Exploits

日期	标题	类型	平台	作者
2011-03-17	WordPress Plugin Sodahead Polls 2.0.2 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	High-Tech Bridge SA
2011-03-17	Joomla! Component com_booklibrary – SQL Injection	webapps	php	Marc Doudiet
2011-03-17	ACTi ASOC 2200 Web Configurator 2.6 – Remote Command Execution	remote	hardware	Todor Donev
2011-03-17	Joomla! 1.6 – Multiple SQL Injections	webapps	php	Aung Khant
2011-03-17	Microsoft Source Code Analyzer for SQL Injection 1.3 – Improper Permissions	local	windows	LiquidWorm
2011-03-17	RealNetworks RealPlayer – CDDA URI Initialization (Metasploit)	remote	windows	Metasploit
2011-03-17	Tugux CMS 1.0_final – Multiple Vulnerabilities	webapps	php	Aodrulez
2011-03-16	AplikaMedia CMS – ‘page_info.php’ SQL Injection	webapps	php	H3X
2011-03-16	Sun Java Applet2ClassLoader – Remote Code Execution (Metasploit)	remote	multiple	Metasploit
2011-03-16	b2evolution 4.0.3 – Persistent Cross-Site Scripting	webapps	php	AutoSec Tools
2011-03-16	Monkey’s Audio – ‘.ape’ Remote Buffer Overflow	remote	windows	KedAns-Dz
2011-03-16	WikiWig 5.01 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	AutoSec Tools
2011-03-16	pointter PHP content management system 1.2 – Multiple Vulnerabilities	webapps	php	LiquidWorm
2011-03-16	AVIPreview 0.26 Alpha – Denial of Service	dos	windows	BraniX
2011-03-16	Adobe ColdFusion – Directory Traversal (Metasploit)	remote	multiple	Metasploit
2011-03-16	LotusCMS 3.0.3 – Multiple Vulnerabilities	webapps	php	High-Tech Bridge SA
2011-03-15	SugarCRM 6.1.1 – Information Disclosure	webapps	php	RedTeam Pentesting GmbH
2011-03-15	VideoLAN VLC Media Player 1.0.5 – ‘.ape’ Denial of Service	dos	multiple	KedAns-Dz
2011-03-15	HP OpenView Performance Insight Server – Backdoor Account Code Execution (Metasploit)	remote	windows	Metasploit
2011-03-15	IF-CMS 2.07 – Local File Inclusion (1)	webapps	php	TecR0c
2011-03-15	Opera 11.01 – NULL PTR Dereference	dos	windows	echo
2011-03-14	BoutikOne – ‘rss_top10.php?lang’ SQL Injection	webapps	php	cdx.security
2011-03-14	ABBS Electronic Flash Cards 2.1 – ‘.fcd’ Local Buffer Overflow	local	windows	h1ch4m
2011-03-14	BoutikOne – ‘rss_promo.php?lang’ SQL Injection	webapps	php	cdx.security
2011-03-14	ABBS Audio Media Player 3.0 – ‘.lst’ Local Buffer Overflow (SEH)	local	windows	h1ch4m
2011-03-14	BoutikOne – ‘rss_flash.php?lang’ SQL Injection	webapps	php	cdx.security
2011-03-14	SmarterMail 8.0 – Multiple Cross-Site Scripting Vulnerabilities	webapps	asp	Hoyt LLC Research
2011-03-14	BoutikOne – ‘rss_news.php?lang’ SQL Injection	webapps	php	cdx.security
2011-03-14	Google Android 2.0/2.1/2.1.1 – WebKit Use-After-Free	remote	android	MJ Keith
2011-03-14	BoutikOne – ‘search.php’ Multiple SQL Injections	webapps	php	cdx.security
2011-03-14	Linux Kenel 2.6.37-rc1 – serial_core TIOCGICOUNT Leak	dos	linux	prdelka
2011-03-14	BoutikOne – ‘list.php?path’ SQL Injection	webapps	php	cdx.security
2011-03-14	iOS Checkview 1.1 – Directory Traversal	remote	ios	kim@story
2011-03-14	BoutikOne – ‘categorie.php?path’ SQL Injection	webapps	php	cdx.security
2011-03-14	ABBS Audio Media Player – ‘.m3u’ / ‘.LST’ Local Buffer Overflow	local	windows	Rh0
2011-03-14	Log1 CMS 2.0 – Multiple Vulnerabilities	webapps	php	Aodrulez
2011-03-14	Trend Micro WebReputation API 10.5 – URI SecURIty Bypass	remote	multiple	DcLabs Security Research Group
2011-03-14	Foxit PDF Reader 4.2 – JavaScript File Write (Metasploit)	local	windows	Metasploit
2011-03-13	Cover Vision – SQL Injection	webapps	php	Egyptian.H4x0rz
2011-03-12	PHP 5.3.6 – ‘shmop_read()’ Integer Overflow Denial of Service	dos	linux	Jose Carlos Norte
2011-03-12	CoolZip 2.0 – zip Buffer Overflow	local	windows	C4SS!0 G0M3S
2011-03-11	Linux NTP query client 4.2.6p1 – Heap Overflow	dos	linux	mr_me
2011-03-11	Oracle WebLogic – POST Session Fixation	webapps	multiple	Roberto Suggi Liverani
2011-03-11	Accellion File Transfer Appliance MPIPE2 – Command Execution (Metasploit)	remote	unix	Metasploit
2011-03-11	Constructr CMS 3.03 – Multiple Remote Vulnerabilities	webapps	php	LiquidWorm
2011-03-11	SmarterStats 6.0 – Multiple Vulnerabilities	webapps	asp	Hoyt LLC Research
2011-03-11	N`CMS 1.1E – Local File Inclusion / Remote Code	webapps	php	TecR0c
2011-03-10	Cosmoshop 10.05.00 – Multiple Cross-Site Scripting / SQL Injections	webapps	cgi	High-Tech Bridge SA
2011-03-10	Xinha 0.96 – ‘spell-check-savedicts.php’ Multiple HTML Injection Vulnerabilities	webapps	php	John Leitch
2011-03-10	SmarterMail 7.3/7.4 – Multiple Vulnerabilities	webapps	asp	Hoyt LLC Research