Exploits

日期	标题	类型	平台	作者
2010-12-17	Radius Manager 3.6 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Rodrigo Rubira Branco
2010-12-17	Alt-N WebAdmin 3.3.3 – Remote Source Code Information Disclosure	remote	windows	wsn1983
2010-12-16	QualDev eCommerce script – SQL Injection	webapps	php	ErrNick
2010-12-16	Adobe PDF – Embedded EXE Social Engineering (Metasploit)	local	windows	Metasploit
2010-12-16	Foxit PDF Reader 4.1.1 – Title Stack Buffer Overflow (Metasploit)	local	windows	Metasploit
2010-12-16	Aesop GIF Creator 2.1 – ‘.aep’ Local Buffer Overflow	local	windows	xsploitedsec
2010-12-16	Xion Audio Player 1.0.126 – Unicode Stack Buffer Overflow (Metasploit)	local	windows	Metasploit
2010-12-16	Adobe PDF – Escape EXE Social Engineering (No JavaScript) (Metasploit)	local	windows	Metasploit
2010-12-16	Exim4 < 4.69 - string_format Function Heap Buffer Overflow (Metasploit)	remote	linux	Metasploit
2010-12-16	Altarsoft Audio Converter 1.1 – Local Buffer Overflow (SEH)	local	windows	C4SS!0 G0M3S
2010-12-16	Solar FTP Server 2.0 – Multiple Denial of Service Vulnerabilities	dos	windows	modpr0be
2010-12-16	PHPRS – ‘model-kits.php’ SQL Injection	webapps	php	KnocKout
2010-12-16	Altap Salamander 2.5 PE Viewer – Local Buffer Overflow (Metasploit)	local	windows	Metasploit
2010-12-16	Joomla! Component JRadio – Local File Inclusion	webapps	php	Sid3^effects
2010-12-15	Blog:CMS 4.2.1 e – Multiple HTML Injections / Cross-Site Scripting	webapps	php	High-Tech Bridge SA
2010-12-15	HP Insight Diagnostics Online Edition 8.4 – ‘search.php’ Cross-Site Scripting	webapps	php	Richard Brain
2010-12-15	Microsoft Internet Explorer 8 – CSS Parser	remote	windows	Nephi Johnson
2010-12-15	IBM Tivoli Storage Manager (TSM) – Local Privilege Escalation	local	linux	Kryptos Logic
2010-12-15	gitWeb 1.7.3.3 – Cross-Site Scripting	webapps	cgi	emgent
2010-12-15	Blog:CMS 4.2.1e – Multiple Vulnerabilities	webapps	php	High-Tech Bridge SA
2010-12-15	slickMsg – Cross-Site Scripting / HTML Injection	webapps	php	Aliaksandr Hartsuyeu
2010-12-15	BEdita 3.0.1.2550 – Multiple Vulnerabilities	webapps	php	High-Tech Bridge SA
2010-12-15	Pointter PHP Micro-Blogging Social Network – Unauthorized Privilege Escalation	webapps	php	Mark Stanislav
2010-12-15	Pointter PHP Content Management System – Unauthorized Privilege Escalation	webapps	php	Mark Stanislav
2010-12-15	Race River Integard Home/Pro – LoginAdmin Password Stack Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-12-15	Easy DVD Creator – Local Crash (PoC)	dos	windows	h1ch4m
2010-12-15	Digital Audio Editor 7.6.0.237 – Local Crash (PoC)	dos	windows	h1ch4m
2010-12-15	Java – ‘Statement.invoke()’ Trusted Method Chain (Metasploit)	remote	multiple	Metasploit
2010-12-15	Google Urchin 5.7.03 – Local File Inclusion	webapps	cgi	Kristian Erik Hermansen
2010-12-15	Mantis Bug Tracker 1.2.3 – ‘db_type’ Local File Inclusion	webapps	php	LiquidWorm
2010-12-15	Mantis Bug Tracker 1.2.3 – ‘db_type’ Cross-Site Scripting / Full Path Disclosure	webapps	php	LiquidWorm
2010-12-14	BlogCFC 5.9.6.001 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Richard Brain
2010-12-14	Apache Tomcat Manager – Application Deployer (Authenticated) Code Execution (Metasploit)	remote	multiple	Metasploit
2010-12-14	Axis2 / SAP BusinessObjects – (Authenticated) Code Execution (via SOAP) (Metasploit)	remote	multiple	Metasploit
2010-12-14	Axis2 – (Authenticated) Code Execution (via REST) (Metasploit)	remote	multiple	Metasploit
2010-12-14	Microsoft Internet Explorer – DHTML Behaviour Use-After-Free (MS10-018) (Metasploit)	remote	windows	Metasploit
2010-12-14	Crystal Reports Viewer 12.0.0.549 – ‘PrintControl.dll’ ActiveX	remote	windows	Dr_IDE
2010-12-14	FontForge – ‘.BDF’ Font File Stack Buffer Overflow (PoC)	dos	linux	Ulrik Persson
2010-12-13	Joomla! Component com_redirect 1.5.19 – Local File Inclusion	webapps	php	jos_ali_joe
2010-12-13	PHP TopSites 2.1 – ‘/rate.php’ Cross-Site Scripting / SQL Injection	webapps	php	c0de Hunters
2010-12-13	Mura CMS – Multiple Cross-Site Scripting Vulnerabilities	webapps	cfm	Richard Brain
2010-12-13	Articlems 2.0 – ‘c[]’ Cross-Site Scripting	webapps	php	Packetdeath
2010-12-12	SnackAmp 3.1.3 – SMP Buffer Overflow (SEH)	local	windows	James Fitts
2010-12-12	PowerShell XP 3.0.1 – Local Buffer Overflow	local	windows	m_101
2010-12-12	Clear iSpot/Clearspot 2.0.0.0 – Cross-Site Request Forgery	webapps	hardware	Trustwave's SpiderLabs
2010-12-12	MyBB 1.4.10 – ‘tags.php’ Cross-Site Scripting	webapps	php	TEAMELITE
2010-12-11	FreeAmp 2.0.7 – ‘.m3u’ Local Buffer Overflow	local	windows	zota
2010-12-11	Exim 4.63 – Remote Command Execution	remote	linux	kingcope
2010-12-11	Cetera eCommerce – ‘banner.php’ Cross-Site Scripting	webapps	php	MustLive
2010-12-10	Joomla! Component com_mailto – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	MustLive