Exploits

日期	标题	类型	平台	作者
2011-05-15	Joomla! Component com_question – SQL Injection	webapps	php	NeX HaCkEr
2011-05-15	Winamp 5.61 – ‘in_midi’ Component heap Overflow (crash only)	dos	windows	Alexander Gavrun
2011-05-14	osCommerce 2.3.1 – ‘banner_manager.php’ Arbitrary File Upload	webapps	php	Number 7
2011-05-14	WordPress Plugin EditorMonkey 2.5 – ‘FCKeditor’ Arbitrary File Upload	webapps	php	kaMtiEz
2011-05-13	DreamBox DM500(+) – Arbitrary File Download	remote	hardware	LiquidWorm
2011-05-13	Adobe Audition 3.0 build 7283 – Session File Handling Buffer Overflow (PoC)	dos	windows	LiquidWorm
2011-05-13	A-PDF Wav to MP3 Converter 1.2.0 – DEP Bypass	local	windows	h1ch4m
2011-05-13	Flash Tag Cloud And MT-Cumulus Plugin – ‘tagcloud’ Cross-Site Scripting	webapps	multiple	MustLive
2011-05-12	DocMGR 1.1.2 – ‘history.php’ Cross-Site Scripting	webapps	php	AutoSec Tools
2011-05-12	Argyle Social – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	High-Tech Bridge SA
2011-05-12	Apache 1.4/2.2.x – APR ‘apr_fnmatch()’ Denial of Service	dos	linux	Maksymilian Arciemowicz
2011-05-12	Oracle GlassFish Server – Administration Console Authentication Bypass	webapps	windows	Core Security
2011-05-12	A-PDF All to MP3 Converter 2.0.0 – DEP Bypass	local	windows	h1ch4m
2011-05-12	SlimPDF Reader – Denial of Service (PoC)	dos	windows	Nicolas Krassas
2011-05-12	Symantec Backup Exec System Recovery 8.5 – Kernel Pointers Dereferences	dos	windows	Stefan LE BERRE
2011-05-11	SPlayer 3.7 – Content-Type Buffer Overflow (Metasploit)	remote	windows	Metasploit
2011-05-11	showoff! digital media software 1.5.4 – Multiple Vulnerabilities	webapps	cgi	dr_insane
2011-05-11	Chasys Media Player 2.0 – Local Buffer Overflow (SEH)	local	windows	h1ch4m
2011-05-10	Traidnt UP 2.0 – ‘view.php’ SQL Injection	webapps	php	ScOrPiOn
2011-05-10	serva32 1.2.00 rc1 – Multiple Vulnerabilities	dos	windows	AutoSec Tools
2011-05-10	Calendarix 0.8.20080808 – Multiple Cross-Site Scripting / SQL Injections	webapps	php	High-Tech Bridge SA
2011-05-10	poMMo Aardvark PR16.1 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	High-Tech Bridge SA
2011-05-10	Apache Struts 2.0.0 < 2.2.1.1 - XWork 's:submit' HTML Tag Cross-Site Scripting	remote	multiple	Dr. Marian Ventuneac
2011-05-10	ICONICS WebHMI – ActiveX Buffer Overflow (Metasploit)	remote	windows	Metasploit
2011-05-09	EmbryoCore 1.03 – ‘index.php’ SQL Injection	webapps	php	KedAns-Dz
2011-05-09	Joomla! Component com_hello – SQL Injection	webapps	php	the_cyber_nuxbie
2011-05-09	Joomla! Component com_versioning – SQL Injection	webapps	php	the_cyber_nuxbie
2011-05-09	phpWebSite 1.7.1 – ‘upload.php’ Arbitrary File Upload	webapps	php	AutoSec Tools
2011-05-09	ZAPms 1.22 – ‘nick’ SQL Injection	webapps	php	KedAns-Dz
2011-05-09	Gelsheet 1.02 – ‘index.php’ Cross-Site Scripting	webapps	php	AutoSec Tools
2011-05-09	Exponent CMS 2.0.0 Beta 1.1 – Local File Inclusion / Arbitrary File Upload	webapps	php	AutoSec Tools
2011-05-09	Ampache 3.5.4 – ‘login.php’ Cross-Site Scripting	webapps	php	AutoSec Tools
2011-05-09	encoder 0.4.10 – ‘edit.php’ Cross-Site Scripting	webapps	php	AutoSec Tools
2011-05-09	BlueVoda Website Builder 11 – ‘.bvp’ Local Stack Buffer Overflow	local	windows	KedAns-Dz
2011-05-09	Imperva SecureSphere – SQL Query Filter Security Bypass	remote	multiple	@drk1wi
2011-05-09	Keyfax Customer Response Management 3.2.2.6 – Multiple Cross-Site Scripting Vulnerabilities	webapps	asp	Richard Brain
2011-05-09	HOMEPIMA Design – ‘filedown.php’ Local File Disclosure	webapps	php	KnocKout
2011-05-08	FestOS 2.3c – ‘upload.php’ Arbitrary File Upload	webapps	php	KedAns-Dz
2011-05-07	Getsimple CMS 3.0 – ‘set’ Local File Inclusion	webapps	php	AutoSec Tools
2011-05-07	e107 0.7.25 – ‘news.php’ SQL Injection	webapps	php	KedAns-Dz
2011-05-07	f-fileman 7.0 – Directory Traversal	webapps	cgi	Raffaele Forte
2011-05-06	VCalendar 1.1.5 – Cross-Site Request Forgery	webapps	php	High-Tech Bridge SA
2011-05-06	phpThumb – ‘phpThumbDebug’ Information Disclosure	webapps	php	mook
2011-05-06	PHPDug 2.0.0 – Multiple Vulnerabilities	webapps	php	High-Tech Bridge SA
2011-05-05	PHPDug 2.0 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	High-Tech Bridge SA
2011-05-05	BMC Dashboards 7.6.01 – Cross-Site Scripting / Information Disclosure	webapps	jsp	Richard Brain
2011-05-05	BMC Remedy Knowledge Management 7.5.00 – Default Account / Multiple Cross-Site Scripting Vulnerabilities	webapps	jsp	Richard Brain
2011-05-05	PHP Directory Listing Script 3.1 – ‘index.php’ Cross-Site Scripting	webapps	php	High-Tech Bridge SA
2011-05-05	WordPress Plugin WP Ajax Calendar 1.0 – ‘example.php’ Cross-Site Scripting	webapps	php	High-Tech Bridge SA
2011-05-04	sipdroid 2.2 – SIP INVITE Response User Enumeration	remote	multiple	Anibal Vaz Marques