Exploits

日期	标题	类型	平台	作者
2010-12-21	S9Y Serendipity 1.5.4 – Arbitrary File Upload	webapps	php	pentesters.ir
2010-12-21	Habari 0.6.5 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	High-Tech Bridge SA
2010-12-21	OpenFiler – ‘device’ Cross-Site Scripting	webapps	php	db.pub.mail
2010-12-21	FreeNAS 0.7.2.5543 – ‘index.php’ Multiple Cross-Site Scripting Vulnerabilities	webapps	php	db.pub.mail
2010-12-21	MHonArc 2.6.16 – Tag Nesting Remote Denial of Service	dos	linux	anonymous
2010-12-21	Microsoft SQL Server – Payload Execution (Metasploit)	remote	windows	Metasploit
2010-12-21	jobappr 1.4 – Multiple Vulnerabilities	webapps	php	giudinvx
2010-12-21	Microsoft IIS 7.5 (Windows 7) – FTPSVC Unauthorized Remote Denial of Service (PoC)	dos	windows	Matthew Bergin
2010-12-20	Accmeware MP3 Joiner Pro 5.0.9 – Denial of Service (PoC)	dos	windows	0v3r
2010-12-20	MP3 CD Converter Professional – Local Buffer Overflow (SEH)	local	windows	C4SS!0 G0M3S
2010-12-20	Elcom CommunityManager.NET – Authentication Bypass	webapps	asp	Sense of Security
2010-12-20	PHP-Nuke MaticMarket 2.02 – Local File Inclusion	webapps	php	xer0x
2010-12-20	Word Splash Pro 9.5 – Local Buffer Overflow	local	windows	h1ch4m
2010-12-20	Inout Webmail Script – Persistent Cross-Site Scripting	webapps	php	Sid3^effects
2010-12-20	Apple iOS Safari – ‘decodeURI’ Remote Crash	dos	hardware	Yakir Wizman
2010-12-20	Vacation Rental Script 4.0 – Arbitrary File Upload	webapps	php	Br0ly
2010-12-20	Apple iOS Safari – body alink Remote Crash	dos	hardware	Yakir Wizman
2010-12-20	Joomla! Component JotLoader 2.2.1 – Local File Inclusion	webapps	php	v3n0m
2010-12-20	Mafya Oyun Scrpti – ‘profil.php’ SQL Injection	webapps	php	DeadLy DeMon
2010-12-20	PHP Web Scripts Ad Manager Pro 3.0 – SQL Injection	webapps	php	R4dc0re
2010-12-20	Social Share – ‘postid’ SQL Injection	webapps	php	Aliaksandr Hartsuyeu
2010-12-20	plx Ad Trader 3.2 – Authentication Bypass	webapps	php	R4dc0re
2010-12-20	Accmeware MP3 Cut 5.0.9 – Denial of Service (PoC)	dos	windows	0v3r
2010-12-20	Accmeware MP3 Speed 5.0.9 – Denial of Service (PoC)	dos	windows	0v3r
2010-12-19	Joomla! Component JE Auto – Local File Inclusion	webapps	php	Sid3^effects
2010-12-19	Oto Galery 1.0 – Multiple SQL Injections	webapps	asp	DeadLy DeMon
2010-12-19	Redmine SCM Repository – Arbitrary Command Execution (Metasploit)	remote	linux	Metasploit
2010-12-18	MCFileManager Plugin for TinyMCE 3.2.2.3 – Arbitrary File Upload	webapps	php	Vladimir Vorontsov
2010-12-18	Ecava IntegraXor Remote – ActiveX Buffer Overflow (PoC)	dos	windows	Jeremy Brown
2010-12-18	Virtual Store Open 3.0 – Acess SQL Injection	webapps	asp	Br0ly
2010-12-18	Mafia Game Script – SQL Injection	webapps	php	DeadLy DeMon
2010-12-18	Linux Kernel < 2.6.37-rc2 - 'ACPI custom_method' Local Privilege Escalation	local	linux	Jon Oberheide
2010-12-18	Projekt Shop – ‘details.php’ Multiple SQL Injections	webapps	php	DeadLy DeMon
2010-12-18	PayPal Shop Digital – SQL Injection	webapps	php	DeadLy DeMon
2010-12-18	SchuldnerBeratung – SQL Injection	webapps	php	DeadLy DeMon
2010-12-18	Download Center 2.2 – SQL Injection	webapps	php	DeadLy DeMon
2010-12-18	Ero Auktion 2010 – ‘item.php’ SQL Injection	webapps	php	DeadLy DeMon
2010-12-17	Radius Manager 3.8.0 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Rodrigo Rubira Branco
2010-12-17	CubeCart 3.x – Arbitrary File Upload	webapps	php	StunTMaN!
2010-12-17	ViRobot Desktop 5.5 and Server 3.5 < 2008.8.1.1 - Local Privilege Escalation	local	windows	MJ0011
2010-12-17	ESTsoft ALYac Anti-Virus 1.5 < 5.0.1.2 - Local Privilege Escalation	local	windows	MJ0011
2010-12-17	NProtect Anti-Virus 2007 < 2010.5.11.1 - Local Privilege Escalation	local	windows	MJ0011
2010-12-17	AhnLab V3 Internet Security 8.0 < 1.2.0.4 - Local Privilege Escalation	local	windows	MJ0011
2010-12-17	Microsoft Windows – Win32k Pointer Dereferencement (PoC) (MS10-098)	dos	windows_x86	Stefan LE BERRE
2010-12-17	MHP Downloadshop – SQL Injection	webapps	php	Easy Laster
2010-12-17	Easy Online Shop – SQL Injection	webapps	php	Easy Laster
2010-12-17	Immo Makler Script – SQL Injection	webapps	php	Easy Laster
2010-12-17	D-Link DIR-300 – Cross-Site Request Forgery (Change Admin Account Settings)	webapps	hardware	outlaw.dll
2010-12-17	Softbiz PHP Joke Site Software – Multiple SQL Injections	webapps	php	v3n0m
2010-12-17	Social Share – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Aliaksandr Hartsuyeu