Exploits

日期	标题	类型	平台	作者
2011-02-25	iphone mydocs 2.7 – Directory Traversal	remote	hardware	Khashayar Fereidani
2011-02-25	iphone ifile 2.0 – Directory Traversal	remote	hardware	Khashayar Fereidani
2011-02-25	iphone folders 2.5 – Directory Traversal	remote	hardware	Khashayar Fereidani
2011-02-25	Edraw Office Viewer Component 7.4 – ActiveX Stack Buffer Overflow	remote	windows	Alexander Gavrun
2011-02-25	glFusion 1.1.x/1.2.1 – ‘users.php’ SQL Injection	webapps	php	H3X
2011-02-25	RaksoCT – Multiple SQL Injections	webapps	asp	p0pc0rn
2011-02-25	phpShop 0.8.1 – ‘page’ Cross-Site Scripting	webapps	php	Aung Khant
2011-02-25	GNU glibc < 2.12.2 - 'fnmatch()' Stack Corruption	dos	multiple	Simon Berry-Byrne
2011-02-24	Novell Netware – RPC XNFS xdrDecodeString	dos	netware	Francis Provencher
2011-02-24	WordPress Plugin Relevanssi 2.7.2 – Persistent Cross-Site Scripting	webapps	php	Saif El-Sherei
2011-02-24	WordPress Plugin GigPress 2.1.10 – Persistent Cross-Site Scripting	webapps	php	Saif El-Sherei
2011-02-24	iOS Share 1.0 – Directory Traversal	remote	ios	R3d@l3rt, Sp@2K, Sunlight
2011-02-24	Victory FTP Server 5.0 – Denial of Service	dos	windows	C4SS!0 G0M3S
2011-02-24	iOS myDBLite 1.1.10 – Directory Traversal	remote	ios	R3d@l3rt, Sp@2K, Sunlight
2011-02-24	iOS iDocManager 1.0.0 – Directory Traversal	remote	ios	R3d@l3rt, Sp@2K, Sunlight
2011-02-24	iSO Filer Lite 2.1.0 – Directory Traversal	remote	hardware	R3d@l3rt, Sp@2K, Sunlight
2011-02-24	iSO Air Files 2.6 – Directory Traversal	remote	hardware	R3d@l3rt, Sp@2K, Sunlight
2011-02-24	Alcassoft’s SOPHIA CMS – SQL Injection	webapps	cfm	p0pc0rn
2011-02-24	iphone pdf reader pro 2.3 – Directory Traversal	remote	hardware	Khashayar Fereidani
2011-02-24	Logwatch Log File – Special Characters Privilege Escalation	remote	linux	Dominik George
2011-02-24	iPhone Guitar – Directory Traversal	remote	hardware	Khashayar Fereidani
2011-02-24	iphone ishred 1.93 – Directory Traversal	remote	hardware	Khashayar Fereidani
2011-02-24	Elecard MPEG Player 5.7 – Local Buffer Overflow (PoC) (SEH)	dos	windows	badc0re
2011-02-24	WordPress Plugin IWantOneButton 3.0.1 – Multiple Vulnerabilities	webapps	php	High-Tech Bridge SA
2011-02-24	WordPress Plugin Forum Server 1.6.5 – SQL Injection	webapps	php	High-Tech Bridge SA
2011-02-23	RedHat Linux – Stickiness of /tmp	dos	linux	Tavis Ormandy
2011-02-23	tplSoccerStats – ‘player.php’ SQL Injection	webapps	php	AtT4CKxT3rR0r1ST
2011-02-23	Hyena Cart – ‘index.php’ SQL Injection	webapps	php	AtT4CKxT3rR0r1ST
2011-02-23	Drupal Module Cumulus 5.x-1.1/6.x-1.4 – ‘tagcloud’ Cross-Site Scripting	webapps	php	MustLive
2011-02-23	WordPress Plugin YT-Audio 1.7 – ‘v’ Cross-Site Scripting	webapps	php	AutoSec Tools
2011-02-23	WordPress Plugin ComicPress Manager 1.4.9 – ‘lang’ Cross-Site Scripting	webapps	php	AutoSec Tools
2011-02-23	WordPress Plugin IGIT Posts Slider Widget 1.0 – ‘src’ Cross-Site Scripting	webapps	php	AutoSec Tools
2011-02-23	CesarFTP 0.99g – ‘MKD’ Remote Buffer Overflow (Metasploit) (2)	remote	windows	Metasploit
2011-02-23	VidiScript – SQL Injection	webapps	php	ThEtA.Nu
2011-02-23	course registration management system 2.1 – Multiple Vulnerabilities	webapps	php	AutoSec Tools
2011-02-23	WordPress Plugin Comment Rating 2.9.23 – Multiple Vulnerabilities	webapps	php	High-Tech Bridge SA
2011-02-23	ProQuiz 2.0.0b – Arbitrary File Upload	webapps	php	AutoSec Tools
2011-02-23	WordPress Plugin Z-Vote 1.1 – SQL Injection	webapps	php	High-Tech Bridge SA
2011-02-23	Bitweaver 2.8.1 – Persistent Cross-Site Scripting	webapps	php	lemlajt
2011-02-22	iOS SideBooks 1.0 – Directory Traversal	remote	ios	R3d@l3rt, Sp@2K, Sunlight
2011-02-22	iOS FtpDisc 1.0 – Directory Traversal	remote	ios	R3d@l3rt, Sp@2K, Sunlight
2011-02-22	dotProject 2.1.5 – Multiple Vulnerabilities	webapps	php	lemlajt
2011-02-22	Vanilla Forums 2.0.17.x – ‘p’ Cross-Site Scripting	webapps	php	Aung Khant
2011-02-22	Galilery 1.0 – Local File Inclusion	webapps	php	lemlajt
2011-02-22	IBM Lotus Sametime Server 8.0 – ‘stcenter.nsf’ Cross-Site Scripting	webapps	php	andrew
2011-02-22	DIY Web CMS – Multiple Vulnerabilities	webapps	asp	p0pc0rn
2011-02-22	WordPress Plugin GD Star Rating 1.9.7 – ‘wpfn’ Cross-Site Scripting	webapps	php	High-Tech Bridge SA
2011-02-22	Solar FTP Server 2.1 – Denial of Service	dos	windows	x000
2011-02-22	WinMerge 2.12.4 – Project File Handling Stack Overflow	dos	windows	LiquidWorm
2011-02-22	Battlefield 2/2142 – Packet Null Pointer Dereference Remote Denial of Service	dos	multiple	Luigi Auriemma