Exploits

日期	标题	类型	平台	作者
2011-01-16	MeshCMS 3.5 – Remote Code Execution	webapps	jsp	mr_me
2011-01-16	Advanced Webhost Billing System (AWBS) 2.9.2 – ‘oid’ SQL Injection	webapps	php	ShivX
2011-01-15	ViArt Shop 4.0.5 – Cross-Site Request Forgery	webapps	php	Or4nG.M4N
2011-01-15	CompactCMS 1.4.1 – Multiple Vulnerabilities	webapps	php	Patrick de Brouwer
2011-01-15	glfusion CMS 1.2.1 – ‘img’ Persistent Cross-Site Scripting	webapps	php	Saif
2011-01-15	eXtremeMP3 Player – Local Buffer Overflow (SEH)	local	windows	C4SS!0 G0M3S
2011-01-15	CompactCMS 1.4.1 – Multiple Cross-Site Scripting Vulnerabilities (2)	webapps	php	Patrick de Brouwer
2011-01-14	Alguest 1.1c-patched – ‘elimina’ SQL Injection	webapps	php	Aliaksandr Hartsuyeu
2011-01-14	Sielco Sistemi Winlog 2.07.00 – Stack Overflow	dos	windows	Luigi Auriemma
2011-01-14	Avira AntiVir Personal – Multiple Code Execution Vulnerabilities (2)	remote	windows	D.Elser
2011-01-14	Real Networks RealPlayer SP – ‘RecordClip’ Method Remote Code Execution	remote	windows	Sean de Regge
2011-01-14	Joomla! Component People 1.0.0 – SQL Injection	webapps	php	Salvatore Fresta
2011-01-14	Objectivity/DB – Lack of Authentication	dos	windows	Jeremy Brown
2011-01-14	CakePHP 1.3.5/1.2.8 – Cache Corruption (Metasploit)	webapps	php	Metasploit
2011-01-14	Avira AntiVir Personal – Multiple Code Execution Vulnerabilities (1)	remote	windows	D.Elser
2011-01-14	Microsoft WMI Administration Tools – ActiveX Buffer Overflow (Metasploit)	remote	windows	Metasploit
2011-01-13	SiteScape Enterprise Forum 7 – TCL Injection	webapps	cgi	Spencer McIntyre
2011-01-13	Blackmoon FTP 3.1 Build 1735/1736 – Denial of Service	dos	windows	Craig Freyman
2011-01-13	Microsoft Win32k – Keyboard Layout (MS10-073)	local	windows	Ruben Santamarta
2011-01-12	Microsoft Data Access Components – Remote Overflow (MS11-002)	remote	windows	Peter Vreugdenhil
2011-01-12	LifeType 1.2.10 – HTTP Referer Persistent Cross-Site Scripting	webapps	php	Saif El-Sherei
2011-01-12	Joomla! 1.5.22 / 1.6.0 – ‘com_mailto’ Spam Mail Relay	webapps	php	Jeff Channell
2011-01-11	Cambio 0.5a – Cross-Site Request Forgery	webapps	php	High-Tech Bridge SA
2011-01-11	CMS Tovar – ‘tovar.php’ SQL Injection	webapps	php	jos_ali_joe
2011-01-11	diafan.cms 4.3 – Multiple Vulnerabilities	webapps	php	High-Tech Bridge SA
2011-01-11	vam shop 1.6 – Multiple Vulnerabilities	webapps	php	High-Tech Bridge SA
2011-01-11	energine 2.3.8 – Multiple Vulnerabilities	webapps	php	High-Tech Bridge SA
2011-01-11	Extcalendar 2 – ‘calendar.php’ SQL Injection	webapps	php	Lagripe-Dz & Mca-Crb
2011-01-11	Microsoft RPC DCOM Interface – Remote Overflow (MS03-026) (Metasploit)	remote	windows	Metasploit
2011-01-11	Nokia MultiMedia Player 1.0 – Local Overflow (SEH Unicode)	local	windows	Carlos Mario Penagos Hollmann
2011-01-11	Mono/Moonlight Generic Type Argument – Privilege Escalation	dos	linux	Chris Howie
2011-01-11	Wireshark – ZigBee ZCL Dissector Infinite Loop Denial of Service	dos	multiple	Fred Fierling
2011-01-11	DriveCrypt 5.3 – Local Kernel Ring0 SYSTEM	local	windows	mu-b
2011-01-11	whCMS 0.115 – Cross-Site Request Forgery	webapps	php	High-Tech Bridge SA
2011-01-10	Newv SmartClient 1.1.0 – ‘NewvCommon.ocx’ ActiveX Control Multiple Vulnerabilities	remote	windows	wsn1983
2011-01-10	Solar FTP Server 2.1.1 – ‘PASV’ Remote Buffer Overflow	remote	windows	John Leitch
2011-01-10	WikLink 0.1.3 – Multiple SQL Injections	webapps	php	Aliaksandr Hartsuyeu
2011-01-10	Lotus CMS Fraise 3.0 – Local File Inclusion / Remote Code Execution	webapps	php	mr_me
2011-01-10	Microsoft Windows – Common Control Library ‘Comctl32’ Heap Overflow (MS10-081)	remote	windows	Nephi Johnson
2011-01-10	Linux Kernel (Solaris 10 / < 5.10 138888-01) - Local Privilege Escalation	local	solaris	peri.carding
2011-01-10	TinyBB 1.2 – SQL Injection	webapps	php	Aodrulez
2011-01-10	JBoss JMX – Console Beanshell Deployer WAR Upload and Deployment (Metasploit)	remote	multiple	Metasploit
2011-01-10	Maximus CMS 1.1.2 – ‘FCKeditor’ Arbitrary File Upload	webapps	php	eidelweiss
2011-01-10	Macro Express Pro 4.2.2.1 – ‘.MXE’ File Syntactic Analysis Buffer Overflow (PoC)	dos	windows	LiquidWorm
2011-01-09	ProFTPd 1.2 < 1.3.0 (Linux) - 'sreplace' Remote Buffer Overflow (Metasploit)	remote	linux	Metasploit
2011-01-09	ProFTPd 1.3.2 rc3 < 1.3.3b (Linux) - Telnet IAC Buffer Overflow (Metasploit)	remote	linux	Metasploit
2011-01-09	Joomla! Plugin Captcha 4.5.1 – Local File Disclosure	webapps	php	dun
2011-01-09	KingView 6.5.3 – SCADA HMI Heap Overflow	remote	windows	Dillon Beresford
2011-01-09	IrfanView 4.28 – Multiple Denial of Service Vulnerabilities	dos	windows	BraniX
2011-01-08	WordPress Plugin mingle forum 1.0.26 – Multiple Vulnerabilities	webapps	php	Charles Hooper