Exploits

日期	标题	类型	平台	作者
2011-05-04	Sothink DHTML Menu – SQL Injection	webapps	asp	Caddy-Dz
2011-05-04	sipdroid 2.2 – SIP INVITE Response User Enumeration	remote	multiple	Anibal Vaz Marques
2011-05-04	ZyWALL USG Appliance – Multiple Vulnerabilities	remote	hardware	RedTeam Pentesting
2011-05-03	E2 Photo Gallery 0.9 – ‘index.php’ Cross-Site Scripting	webapps	php	High-Tech Bridge SA
2011-05-03	Proofpoint Protection Server 5.5.5 – ‘process.cgi’ Cross-Site Scripting	webapps	cgi	Karan Khosla
2011-05-03	Web Auction 0.3.6 – ‘lang’ Cross-Site Scripting	webapps	php	AutoSec Tools
2011-05-03	ICONICS WebHMI – ActiveX Stack Overflow	remote	windows	sgb & bls
2011-05-03	Time and Expense Management System – Multiple Vulnerabilities	webapps	php	AutoSec Tools
2011-05-03	Front Accounting 2.3.4 – Cross-Site Request Forgery	webapps	php	AutoSec Tools
2011-05-03	Horizon Web Builder – ‘fshow.php’ SQL Injection	webapps	php	Iolo Morganwg
2011-05-03	Perl 5.10 – Multiple Null Pointer Dereference Denial of Service Vulnerabilities	dos	multiple	Jonathan Brossard
2011-05-03	GoT.MY (Multiple Products) – ‘theme_dir’ Cross-Site Scripting	webapps	php	Hector.x90
2011-05-03	SelectaPix 1.4.1 – ‘uploadername’ Cross-Site Scripting	webapps	php	High-Tech Bridge SA
2011-05-03	YaPiG 0.95 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	High-Tech Bridge SA
2011-05-02	OpenMyZip 0.1 – ‘.zip’ Remote Buffer Overflow	remote	windows	C4SS!0 G0M3S
2011-05-02	Travel411 – SQL Injection	webapps	php	Caddy-Dz
2011-05-02	Asterisk 1.8.x – SIP INVITE Request User Enumeration	remote	multiple	Francesco Tornieri
2011-05-02	Exponent CMS 2.0 Beta 1.1 – Cross-Site Request Forgery (Add Administrator Account)	webapps	php	outlaw.dll
2011-05-02	LDAP Account Manager 3.4.0 – ‘selfserviceSaveOk’ Cross-Site Scripting	webapps	php	AutoSec Tools
2011-05-02	Parnian Opendata CMS – SQL Injection	webapps	php	Alexander
2011-05-02	LANSA aXes Web Terminal TN5250 – ‘axes_default.css’ Cross-Site Scripting	webapps	java	Patrick Webster
2011-05-01	TCExam 11.1.29 – ‘tce_xml_user_results.php’ Multiple SQL Injections	webapps	php	AutoSec Tools
2011-04-30	MJM Core Player 2011 – ‘.s3m’ Local Stack Buffer Overflow (Metasploit)	local	windows	Metasploit
2011-04-30	Tine 2.0 – ‘vbook.php’ Cross-Site Scripting	webapps	php	AutoSec Tools
2011-04-30	MJM QuickPlayer 1.00 Beta 60a / QuickPlayer 2010 – ‘.s3m’ Local Stack Buffer Overflow (Metasploit)	local	windows	Metasploit
2011-04-29	OProfile 0.9.6 – ‘opcontrol’ Utility ‘set_event()’ Local Privilege Escalation	local	linux	Stephane Chauveau
2011-04-29	SOOP Portal Raven 1.0b – SQL Injection	webapps	asp	Evil-Thinker
2011-04-29	Microsoft Excel – Axis Properties Record Parsing Buffer Overflow (PoC) (MS11-02)	dos	windows	webDEViL
2011-04-29	phpGraphy 0.9.13b – Multiple Vulnerabilities	webapps	php	High-Tech Bridge SA
2011-04-28	BackupPC 3.x – ‘index.cgi’ Multiple Cross-Site Scripting Vulnerabilities	webapps	cgi	High-Tech Bridge SA
2011-04-28	Libmodplug 0.8.8.2 – ‘.abc’ Stack Buffer Overflow (PoC)	dos	linux	epiphant
2011-04-28	kusaba x 0.9.1 – Multiple Vulnerabilities	webapps	php	Emilio Pinna
2011-04-28	WordPress Plugin WP Photo Album 1.5.1 – ‘id’ Cross-Site Scripting	webapps	php	High-Tech Bridge SA
2011-04-28	eyeos 1.9.0.2 – Persistent Cross-Site Scripting Using Image Files	webapps	php	Alberto Ortega
2011-04-28	WordPress Plugin Daily Maui Photo Widget 0.2 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	High-Tech Bridge SA
2011-04-28	ClanSphere 2011.0 – Local File Inclusion / Arbitrary File Upload	webapps	php	KedAns-Dz
2011-04-28	phpGraphy 0.9.13b – ‘theme_dir’ Cross-Site Scripting	webapps	php	High-Tech Bridge SA
2011-04-28	Subtitle Processor 7.7.1 – ‘.m3u’ File Buffer Overflow (SEH Unicode) (Metasploit)	local	windows	Metasploit
2011-04-28	NetOp Remote Control 8.0/9.1/9.2/9.5 – Local Buffer Overflow	local	windows	chap0
2011-04-27	Kusaba X 0.9 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Emilio Pinna
2011-04-27	EMC HomeBase Server – Directory Traversal Remote Code Execution (Metasploit)	remote	windows	Metasploit
2011-04-27	Cisco Unified Communications Manager 8.5 – ‘xmldirectorylist.jsp’ Multiple SQL Injections	webapps	jsp	Alberto Revelli
2011-04-27	Symphony CMS 2.1.2 – Blind SQL Injection	webapps	php	Wireghoul
2011-04-27	Subtitle Processor 7.7.1 – Local Buffer Overflow (SEH Unicode)	local	windows	Brandon Murphy
2011-04-27	up.time Software 5 – Administration Interface Remote Authentication Bypass	webapps	php	James Burton
2011-04-27	Joostina (Multiple Components) – SQL Injection	webapps	php	KedAns-Dz
2011-04-26	html-edit CMS 3.1.x – ‘html_output’ Cross-Site Scripting	webapps	php	KedAns-Dz
2011-04-26	WordPress Plugin Sermon Browser 0.43 – Cross-Site Scripting / SQL Injection	webapps	php	Ma3sTr0-Dz
2011-04-26	Quick.CMS 3.0 – Cross-Site Request Forgery	webapps	php	^Xecuti0N3r
2011-04-26	Snom IP Phone Web Interface < 8 - Multiple Vulnerabilities	webapps	hardware	Yakir Wizman