Exploits

日期	标题	类型	平台	作者
2011-04-26	Noah’s Classifieds 5.0.4 – ‘index.php’ Multiple HTML Injection Vulnerabilities	webapps	php	High-Tech Bridge SA
2011-04-26	html-edit CMS 3.1.x – ‘html_output’ Cross-Site Scripting	webapps	php	KedAns-Dz
2011-04-26	WordPress Plugin Sermon Browser 0.43 – Cross-Site Scripting / SQL Injection	webapps	php	Ma3sTr0-Dz
2011-04-26	Quick.CMS 3.0 – Cross-Site Request Forgery	webapps	php	^Xecuti0N3r
2011-04-26	Snom IP Phone Web Interface < 8 - Multiple Vulnerabilities	webapps	hardware	Yakir Wizman
2011-04-26	WordPress Plugin SermonBrowser 0.43 – SQL Injection	webapps	php	Ma3sTr0-Dz
2011-04-25	phpmychat plus 1.93 – Multiple Vulnerabilities	webapps	php	AutoSec Tools
2011-04-25	OrangeHRM 2.6.3 – ‘PluginController.php’ Local File Inclusion	webapps	php	AutoSec Tools
2011-04-25	mySeatXT 0.1781 – SQL Injection	webapps	php	AutoSec Tools
2011-04-25	eZip Wizard 3.0 – Local Stack Buffer Overflow (Metasploit)	local	windows	Metasploit
2011-04-25	eyeOS 1.9.0.2 – Image File Handling HTML Injection	webapps	php	Alberto Ortega
2011-04-25	eXPert PDF 7.0.880.0 – ‘.pj’ Heap Buffer Overflow	dos	windows	KedAns-Dz
2011-04-25	TemaTres 1.3 – ‘_search_expresion’ Cross-Site Scripting	webapps	php	AutoSec Tools
2011-04-25	AT-TFTP Server 1.8 – ‘Read’ Request Remote Denial of Service	dos	windows	Antu Sanadi
2011-04-24	SoftMP3 – SQL Injection	webapps	php	mArTi
2011-04-22	todoyu 2.0.8 – ‘lang’ Cross-Site Scripting	webapps	php	AutoSec Tools
2011-04-22	WordPress Plugin Ajax Category Dropdown 0.1.5 – Multiple Vulnerabilities	webapps	php	High-Tech Bridge SA
2011-04-22	Realmarketing CMS – Multiple SQL Injections	webapps	php	^Xecuti0N3r
2011-04-22	4Images 1.7.9 – Multiple Vulnerabilities	webapps	php	High-Tech Bridge SA
2011-04-22	DynMedia Pro Web CMS 4.0 – Local File Disclosure	webapps	php	Mbah_Semar
2011-04-22	Web2Project 2.3 – SQL Injection	webapps	php	AutoSec Tools
2011-04-22	Dolibarr ERP/CRM 3.0.0 – Multiple Vulnerabilities	webapps	php	AutoSec Tools
2011-04-22	PHP ‘phar’ Extension 1.1.1 – Heap Overflow	dos	multiple	Alexander Gavrun
2011-04-22	ZenPhoto 1.4.0.3 – x-forwarded-for HTTP Header Persistent Cross-Site Scripting	webapps	php	Saif
2011-04-22	Nuke Evolution Xtreme 2.0 – Local File Inclusion / SQL Injection	webapps	php	KedAns-Dz
2011-04-22	360 Web Manager 3.0 – Multiple Vulnerabilities	webapps	php	Ignacio Garrido
2011-04-22	Dolibarr ERP/CRM 3.0 – Local File Inclusion / Cross-Site Scripting	webapps	php	AutoSec Tools
2011-04-22	First Escort Marketing CMS – Multiple SQL Injections Vulnerabilities	webapps	php	NoNameMT
2011-04-21	LightNEasy 3.2.3 – ‘userhandle’ Cookie SQL Injection	webapps	php	AutoSec Tools
2011-04-21	Gesytec ElonFmt ActiveX 1.1.14 – ‘ElonFmt.ocx’ pid Item Buffer Overflow (SEH)	local	windows	LiquidWorm
2011-04-21	ZenPhoto 1.4.0.3 – ‘_zp_themeroot’ Multiple Cross-Site Scripting Vulnerabilities	webapps	php	High-Tech Bridge SA
2011-04-21	SyCtel Design – ‘menu’ Multiple Local File Inclusions	webapps	php	Ashiyane Digital Security Team
2011-04-21	Spreecommerce < 0.50.0 - Arbitrary Command Execution (Metasploit)	remote	unix	Metasploit
2011-04-20	SocialCMS 1.0.2 – Multiple Cross-Site Request Forgery Vulnerabilities	webapps	php	vir0e5
2011-04-20	Yahoo! CD Player – ActiveX Control ‘open()’ Method Stack Buffer Overflow	dos	windows	shinnai
2011-04-20	docuFORM Mercury WebApp 6.16a/5.20 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	LiquidWorm
2011-04-20	Automagick Tube Script 1.4.4 – ‘module’ Cross-Site Scripting	webapps	php	Kurd-Team
2011-04-20	Ultimate eShop – Error-Based SQL Injection	webapps	php	Romka
2011-04-19	Ultra Marketing Enterprises CMS and Cart – Multiple SQL Injections	webapps	php	eXeSoul
2011-04-19	Wireshark 1.4.4 – ‘packet-dect.c’ Remote Stack Buffer Overflow (Metasploit) (2)	remote	windows	Metasploit
2011-04-19	CRESUS – ‘recette_detail.php’ SQL Injection	webapps	php	GrayHatz Security Group
2011-04-19	Viola DVR VIO-4/1000 – Multiple Directory Traversal Vulnerabilities	remote	linux	QSecure
2011-04-19	dalbum 1.43 – Multiple Vulnerabilities	webapps	php	High-Tech Bridge SA
2011-04-19	webSPELL 4.2.2a – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	High-Tech Bridge SA
2011-04-19	IBM Tivoli Directory Server SASL – Bind Request Remote Code Execution	dos	windows	Francis Provencher
2011-04-19	Oracle JD Edwards EnterpriseOne 8.9x Tools Web Runtime SEC – ‘/jde/JASMafletMafBrowserClose.mafService?jdemafjasLinkTarget’ Cross-Site Scripting	remote	multiple	Juan Manuel Garcia
2011-04-19	Adobe Flash Player < 10.1.53.64 - Action Script Type Confusion (ASLR + DEP Bypass)	remote	windows	Abysssec
2011-04-19	Oracle JD Edwards EnterpriseOne 8.9x Tools Web Runtime SEC – ‘/jde/MafletClose.mafService?RENDER_MAFLET’ Cross-Site Scripting	remote	multiple	Juan Manuel Garcia
2011-04-19	Wireshark 1.4.4 – ‘packet-dect.c’ Local Stack Buffer Overflow (Metasploit) (1)	local	windows	Metasploit
2011-04-19	Oracle JD Edwards EnterpriseOne 8.9x Tools Web Runtime SEC – ‘/jde/E1Menu_OCL.mafService?e1.namespace’ Cross-Site Scripting	remote	multiple	Juan Manuel Garcia