Exploits

日期	标题	类型	平台	作者
2011-04-11	Vallen Zipper 2.30 – ‘.zip’ Heap Overflow	dos	windows	C4SS!0 G0M3S
2011-04-11	WordPress Theme Live Wire 2.3.1 – Multiple Vulnerabilities	webapps	php	MustLive
2011-04-11	Microsoft Host Integration Server 2004-2010 – Remote Denial of Service	dos	windows	Luigi Auriemma
2011-04-11	Etki Video PRO 2.0 – ‘kategori.asp?cat’ SQL Injection	webapps	php	Kurd-Team
2011-04-11	Etki Video PRO 2.0 – ‘izle.asp?id’ SQL Injection	webapps	php	Kurd-Team
2011-04-11	Linux Kernel 2.6.x – ‘inotify_init1()’ Double-Free Local Denial of Service	dos	linux	anonymous
2011-04-11	Dimac CMS 1.3 XS – ‘default.asp’ SQL Injection	webapps	asp	KedAns-Dz
2011-04-11	VeryTools VideoSpirit Pro 1.70 – ‘.visprj’ Local Buffer Overflow (Metasploit)	local	windows	Metasploit
2011-04-11	MIT Kerberos 5 – kadmind Change Password Feature Remote Code Execution	remote	linux	Felipe Ortega
2011-04-11	tmux 1.3/1.4 – ‘-S’ Option Incorrect SetGID Privilege Escalation	local	linux	ph0x90bic
2011-04-10	MikeyZip 1.1 – ‘.zip’ Local Buffer Overflow	local	windows	C4SS!0 G0M3S
2011-04-10	IrfanView 4.28 – ‘.ICO’ Without Transparent Colour Denial of Service / Remote Denial of Service	dos	windows	BraniX
2011-04-10	IrfanView 4.28 – ‘.ICO’ With Transparent Colour Denial of Service / Remote Denial of Service	dos	windows	BraniX
2011-04-10	Point Market System 3.1x vBulletin plugin – SQL Injection	webapps	php	Net.Edit0r
2011-04-09	eForum 1.1 – ‘eforum.php’ Arbitrary File Upload	webapps	php	QSecure
2011-04-09	Libmodplug ReadS3M – Stack Overflow	dos	multiple	SEC Consult
2011-04-09	Nooms CMS 1.1.1 – Cross-Site Request Forgery	webapps	php	loneferret
2011-04-09	Joomla! Component joomlacontenteditor – Blind SQL Injection	webapps	php	eidelweiss
2011-04-09	Real Networks Arcade Games – StubbyUtil.ProcessMgr ActiveX Arbitrary Code Execution (Metasploit)	remote	windows	Metasploit
2011-04-08	1024 CMS 1.1.0 Beta – Multiple Input Validation Vulnerabilities	webapps	php	QSecure & Demetris Papapetrou
2011-04-08	FiberHome HG-110 – Cross-Site Scripting / Directory Traversal	remote	hardware	Zerial
2011-04-08	VideoLAN VLC Media Player 1.1.8 – ModPlug ReadS3M Stack Buffer Overflow (Metasploit)	remote	windows	Metasploit
2011-04-08	viscacha 0.8.1 – Multiple Vulnerabilities	webapps	php	High-Tech Bridge SA
2011-04-08	ManageEngine Applications Manager – (Authenticated) Code Execution (Metasploit)	remote	windows	Metasploit
2011-04-08	phpcollab 2.5 – Multiple Vulnerabilities	webapps	php	High-Tech Bridge SA
2011-04-08	Microsoft Windows XP – ‘afd.sys’ Local Kernel Denial of Service	dos	windows	Lufeng Li
2011-04-08	PrestaShop 1.3.6 – ‘cms.php’ Remote File Inclusion	webapps	php	KedAns-Dz
2011-04-08	AOL Desktop 9.6 – RTX Buffer Overflow (Metasploit)	local	windows	Metasploit
2011-04-08	Joomla! Component com_virtuemart 1.1.7 – Blind SQL Injection	webapps	php	TecR0c & mr_me
2011-04-08	vTiger CRM 5.2.1 – ‘sortfieldsjson.php’ Local File Inclusion	webapps	php	John Leitch
2011-04-07	eGroupWare 1.8.1 – ‘test.php’ Cross-Site Scripting	webapps	php	AutoSec Tools
2011-04-07	vTiger CRM 5.2.1 – ‘vtigerservice.php’ Cross-Site Scripting	webapps	php	AutoSec Tools
2011-04-07	Omer Portal 3.220060425 – ‘arama_islem.asp’ Cross-Site Scripting	webapps	asp	kurdish hackers team
2011-04-07	S40 CMS 0.4.2b – Local File Inclusion	webapps	php	Osirys
2011-04-06	TextPattern 4.2 – ‘index.php’ Cross-Site Scripting	webapps	php	kurdish hackers team
2011-04-06	Graugon Forum 1.3 – SQL Injection	webapps	php	AutoSec Tools
2011-04-06	Dream Vision Technologies Web Portal – SQL Injection	webapps	php	eXeSoul
2011-04-06	MPlayer (r33064 Lite) – Local Buffer Overflow (ROP)	local	windows	Nate_M
2011-04-06	greenpants 0.1.7 – Multiple Vulnerabilities	webapps	php	Ptrace Security
2011-04-06	Redmine 1.0.1/1.1.1 – ‘projects/hg-hellowword/news/’ Cross-Site Scripting	webapps	php	Mesut Timur
2011-04-06	eyeos 2.3 – Multiple Vulnerabilities	webapps	php	AutoSec Tools
2011-04-05	python-feedparser 5.0 – ‘/feedparser/feedparser.py’ Cross-Site Scripting	remote	multiple	fazalmajid
2011-04-05	UseBB 1.0.11 – ‘admin.php’ Local File Inclusion	webapps	php	High-Tech Bridge SA
2011-04-05	Tutorialms 1.4 – ‘show’ SQL Injection	webapps	php	LiquidWorm
2011-04-05	Eleanor CMS – Cross-Site Scripting / Multiple SQL Injections	webapps	php	High-Tech Bridge SA
2011-04-05	WordPress Plugin Custom Pages 0.5.0.1 – Local File Inclusion	webapps	php	AutoSec Tools
2011-04-05	OpenEMR 4.0.0 – Multiple Vulnerabilities	webapps	php	AutoSec Tools
2011-04-05	Zend Server Java Bridge – Arbitrary Java Code Execution (Metasploit)	remote	multiple	Metasploit
2011-04-04	XOOPS 2.5 – ‘banners.php’ Multiple Local File Inclusions	webapps	php	KedAns-Dz
2011-04-04	Yaws-Wiki 1.88-1 – Multiple Cross-Site Scripting / HTML Injection Vulnerabilities	webapps	php	Michael Brooks