webapps	php	Treasure Priyamal
2011-05-29	Joomla! Component com_joomnik – SQL Injection	webapps	php	SOLVER
2011-05-28	Gadu-Gadu 10.5 – Remote Code Execution	remote	multiple	Kacper Szczesniak
2011-05-28	NetVault: SmartDisk 1.2 – ‘libnvbasics.dll’ Remote Denial of Service	dos	windows	Luigi Auriemma
2011-05-28	HP Data Protector Client 6.11 – ‘EXEC_CMD’ Remote Code Execution	remote	windows	fdiskyou
2011-05-28	Joomla! Component com_jmsfileseller – Local File Inclusion	webapps	php	Valentin
2011-05-28	Guru Penny Auction Pro 3.0 – Blind SQL Injection	webapps	php	v3n0m
2011-05-28	Duhok Forum 1.1 – SQL Injection	webapps	php	M.Jock3R
2011-05-27	cPanel < 11.25 - Cross-Site Request Forgery (Add User PHP Script)	webapps	php	ninjashell
2011-05-27	Magix Musik Maker 16 – ‘.mmm’ Local Stack Buffer Overflow (Without EggHunter) (Metasploit)	local	windows	Alexey Sintsov
2011-05-27	Magneto ICMP ActiveX 4.0.0.20 – ICMPSendEchoRequest Remote Code Execute	remote	windows	boahat
2011-05-27	HB eCommerce – SQL Injection	webapps	php	takeshix
2011-05-27	Poison Ivy 2.3.2 – Remote Buffer Overflow	remote	windows	Kevin R.V
2011-05-26	Clipbucket 2.4 RC2 645 – SQL Injection	webapps	php	AutoSec Tools
2011-05-26	Asterisk 1.8.4.1 – SIP ‘REGISTER’ Request User Enumeration	remote	linux	Francesco Tornieri
2011-05-25	Kryn.cms 0.9 – ‘_kurl’ Cross-Site Scripting	webapps	php	AutoSec Tools
2011-05-25	Joomla! Component com_shop – SQL Injection	webapps	php	ThunDEr HeaD
2011-05-25	MidiCMS Website Builder – Local File Inclusion / Arbitrary File Upload	webapps	php	KedAns-Dz
2011-05-25	AWStats Totals 1.14 multisort – Remote Command Execution (Metasploit)	webapps	php	Metasploit
2011-05-25	eGroupWare 1.8.001.20110421 – Multiple Vulnerabilities	webapps	php	AutoSec Tools
2011-05-25	Extcalendar 2.0b2 – ‘cal_search.php’ SQL Injection	webapps	php	High-Tech Bridge SA
2011-05-25	i-doIT 0.9.9-4 – Local File Inclusion	webapps	php	AutoSec Tools
2011-05-25	Tickets 2.13 – SQL Injection	webapps	php	AutoSec Tools
2011-05-25	PHP 5.3.5 – ‘socket_connect()’ Local Buffer Overflow	local	multiple	Marek Kroemeke
2011-05-25	BlackBoard Learn 8.0 – ‘keywordraw’ Cross-Site Scripting	webapps	cgi	Matt Jezorek
2011-05-25	RXS-3211 IP Camera – UDP Packet Password Information Disclosure	remote	hardware	Spare Clock Cycles
2011-05-25	Vordel Gateway 6.0.3 – Directory Traversal	remote	linux	Brian W. Gary
2011-05-24	Gadu-Gadu Instant Messenger 6.0 – File Transfer Cross-Site Scripting	remote	multiple	Kacper Szczesniak