Exploits

日期	标题	类型	平台	作者
2011-03-30	BigACE 2.7.5 – Arbitrary File Upload	webapps	php	Net.Edit0r
2011-03-30	IrIran Shoping Script – SQL Injection	webapps	php	Net.Edit0r
2011-03-30	Zend Java Bridge – Remote Code Execution	remote	multiple	ikki
2011-03-30	Pligg CMS 1.1.3 – Multiple Vulnerabilities	webapps	php	Jelmer de Hen
2011-03-30	YaCOMAS 0.3.6 Alpha – Multiple Vulnerabilities	webapps	php	Pr@fesOr X
2011-03-30	Media Player Classic Home Cinema 1.5.0.2827 – ‘.avi’ Denial of Service (PoC)	dos	windows	BraniX
2011-03-30	Perl 5.x – ‘lc()’ / ‘uc()’ TAINT Mode Protection Security Bypass	remote	linux	mmartinec
2011-03-29	jHTTPd 0.1a – Directory Traversal	remote	multiple	AutoSec Tools
2011-03-29	IDEAL Administration 2011 11.4 – Local Buffer Overflow (SEH)	local	windows	Dr_IDE
2011-03-29	XOOPS – ‘view_photos.php’ Cross-Site Scripting	webapps	php	KedAns-Dz
2011-03-29	Easy File Sharing Web Server 5.8 – Multiple Vulnerabilities	remote	windows	AutoSec Tools
2011-03-29	Tracks 1.7.2 – URI Cross-Site Scripting	webapps	php	Mesut Timur
2011-03-29	Claroline 1.10 – Persistent Cross-Site Scripting	webapps	php	AutoSec Tools
2011-03-29	Spitfire 1.0.3x – ‘cms_username’ Cross-Site Scripting	webapps	php	High-Tech Bridge SA
2011-03-29	Andy’s PHP KnowledgeBase 0.95.4 – SQL Injection	webapps	php	AutoSec Tools
2011-03-29	osCSS 2.1 – Multiple Cross-Site Scripting / Local File Inclusions	webapps	php	AutoSec Tools
2011-03-29	Winamp 5.61 – AVI Denial of Service (PoC)	dos	windows	BraniX
2011-03-29	Microsoft Windows Explorer 6.0.2900.5512 – ‘Shmedia.dll 6.0.2900.5512’ AVI Preview Denial of Service (PoC)	dos	windows	BraniX
2011-03-29	GOM Player 2.1.28.5039 – AVI Denial of Service (PoC)	dos	windows	BraniX
2011-03-29	Rumble 0.25.2232 – Denial of Service	dos	windows	AutoSec Tools
2011-03-29	oscss2 2.1.0 rc12 – Multiple Vulnerabilities	webapps	php	AutoSec Tools
2011-03-28	Claroline 1.10 – Multiple HTML Injection Vulnerabilities	webapps	php	AutoSec Tools
2011-03-28	webEdition CMS – Local File Inclusion	webapps	php	eidelweiss
2011-03-28	WordPress Plugin BackWPup – Remote Code Execution / Local Code Execution	webapps	php	Sense of Security
2011-03-28	webEdition CMS 6.1.0.2 – ‘DOCUMENT_ROOT’ Local File Inclusion	webapps	php	eidelweiss
2011-03-28	Honey Soft Web Solution – Multiple Vulnerabilities	webapps	php	**RoAd_KiLlEr**
2011-03-28	Alkacon OpenCMS 7.5.x – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	antisnatchor
2011-03-27	DivX Player 7 – Multiple Remote Buffer Overflow Vulnerabilities	dos	windows	KedAns-Dz
2011-03-27	eXPert PDF Batch Creator 7.0.880.0 – Denial of Service	dos	windows	KedAns-Dz
2011-03-27	RealPlayer 11 – ‘.rmp’ Remote Buffer Overflow	remote	multiple	KedAns-Dz
2011-03-27	Distributed Ruby – Send instance_eval/syscall Code Execution (Metasploit)	remote	linux	Metasploit
2011-03-27	webEdition CMS 6.1.0.2 – Multiple Vulnerabilities	webapps	php	AutoSec Tools
2011-03-27	OrangeHRM 2.6.2 – ‘jobVacancy.php’ Cross-Site Scripting	webapps	php	AutoSec Tools
2011-03-27	wodWebServer.NET 1.3.3 – Directory Traversal	remote	windows	AutoSec Tools
2011-03-27	SimplisCMS 1.0.3.0 – Multiple Vulnerabilities	webapps	php	NassRawI
2011-03-27	FLVPlayer4Free 2.9 – ‘.fp4f’ Remote Buffer Overflow	remote	windows	KedAns-Dz
2011-03-27	Cetera eCommerce – Multiple Cross-Site Scripting / SQL Injections	webapps	php	MustLive
2011-03-26	Family Connections CMS 2.3.2 – Persistent Cross-Site Scripting / XML Injection	webapps	php	LiquidWorm
2011-03-26	VideoLAN VLC Media Player 1.1.4 – ‘AMV’ Dangling Pointer (Metasploit)	remote	windows	Metasploit
2011-03-25	Family Connections 2.3.2 – ‘subject’ HTML Injection	webapps	php	Zero Science Lab
2011-03-25	HP OpenView Network Node Manager (OV NNM) – ‘getnnmdata.exe Hostname’ CGI Buffer Overflow (Metasploit)	remote	windows	Metasploit
2011-03-24	Avaya IP Office Manager 8.1 TFTP – Denial of Service	dos	windows	Craig Freyman
2011-03-24	HP OpenView Network Node Manager (OV NNM) – ‘getnnmdata.exe’ (MaxAge) CGI Buffer Overflow (Metasploit)	remote	windows	Metasploit
2011-03-24	HP OpenView Network Node Manager (OV NNM) – ‘getnnmdata.exe ICount’ CGI Buffer Overflow (Metasploit)	remote	windows	Metasploit
2011-03-24	netjukebox 4.01B/5.25 – ‘skin’ Cross-Site Scripting	webapps	php	AutoSec Tools
2011-03-24	HP OpenView Network Node Manager (OV NNM) – ‘nnmRptConfig.exe schdParams’ Remote Buffer Overflow (Metasploit)	remote	windows	Metasploit
2011-03-24	Ripe Website Manager 1.1 – Cross-Site Scripting / Multiple SQL Injections	webapps	php	High-Tech Bridge SA
2011-03-24	GrapeCity Data Dynamics Reports 1.6.2084.14 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Dionach
2011-03-24	MC Content Manager 10.1.1 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	MustLive
2011-03-24	SyndeoCMS 2.8.02 – Multiple Vulnerabilities (2)	webapps	php	High-Tech Bridge SA