Exploits

日期	标题	类型	平台	作者
2010-12-27	Sigma Portal – ‘ShowObjectPicture.aspx’ Denial of Service	dos	asp	Pouya Daneshmand
2010-12-27	Web@all 1.1 – Remote Admin Settings Change	webapps	php	Giuseppe D'Inverno
2010-12-27	OpenEMR 3.2.0 – SQL Injection / Cross-Site Scripting	webapps	php	blake
2010-12-26	Kolibri 2.0 – ‘HEAD’ Remote Buffer Overflow RET (SEH)	remote	windows	TheLeader
2010-12-26	Interact 2.4.1 – SQL Injection	webapps	php	IR Security
2010-12-26	CruxCMS 3.0 – Multiple Input Validation Vulnerabilities	webapps	php	ToXiC
2010-12-25	NIPrint LPD – Request Overflow (Metasploit)	remote	windows	Metasploit
2010-12-25	LoveCMS 1.6.2 Final – Multiple Local File Inclusions	webapps	php	cOndemned
2010-12-25	Social Engine 4.x (Music Plugin) – Arbitrary File Upload	webapps	php	MyDoom
2010-12-25	Vacation Rental Script 4.0 – Cross-Site Request Forgery	webapps	php	OnurTURKESHAN
2010-12-25	Joomla! Component com_idoblog – SQL Injection	webapps	php	NOCKAR1111
2010-12-25	Traidnt Up 3.0 – Cross-Site Request Forgery	webapps	php	P0C T34M
2010-12-25	openauto 1.6.3 – Multiple Vulnerabilities	webapps	php	Michael Brooks
2010-12-25	Pligg CMS 1.1.2 – Blind SQL Injection / Cross-Site Scripting	webapps	php	Michael Brooks
2010-12-24	IBM Tivoli Access Manager 6.1.1 for E-Business – Directory Traversal	remote	linux	anonymous
2010-12-24	CubeCart 3.0.6 – Cross-Site Request Forgery (Add Admin)	webapps	php	P0C T34M
2010-12-24	HttpBlitz Web Server – Denial of Service	dos	windows	otoy
2010-12-24	SquareCMS 0.3.1 – ‘post.php’ SQL Injection	webapps	php	cOndemned
2010-12-24	Joomla! Component com_xmovie 1.0 – Local File Inclusion	webapps	php	KelvinX
2010-12-24	iDevSpot iDevCart 1.10 – Multiple Local File Inclusions	webapps	php	v3n0m
2010-12-23	Joomla! Component com_adsmanager – Remote File Inclusion	webapps	php	AtT4CKxT3rR0r1ST
2010-12-23	Joomla! Component com_ponygallery – Remote File Inclusion	webapps	php	AtT4CKxT3rR0r1ST
2010-12-23	IPN Development Handler 2.0 – Multiple Vulnerabilities	webapps	php	AtT4CKxT3rR0r1ST
2010-12-23	Ypninc Realty Classifieds – SQL Injection	webapps	php	Br0ly
2010-12-23	Appweb Web Server 3.2.2-1 – Cross-Site Scripting	remote	multiple	Gjoko Krstic
2010-12-23	Built2Go PHP Shopping – SQL Injection	webapps	php	Br0ly
2010-12-23	D-Link WBR-1310 – Authentication Bypass	webapps	hardware	Craig Heffner
2010-12-23	Social Share – ‘search’ Cross-Site Scripting	webapps	php	Aliaksandr Hartsuyeu
2010-12-23	MyBB 1.6 – ‘private.php?keywords’ SQL Injection	webapps	php	Aung Khant
2010-12-23	MyBB 1.6 – ‘search.php?keywords’ SQL Injection	webapps	php	Aung Khant
2010-12-23	CubeCart 3.0.4 – SQL Injection	webapps	php	Dr.NeT
2010-12-22	Microsoft WMITools – ActiveX Remote Command Execution	remote	windows	WooYun
2010-12-22	WordPress Plugin Accept Signups 0.1 – Cross-Site Scripting	webapps	php	clshack
2010-12-22	Mitel AWC – Command Execution	webapps	cgi	Procheckup
2010-12-22	Citrix Access Gateway – Command Injection	remote	linux	George D. Gal
2010-12-22	Apple iOS Safari – ‘JS .’ Remote Crash	dos	hardware	Yakir Wizman
2010-12-22	WordPress Plugin Accept Signups 0.1 – ’email’ Cross-Site Scripting	webapps	php	clshack
2010-12-22	Joomla! Component Classified – SQL Injection	webapps	php	R4dc0re
2010-12-21	Social Share – ‘Username’ SQL Injection	webapps	php	Aliaksandr Hartsuyeu
2010-12-21	Habari Blog – Multiple Vulnerabilities	webapps	php	High-Tech Bridge SA
2010-12-21	Calibre 0.7.34 – Cross-Site Scripting / Directory Traversal	remote	windows	waraxe
2010-12-21	Injader CMS – Multiple Vulnerabilities	webapps	php	High-Tech Bridge SA
2010-12-21	Hycus CMS – Multiple Vulnerabilities	webapps	php	High-Tech Bridge SA
2010-12-21	Apple iOS Safari – ‘decodeURIComponent’ Remote Crash	dos	hardware	Yakir Wizman
2010-12-21	S9Y Serendipity 1.5.4 – Arbitrary File Upload	webapps	php	pentesters.ir
2010-12-21	Habari 0.6.5 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	High-Tech Bridge SA
2010-12-21	OpenFiler – ‘device’ Cross-Site Scripting	webapps	php	db.pub.mail
2010-12-21	FreeNAS 0.7.2.5543 – ‘index.php’ Multiple Cross-Site Scripting Vulnerabilities	webapps	php	db.pub.mail
2010-12-21	MHonArc 2.6.16 – Tag Nesting Remote Denial of Service	dos	linux	anonymous
2010-12-21	Microsoft SQL Server – Payload Execution (Metasploit)	remote	windows	Metasploit