Exploits

日期	标题	类型	平台	作者
2011-04-04	Longshine Multiple Print Servers – Cross-Site Scripting	webapps	hardware	b0telh0
2011-04-04	ZO Tech Multiple Print Servers – Cross-Site Scripting	webapps	hardware	b0telh0
2011-04-04	WordPress Plugin WPwizz AdWizz Plugin 1.0 – ‘link’ Cross-Site Scripting	webapps	php	John Leitch
2011-04-04	Planex Mini-300PU & Mini100s – Cross-Site Scripting	webapps	hardware	b0telh0
2011-04-04	IBM Lotus Domino iCalendar – MAILTO Buffer Overflow (Metasploit)	remote	windows	Metasploit
2011-04-04	TP-Link TL-PS110U / TL-PS110P – Cross-Site Scripting	webapps	hardware	b0telh0
2011-04-04	MyBB 1.4/1.6 – Multiple Vulnerabilities	webapps	php	MustLive
2011-04-04	Encore ENPS-2012 – Cross-Site Scripting	webapps	hardware	b0telh0
2011-04-04	PHP-Fusion – ‘article_id’ SQL Injection	webapps	php	KedAns-Dz
2011-04-04	Yaws-Wiki 1.88-1 (Erlang) – Persistent / Reflective Cross-Site Scripting	webapps	multiple	Michael Brooks
2011-04-04	DoceboLms 4.0.4 – Multiple Persistent Cross-Site Scripting Vulnerabilities	webapps	php	LiquidWorm
2011-04-04	XOOPS 2.5 – ‘banners.php’ Multiple Local File Inclusions	webapps	php	KedAns-Dz
2011-04-04	Yaws-Wiki 1.88-1 – Multiple Cross-Site Scripting / HTML Injection Vulnerabilities	webapps	php	Michael Brooks
2011-04-03	DoceboLms 4.0.4 – ‘index.php’ Multiple HTML Injection Vulnerabilities	webapps	php	LiquidWorm
2011-04-03	EasyPHP 5.3.5.0 – ‘index.php’ Arbitrary File Download	remote	windows	KedAns-Dz
2011-04-03	WordPress Plugin Placester 0.1 – ‘ajax_action’ Cross-Site Scripting	webapps	php	John Leitch
2011-04-03	RealNetworks GameHouse ‘InstallerDlg.dll’ 2.6.0.445 ActiveX Control – Multiple Vulnerabilities	remote	windows	rgod
2011-04-03	OpenCart 1.4.9 – Multiple Local File Inclusions	webapps	php	KedAns-Dz
2011-04-03	Banner Ad Management Script – SQL Injection	webapps	php	Egyptian.H4x0rz
2011-04-03	Rash CMS – SQL Injection	webapps	php	keracker
2011-04-03	RealNetworks RealGames StubbyUtil.ProcessMgr.1 – ActiveX Control Multiple Remote Command Executions	remote	windows	rgod
2011-04-03	RealNetworks RealGames StubbyUtil.ShellCtl.1 – ActiveX Control Multiple Remote Command Executions	remote	windows	rgod
2011-04-03	Advanced Image Hosting 2.2 – ‘index.php’ SQL Injection	webapps	php	keracker
2011-04-02	ilchClan 1.0.5 – ‘regist.php’ SQL Injection	webapps	php	Easy Laster
2011-04-02	spidaNews 1.0 – ‘news.php?id’ SQL Injection	webapps	php	Easy Laster
2011-04-02	Anzeigenmarkt 2011 – ‘index.php’ SQL Injection	webapps	php	Easy Laster
2011-04-01	Feng Office 1.7.3.3 – Cross-Site Request Forgery	webapps	php	High-Tech Bridge SA
2011-04-01	InTerra Blog Machine 1.84 – Cross-Site Scripting	webapps	php	High-Tech Bridge SA
2011-04-01	IPComp – encapsulation Kernel Memory Corruption	dos	bsd	Tavis Ormandy
2011-04-01	Allomani Super MultiMedia Library 2.5.0 – Cross-Site Request Forgery (Add Admin)	webapps	php	AtT4CKxT3rR0r1ST
2011-04-01	Allomani Audio and Video Library 2.7.0 – Cross-Site Request Forgery (Add Admin)	webapps	php	AtT4CKxT3rR0r1ST
2011-04-01	Allomani Web Links 1.0 – Cross-Site Request Forgery (Add Admin)	webapps	php	AtT4CKxT3rR0r1ST
2011-04-01	Allomani Movies Library 2.0 – Cross-Site Request Forgery (Add Admin)	webapps	php	AtT4CKxT3rR0r1ST
2011-04-01	AWCM 2.x – ‘search.php’ Cross-Site Scripting	webapps	php	Antu Sanadi
2011-04-01	Allomani News 1.0 – Cross-Site Request Forgery (Add Admin)	webapps	php	AtT4CKxT3rR0r1ST
2011-04-01	Allomani E-Store 1.0 – Cross-Site Request Forgery (Add Admin) (2)	webapps	php	AtT4CKxT3rR0r1ST
2011-04-01	GOM Media Player 2.1.6.3499 – Buffer Overflow (Denial of Service) (PoC)	dos	windows	^Xecuti0N3r
2011-04-01	Real player 14.0.2.633 – Buffer Overflow (Denial of Service) (PoC)	dos	windows	^Xecuti0N3r
2011-04-01	Word List Builder – Local Buffer Overflow (SEH)	local	windows	h1ch4m
2011-03-31	InTerra Blog Machine 1.84 – ‘subject’ HTML Injection	webapps	php	High-Tech Bridge SA
2011-03-31	Microsoft Windows Media Player 11.0.5721.5145 – ‘.avi’ Buffer Overflow	dos	windows	^Xecuti0N3r
2011-03-31	MoviePlay 4.82 – ‘.avi’ Buffer Overflow	dos	windows	^Xecuti0N3r
2011-03-31	Collabtive 0.6.5 – Multiple Remote Input Validation Vulnerabilities	webapps	php	High-Tech Bridge SA
2011-03-31	PHPBoost 3.0 – Remote Download Backup	webapps	php	KedAns-Dz
2011-03-30	HT Editor 2.0.18 – File Opening Stack Overflow	local	linux	ZadYree
2011-03-30	ICJobSite 1.1 – ‘pid’ SQL Injection	webapps	php	RoAd_KiLlEr
2011-03-30	CosmoQuest – Authentication Bypass	webapps	asp	Net.Edit0r
2011-03-30	BigACE 2.7.5 – Arbitrary File Upload	webapps	php	Net.Edit0r
2011-03-30	IrIran Shoping Script – SQL Injection	webapps	php	Net.Edit0r
2011-03-30	Zend Java Bridge – Remote Code Execution	remote	multiple	ikki