Exploits

日期	标题	类型	平台	作者
2011-02-12	TaskFreak! 0.6.4 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	LiquidWorm
2011-02-12	Dokeos 1.8.6 2 – ‘style’ Cross-Site Scripting	webapps	php	AutoSec Tools
2011-02-11	Drupal Module CAPTCHA – Security Bypass	webapps	php	anonymous
2011-02-11	Openedit 5.1294 – Remote Code Execution	webapps	jsp	mr_me
2011-02-11	Kunena < 1.5.13 / < 1.6.3 - SQL Injection	webapps	php	Red Matter
2011-02-11	Geomi CMS 1.2/3.0 – SQL Injection	webapps	php	ThunDEr HeaD
2011-02-11	Horde – Horde_Image::factory driver Argument Local File Inclusion	webapps	php	skysbsb
2011-02-11	MoviePlay 4.82 – ‘.lst’ Local Buffer Overflow	local	windows	sickness
2011-02-10	RunCMS 2.2.2 – ‘register.php’ SQL Injection	webapps	php	High-Tech Bridge SA
2011-02-10	webERP 4.0.1 – ‘InputSerialItemsFile.php’ Arbitrary File Upload	webapps	php	AutoSec Tools
2011-02-10	Dolphin 7.0.4 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	AutoSec Tools
2011-02-10	ManageEngine ADSelfService Plus 4.4 – ‘EmployeeSearch.cc’ Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Core Security
2011-02-10	ManageEngine ADSelfService Plus 4.4 – POST Manipulation Security Question	webapps	php	Core Security
2011-02-10	LocatePC 1.05 (Ligatt Version + Others) – SQL Injection	webapps	multiple	anonymous
2011-02-10	XM Easy Personal FTP Server 5.8.0 – ‘TYPE’ Denial of Service	dos	windows	Houssam Sahli
2011-02-10	Linksys WAP610N – Root Access Security	remote	hardware	Matteo Ignaccolo
2011-02-09	WordPress Plugin Enable Media Replace – Multiple Vulnerabilities	webapps	php	Ulf Harnhammar
2011-02-09	MihanTools Script 1.3.3 – SQL Injection	webapps	php	WHITE_DEVIL
2011-02-09	xRadio 0.95b – ‘.xrl’ Local Buffer Overflow (SEH)	local	windows	b0telh0
2011-02-09	Web 2.0 Social Network Freunde Community – SQL Injection	webapps	php	NoNameMT
2011-02-09	Auto Database System 1.0 Infusion Addon – SQL Injection	webapps	php	Saif
2011-02-09	DESlock+ < 4.1.10 - 'vdlptokn.sys' Local Kernel Ring0 SYSTEM	local	windows	mu-b
2011-02-09	Multiple Vendor Calendar Manager – Remote Code Execution	remote	multiple	Rodrigo Rubira Branco
2011-02-09	Air Contacts Lite – HTTP Packet Denial of Service	dos	multiple	Rodrigo Escobar
2011-02-09	PHPXref 0.7 – ‘nav.html’ Cross-Site Scripting	webapps	php	MustLive
2011-02-09	Smarty Template Engine 2.6.9 – ‘$smarty.template’ PHP Code Injection	webapps	php	jonieske
2011-02-09	SourceBans 1.4.7 – Cross-Site Scripting	webapps	php	Sw1tCh
2011-02-09	Unreal Tournament – Remote Buffer Overflow (SEH)	remote	windows	Fulcrum
2011-02-08	Microsoft SQL Server – sp_replwritetovarbin Memory Corruption (MS09-004) (via SQL Injection) (Metasploit)	remote	windows	Metasploit
2011-02-08	ViArt Shop 4.0.5 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	High-Tech Bridge SA
2011-02-08	Microsoft Windows – CreateSizedDIBSECTION Stack Buffer Overflow (MS11-006) (Metasploit)	local	windows	Metasploit
2011-02-08	WebAsyst Shop-Script – Cross-Site Scripting / HTML Injection	webapps	php	High-Tech Bridge SA
2011-02-08	Microsoft SQL Server – Payload Execution (via SQL Injection) (Metasploit)	remote	windows	Metasploit
2011-02-08	AIOCP 1.4.001 – Cross-Site Request Forgery	webapps	php	AutoSec Tools
2011-02-08	dotProject 2.1.5 – Cross-Site Request Forgery	webapps	php	AutoSec Tools
2011-02-08	Model Agentur Script – SQL Injection	webapps	php	NoNameMT
2011-02-08	VideoLAN VLC Media Player 1.1.6 – ‘MKV’ Memory Corruption (Metasploit)	local	windows	Metasploit
2011-02-08	UMI CMS 2.8.1.2 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	High-Tech Bridge SA
2011-02-08	CiviCRM 3.3.3 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	AutoSec Tools
2011-02-08	Microsoft Internet Explorer – CSS Recursive Import Use-After-Free (MS11-003) (Metasploit)	remote	windows	Metasploit
2011-02-07	T-Content Managment System – Multiple Vulnerabilities	webapps	php	Daniel Godoy
2011-02-07	Cain & Abel 2.7.3 – ‘dagc.dll’ DLL Loading Arbitrary Code Execution	remote	windows	d3c0der
2011-02-07	Multiple Check Point Endpoint Security Products – Information Disclosure	remote	hardware	Rapid7
2011-02-07	Escortservice 1.0 – ‘custid’ SQL Injection	webapps	php	NoNameMT
2011-02-07	AoA Mp4 Converter 4.1.0 – ActiveX Stack Overflow	local	windows	Carlos Mario Penagos Hollmann
2011-02-07	AoA DVD Creator 2.5 – ActiveX Stack Overflow	local	windows	Carlos Mario Penagos Hollmann
2011-02-07	SWFupload 2.5.0 Beta 3 – Arbitrary File Upload	webapps	php	Daniel Godoy
2011-02-07	MyMarket 1.71 – ‘index.php’ SQL Injection	webapps	php	ahmadso
2011-02-07	ProFTPd – ‘mod_sftp’ Integer Overflow Denial of Service (PoC)	dos	linux	kingcope
2011-02-07	jakcms 2.0 pro rc5 – Persistent Cross-Site Scripting via useragent http header Injection	webapps	php	Saif El-Sherei