Exploits

日期	标题	类型	平台	作者
2011-05-24	Ajax Chat 1.0 – ‘ajax-chat.php’ Cross-Site Scripting	webapps	php	High-Tech Bridge SA
2011-05-24	Lumension Security Lumension Device Control 4.x – Memory Corruption	remote	multiple	Andy Davis
2011-05-24	phpScheduleIt 1.2.12 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	High-Tech Bridge SA
2011-05-23	Joomla! Component Map Locator – ‘cid’ SQL Injection	webapps	php	FL0RiX
2011-05-23	VisiWave – ‘.VWR’ File Parsing Trusted Pointer (Metasploit)	local	windows	Metasploit
2011-05-23	PHPortfolio – SQL Injection	webapps	php	lionaneesh
2011-05-23	vBulletin 4.0.x 4.1.2 – ‘search.php’ SQL Injection	webapps	php	D4rkB1t
2011-05-22	Magix Musik Maker 16 – ‘.mmm’ Local Stack Buffer Overflow (Metasploit)	local	windows	Metasploit
2011-05-22	Tugux CMS 1.2 – Multiple Vulnerabilities	webapps	php	LiquidWorm
2011-05-21	E-Manage MySchool 7.02 – SQL Injection	webapps	php	az7rb
2011-05-20	Ultimate PHP Board 2.2.7 – Broken Authentication and Session Management	webapps	php	i2sec
2011-05-20	PHP Captcha / Securimage 2.0.2 – Authentication Bypass	webapps	php	Sense of Security
2011-05-20	Zen Cart 1.3.9h – Multiple Vulnerabilities	webapps	php	Dr. Alberto Fontanella
2011-05-19	LimeSurvey 1.85+ – ‘admin.php’ Cross-Site Scripting	webapps	php	Juan Manuel Garcia
2011-05-19	Zend Framework 1.11.4 – ‘PDO_MySql’ Security Bypass	remote	linux	Anthony Ferrara
2011-05-19	Andy’s PHP KnowledgeBase 0.95.4 – ‘step5.php’ PHP Remote Code Execution	webapps	php	AutoSec Tools
2011-05-19	Room Juice 0.3.3 – ‘display.php’ Cross-Site Scripting	webapps	php	AutoSec Tools
2011-05-18	SpongeBob SquarePants Typing – Local Buffer Overflow (SEH)	local	windows	Infant Overflow
2011-05-18	Microsoft Windows Vista/2008 – ‘nsiproxy.sys’ Local Kernel Denial of Service	dos	windows	Lufeng Li
2011-05-18	Cisco Unified Operations Manager – Multiple Vulnerabilities	remote	windows	Sense of Security
2011-05-18	Joomla! Component jDownloads 1.0 – Arbitrary File Upload	webapps	php	Al-Ghamdi
2011-05-18	klibc 1.5.2 – DHCP Options Processing Remote Shell Command Execution	remote	linux	maximilian attems
2011-05-18	CiscoWorks Common Services 3.1.1 – Auditing Directory Traversal	webapps	java	Sense of Security
2011-05-18	Cisco Unified Operations Manager 8.5 – Common Services Device Center Cross-Site Scripting	remote	hardware	Sense of Security
2011-05-18	CiscoWorks Common Services Framework 3.1.1 Help Servlet – Cross-Site Scripting	remote	hardware	Sense of Security
2011-05-18	TWiki 5.0.1 – ‘origurl’ Cross-Site Scripting	webapps	php	Mesut Timur
2011-05-17	Sonique 1.96 – ‘.m3u’ Local Buffer Overflow	local	windows	sinfulsecurity
2011-05-17	Pligg CMS 1.1.4 – SQL Injection	webapps	php	Null-0x00
2011-05-17	WordPress Plugin Is-human 1.4.2 – Remote Command Execution	webapps	php	neworder
2011-05-17	PHP Calendar Basic 2.3 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	High-Tech Bridge SA
2011-05-16	Steam Software – Denial of Service	dos	windows	david.r.klein
2011-05-16	Mitel Audio and Web Conferencing 4.4.3.0 – Multiple Cross-Site Scripting Vulnerabilities	webapps	asp	Richard Brain
2011-05-16	XtreamerPRO Media-player 2.6.0/2.7.0 – Multiple Vulnerabilities	remote	hardware	Itzik Chen
2011-05-16	eFront 3.6.9 – ‘scripts.php’ Local File Inclusion	webapps	php	AutoSec Tools
2011-05-16	openQRM 4.8 – ‘source_tab’ Cross-Site Scripting	webapps	php	AutoSec Tools
2011-05-16	allocPSA 1.7.4 – ‘/login/login.php’ Cross-Site Scripting	webapps	php	AutoSec Tools
2011-05-16	Novell eDirectory 8.8 and Netware LDAP-SSL Daemon – Denial of Service	dos	multiple	Knud
2011-05-16	Mambo Component Docman 1.3.0 – Multiple SQL Injections	webapps	php	KedAns-Dz
2011-05-16	7-Technologies IGSS 9.00.00 b11063 – ‘IGSSdataServer.exe’ Remote Stack Overflow (Metasploit)	remote	windows	Metasploit
2011-05-16	Novell Netware eDirectory – Denial of Service	dos	netware	nSense
2011-05-16	Jcow 4.2.1 – Local File Inclusion	webapps	php	AutoSec Tools
2011-05-16	NoticeBoardPro 1.0 – Multiple Vulnerabilities	webapps	php	AutoSec Tools
2011-05-16	Vanilla Forum 2.0.17.9 – Local File Inclusion	webapps	php	AutoSec Tools
2011-05-16	CoolPlayer Portable 2.19.2 – Local Buffer Overflow	local	windows	sinfulsecurity
2011-05-16	Joomla! Component com_cbcontact – ‘contact_id’ SQL Injection	webapps	php	KedAns-Dz
2011-05-16	MediaInSpot CMS – SQL Injection	webapps	php	Iolo Morganwg
2011-05-16	AVS Ringtone Maker 1.6.1 – ‘.au’ File Remote Buffer Overflow	remote	windows	KedAns-Dz
2011-05-16	MediaInSpot CMS – Local File Inclusion (2)	webapps	php	wlhaan haker
2011-05-16	eFront 3.6.9 – ‘submitScore.php’ Cross-Site Scripting	webapps	php	John Leitch
2011-05-15	frame-oshop – SQL Injection	webapps	php	-SmoG-