Exploits

日期	标题	类型	平台	作者
2011-02-22	WinMerge 2.12.4 – Project File Handling Stack Overflow	dos	windows	LiquidWorm
2011-02-21	Woltlab Burning Board 2.3.6 Addon – ‘hilfsmittel.php’ SQL Injection	webapps	php	Crazyball
2011-02-21	IBM Lotus Sametime – stconf.nsf Cross-Site Scripting	remote	multiple	Dave Daly
2011-02-21	IBM Lotus Sametime – ‘/stconf.nsf/WebMessage?messageString’ Cross-Site Scripting	remote	multiple	Dave Daly
2011-02-21	Batavi 1.0 – Multiple Local File Inclusion / Cross-Site Scripting Vulnerabilities	webapps	php	AutoSec Tools
2011-02-20	JAKCMS 2.01 RC1 – Blind SQL Injection	webapps	php	mr_me
2011-02-20	JAKCMS 2.01 – Code Execution	webapps	php	mr_me
2011-02-20	Icy Phoenix 1.3.0.53a – HTTP Referer Persistent Cross-Site Scripting	webapps	php	Saif El-Sherei
2011-02-19	Independent Escort CMS – Blind SQL Injection	webapps	php	NoNameMT
2011-02-19	Escort Directory CMS – SQL Injection	webapps	php	NoNameMT
2011-02-19	eventum issue tracking system 2.3.1 – Persistent Cross-Site Scripting	webapps	php	Saif El-Sherei
2011-02-19	Avira AntiVir – ‘.QUA’ File ‘avcenter.exe’ Local Crash (PoC)	dos	windows	KedAns-Dz
2011-02-18	Novell Iprint – LPD Remote Code Execution	dos	linux	Francis Provencher
2011-02-18	WSN Guest 1.24 – ‘wsnuser’ Cookie SQL Injection	webapps	php	Aliaksandr Hartsuyeu
2011-02-18	Novell ZENworks 10/11 – TFTPD Remote Code Execution	dos	windows	Francis Provencher
2011-02-18	IBM Lotus Domino LDAP – Bind Request Remote Code Execution	dos	windows	Francis Provencher
2011-02-17	Microsoft Server Service – NetpwPathCanonicalize Overflow (MS06-040) (Metasploit)	remote	windows	Metasploit
2011-02-17	GAzie 5.10 – ‘Login’ Multiple Vulnerabilities	webapps	php	LiquidWorm
2011-02-17	PHP 5.3.5 – ‘grapheme_extract()’ Null Pointer Dereference	dos	linux	Maksymilian Arciemowicz
2011-02-17	WordPress Plugin User Photo Component – Arbitrary File Upload	webapps	php	ADVtools
2011-02-17	PHP 5.3.5 – ‘grapheme_extract()’ Null Pointer Dereference Denial of Service	dos	php	Maksymilian Arciemowicz
2011-02-17	BWMeter 5.4.0 – ‘.csv’ Denial of Service	dos	windows	b0telh0
2011-02-17	Microsoft Windows – Print Spooler Service Impersonation (MS10-061) (Metasploit)	remote	windows	Metasploit
2011-02-16	Ruby on Rails 3.0.5 – ‘WEBrick::HTTPRequest’ Module HTTP Header Injection	remote	multiple	Jimmy Bandit
2011-02-16	Rae Media Real Estate Single Agent – SQL Injection	webapps	asp	R4dc0re
2011-02-16	ActFax Server FTP 4.25 Build 0221 (2010-02-11) – (Authenticated) Remote Buffer Overflow	remote	windows	chap0
2011-02-16	ActFax Server (LPD/LPR) 4.25 Build 0221 (2010-02-11) – Remote Buffer Overflow	remote	windows	chap0
2011-02-16	mySeatXT 0.164 – ‘lang’ Local File Inclusion	webapps	php	AutoSec Tools
2011-02-16	Rae Media Real Estate Multi Agent – SQL Injection	webapps	asp	R4dc0re
2011-02-15	Photopad 1.2 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	High-Tech Bridge SA
2011-02-15	Wikipad 1.6.0 – Cross-Site Scripting / HTML Injection / Information Disclosure	webapps	php	High-Tech Bridge SA
2011-02-15	Gollos 2.8 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	High-Tech Bridge SA
2011-02-15	Seo Panel 2.2.0 – SQL Injection	webapps	php	High-Tech Bridge SA
2011-02-15	MG2 0.5.1 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	LiquidWorm
2011-02-15	AutoPlay 1.33 (autoplay.ini) – Local Buffer Overflow (SEH)	local	windows	badc0re
2011-02-15	omegabill 1.0 build 6 – Multiple Vulnerabilities	webapps	php	AutoSec Tools
2011-02-15	Lingxia I.C.E CMS – Blind SQL Injection	webapps	cfm	mr_me
2011-02-15	phpMyBitTorrent 2.0.4 – SQL Injection	webapps	php	#forkbombers
2011-02-15	Oracle 10/11g – ‘exp.exe?file’ Local Buffer Overflow	local	windows	mr_me
2011-02-15	Getsimple CMS 2.03 – ‘upload-ajax.php’ Arbitrary File Upload	webapps	php	s3rg3770 & Chuzz
2011-02-14	RunCMS 2.2.2 – Multiple Vulnerabilities	webapps	php	High-Tech Bridge SA
2011-02-14	jSchool Advanced – SQL Injection	webapps	php	eXa.DisC
2011-02-14	Microsoft Windows Server 2003 – AD BROWSER ELECTION Remote Heap Overflow	dos	windows	Cupidon-3005
2011-02-14	AWCM 2.2 Final – Persistent Cross-Site Scripting	webapps	php	_84kur10_
2011-02-12	TaskFreak! 0.6.4 – ‘index.php’ Multiple Cross-Site Scripting Vulnerabilities	webapps	php	LiquidWorm
2011-02-12	TaskFreak! 0.6.4 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	LiquidWorm
2011-02-12	Dokeos 1.8.6 2 – ‘style’ Cross-Site Scripting	webapps	php	AutoSec Tools
2011-02-12	CuteZip 2.1 – Local Buffer Overflow	local	windows	C4SS!0 G0M3S
2011-02-12	TaskFreak! 0.6.4 – ‘rss.php’ HTTP Referer Header Cross-Site Scripting	webapps	php	LiquidWorm
2011-02-12	PixelPost 1.7.3 – Multiple POST SQL Injections	webapps	php	LiquidWorm