Exploits

日期	标题	类型	平台	作者
2011-03-10	Xinha 0.96 – ‘spell-check-savedicts.php’ Multiple HTML Injection Vulnerabilities	webapps	php	John Leitch
2011-03-10	SmarterMail 7.3/7.4 – Multiple Vulnerabilities	webapps	asp	Hoyt LLC Research
2011-03-10	WordPress Plugin Lazyest Gallery 1.0.26 – ‘image’ Cross-Site Scripting	webapps	php	High-Tech Bridge SA
2011-03-10	Keynect eCommerce – SQL Injection	webapps	php	Arturo Zamora
2011-03-10	Wikiwig 5.01 – Cross-Site Scripting / HTML Injection	webapps	php	AutoSec Tools
2011-03-10	Luch Web Designer – Multiple SQL Injections	webapps	asp	p0pc0rn
2011-03-10	PHP < 5.3.6 'Zip' Extension - 'zip_fread()' Denial of Service	dos	php	TorokAlpar
2011-03-10	Linux Kernel < 2.6.37-rc2 - 'TCP_MAXSEG' Kernel Panic (Denial of Service) (2)	dos	linux	zx2c4
2011-03-10	PHP 5.3.x ‘Zip’ Extension – ‘stream_get_contents()’ Denial of Service	dos	php	paulgao
2011-03-10	FreeBSD 6.4 – Netgraph Privilege Escalation	local	bsd	zx2c4
2011-03-10	PHP 5.3.x ‘Intl’ Extension – ‘NumberFormatter::setSymbol()’ Denial of Service	dos	php	thoger
2011-03-09	Maian Weblog 4.0 – Blind SQL Injection	webapps	php	mr_me
2011-03-09	Esselbach Storyteller CMS System 1.8 – SQL Injection	webapps	php	Shamus
2011-03-09	WebKit 1.2.x – Local Webpage Cross Domain Information Disclosure	remote	windows	Aaron Sigel
2011-03-09	Apple QuickTime 7.5 – ‘.m3u’ Remote Stack Buffer Overflow	remote	osx	KedAns-Dz
2011-03-09	recordpress 0.3.1 – Multiple Vulnerabilities	webapps	php	Khashayar Fereidani
2011-03-08	WordPress Plugin 1 Flash Gallery 0.2.5 – Cross-Site Scripting / SQL Injection	webapps	php	High-Tech Bridge SA
2011-03-08	WordPress Plugin PhotoSmash Galleries 1.0.x – ‘action’ Cross-Site Scripting	webapps	php	High-Tech Bridge SA
2011-03-08	WordPress Plugin GRAND Flash Album Gallery 0.55 – Multiple Vulnerabilities	webapps	php	High-Tech Bridge SA
2011-03-08	Ruubikcms 1.0.3 – Multiple Vulnerabilities	webapps	php	Khashayar Fereidani
2011-03-08	Nokia N97 – ‘.m3u’ Playlist Crash (PoC)	dos	hardware	KedAns-Dz
2011-03-08	Movavi VideoSuite 8.0 Movie Editor – ‘.avi’ Local Crash (PoC)	dos	windows	KedAns-Dz
2011-03-08	Movavi VideoSuite 8.0 Slideshow – ‘.jpg’ Local Crash (PoC)	dos	windows	KedAns-Dz
2011-03-08	Movavi VideoSuite 8.0 MediaPlayer – ‘.m3u’ Local Buffer Overflow	local	windows	KedAns-Dz
2011-03-08	Oracle MySQL for Microsoft Windows – Payload Execution (Metasploit)	remote	windows	Metasploit
2011-03-08	EzPub Simple Classic ASP CMS – SQL Injection	webapps	asp	p0pc0rn
2011-03-08	.NET Runtime Optimization Service – Local Privilege Escalation	local	windows	XenoMuta
2011-03-08	WordPress Plugin Inline Gallery 0.3.9 – ‘do’ Cross-Site Scripting	webapps	php	High-Tech Bridge SA
2011-03-08	PHP < 5.3.6 'OpenSSL' Extension - 'openssl_decrypt' Ciphertext Data Memory Leak Denial of Service	dos	php	dovbysh
2011-03-08	WS Interactive Automne 4.1 – ‘/admin/upload-controler.php’ Arbitrary File Upload	webapps	php	AutoSec Tools
2011-03-08	PHP < 5.3.6 'OpenSSL' Extension - 'openssl_encrypt' Plaintext Data Memory Leak Denial of Service	dos	php	dovbysh
2011-03-08	Ruubikcms 1.0.3 – ‘head.php’ Cross-Site Scripting	webapps	php	Khashayar Fereidani
2011-03-07	Kodak InSite 5.5.2 – ‘/Pages/login.aspx?Language’ Cross-Site Scripting	webapps	asp	Dionach
2011-03-07	Kodak InSite 5.5.2 – ‘/Troubleshooting/DiagnosticReport.asp?HeaderWarning’ Cross-Site Scripting	webapps	asp	Dionach
2011-03-07	Novell iPrint Client 5.52 – ActiveX Control Buffer Overflow (Metasploit)	remote	windows	Metasploit
2011-03-07	Hiawatha WebServer 7.4 – Denial of Service	dos	multiple	Rodrigo Escobar
2011-03-07	BMForum Myna 6.0 – SQL Injection	webapps	php	Stephan Sattler
2011-03-07	EggAvatar 2.3.2 for vBulletin 3.8.x – Local File Read	webapps	php	DSecurity
2011-03-07	KingView 6.5.3 SCADA – ActiveX	remote	windows	Carlos Mario Penagos Hollmann
2011-03-07	Bacula-Web 1.3.x < 5.0.3 - Multiple Vulnerabilities	webapps	php	b0telh0
2011-03-06	Quick Polls – Local File Inclusion / Deletion	webapps	php	Mark Stanislav
2011-03-06	N-13 News 4.0 – Cross-Site Request Forgery (Add Admin)	webapps	php	AtT4CKxT3rR0r1ST
2011-03-06	EggAvatar for vBulletin 3.8.x – SQL Injection	webapps	php	DSecurity
2011-03-05	Allied Telesyn TFTP (AT-TFTP) Server/Daemon 1.9 – Long Filename Overflow (Metasploit)	remote	windows	Metasploit
2011-03-05	BoutikOne – ‘description.php’ SQL Injection	webapps	php	IRAQ_JAGUAR
2011-03-05	vTiger CRM 5.0.4 – Local File Inclusion	webapps	php	TecR0c
2011-03-05	MySms 1.0 – Multiple Vulnerabilities	webapps	php	AtT4CKxT3rR0r1ST
2011-03-05	Apple Mail.app – Image Attachment Command Execution (Metasploit)	remote	multiple	Metasploit
2011-03-05	nostromo nhttpd 1.9.3 – Directory Traversal Remote Command Execution	remote	linux	RedTeam Pentesting GmbH
2011-03-04	Lms Web Ensino – Multiple Input Validation Vulnerabilities	webapps	php	waKKu