Exploits

日期	标题	类型	平台	作者
2010-12-01	J-Integra 2.11 – ActiveX SetIdentity() Buffer Overflow	remote	windows	Dr_IDE
2010-12-01	Digitalus 1.10.0 Alpha2 – Arbitrary File Upload	webapps	php	eidelweiss
2010-11-30	Orbis CMS 1.0.2 – Arbitrary File Upload	webapps	php	Mark Stanislav
2010-11-30	Provj 5.1.5.5 – ‘.m3u’ Buffer Overflow (PoC)	dos	windows	0v3r
2010-11-30	Joomla! Component com_storedirectory – ‘id’ SQL Injection	webapps	php	XroGuE
2010-11-30	DATAC RealWin SCADA Server 2.0 (Build 6.1.8.10) – SCPC_INITIALIZE_RF Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-11-30	DATAC RealWin SCADA Server 2.0 (Build 6.1.8.10) – SCPC_INITIALIZE Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-11-30	Joomla! Component Catalogue – SQL Injection / Local File Inclusion	webapps	php	XroGuE
2010-11-30	Elxis CMS 2009.2 – SQL Injection	webapps	php	High-Tech Bridge SA
2010-11-30	DynPG 4.2.0 – Multiple Vulnerabilities	webapps	php	High-Tech Bridge SA
2010-11-30	enano CMS 1.1.7pl1 – Multiple Vulnerabilities	webapps	php	High-Tech Bridge SA
2010-11-30	Eclime 1.1.2b – Multiple Vulnerabilities	webapps	php	High-Tech Bridge SA
2010-11-30	Pandora Fms 3.1 – Directory Traversal / Local File Inclusion	webapps	php	Juan Galiana Lara
2010-11-30	POP Peeper 3.4 – UIDL Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-11-30	WU-FTPD – Site EXEC/INDEX Format String (Metasploit)	remote	linux	Metasploit
2010-11-30	Pandora Fms 3.1 – Blind SQL Injection	webapps	php	Juan Galiana Lara
2010-11-30	AWStats 6.x – Apache Tomcat Configuration File Arbitrary Command Execution	webapps	cgi	StenoPlasma
2010-11-30	Pandora Fms 3.1 – SQL Injection	webapps	php	Juan Galiana Lara
2010-11-30	SAP Business One License Manager 2005 – Remote Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-11-30	Pandora Fms 3.1 – OS Command Injection	webapps	php	Juan Galiana Lara
2010-11-30	Pandora FMS 3.1 – Authentication Bypass	webapps	php	Juan Galiana Lara
2010-11-30	Duhok Forum 1.1 – Arbitrary File Upload	webapps	php	BrOx-Dz
2010-11-30	BugTracker.NET 3.4.4 – SQL Injection / Cross-Site Scripting	webapps	asp	BugTracker.NET
2010-11-30	Link Protect 1.2 – Persistent Cross-Site Scripting	webapps	php	Shichemt Alen
2010-11-29	Diferior 8.03 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	High-Tech Bridge SA
2010-11-29	Car Portal 2.0 – ‘car_make’ Cross-Site Scripting	webapps	php	Underground Stockholm
2010-11-29	FoxPlayer 2.4.0 – Denial of Service	dos	windows	Oh Yaw Theng
2010-11-29	HP LaserJet – Directory Traversal in PJL Interface	remote	hardware	n.runs AG
2010-11-29	Wernhart Guestbook 2001.03.28 – Multiple SQL Injections	webapps	php	Aliaksandr Hartsuyeu
2010-11-29	Mediacoder 0.7.5.4792 – Local Buffer Overflow (SEH)	local	windows	0v3r
2010-11-29	4homepages 4Images 1.7.x – ‘categories.php’ SQL Injection	webapps	php	Ahmed Atif
2010-11-29	MicroNetSoft RV Dealer Website – ‘search.asp’ / showAlllistings.asp’ SQL Injection	webapps	asp	underground-stockholm.com
2010-11-28	Hanso Player 1.4.0 – ‘.m3u’ Denial of Service	dos	windows	anT!-Tr0J4n
2010-11-28	Site2Nite Big Truck Broker – ‘txtSiteId’ SQL Injection	webapps	asp	underground-stockholm.com
2010-11-28	OtsTurntables 1.00.048 – ‘.m3u’/’.ofl’ Local Buffer Overflow (SEH)	local	windows	0v3r
2010-11-28	Skeletonz CMS – Persistent Cross-Site Scripting	webapps	cgi	Jbyte
2010-11-28	CA Internet Security Suite 2010 – ‘KmxSbx.sys’ Kernel Pool Overflow	local	windows	Nikita Tarakanov
2010-11-27	MemHT Portal 4.0.1 – ‘User Agent’ Persistent Cross-Site Scripting	webapps	php	ZonTa
2010-11-27	Linux Kernel 2.6.37 – Unix Sockets Local Denial of Service	dos	linux	Key Night
2010-11-27	Jurpopage 0.2.0 – SQL Injection	webapps	php	Sudden_death
2010-11-26	SmartBox – ‘page_id’ SQL Injection	webapps	php	KnocKout
2010-11-26	Linux Kernel 2.6.37 – ‘setup_arg_pages()’ Denial of Service	dos	linux	Roland McGrath
2010-11-26	E-lokaler CMS 2 – Admin Login Multiple SQL Injections	webapps	php	ali_err0r
2010-11-26	Easy Banner 2009.05.18 – ‘index.php’ Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Aliaksandr Hartsuyeu
2010-11-26	Easy Banner 2009.05.18 – ‘/member.php’ Multiple SQL Injection / Authentication Bypass	webapps	php	Aliaksandr Hartsuyeu
2010-11-26	SystemTap – Local Privilege Escalation	local	linux	Tavis Ormandy
2010-11-25	VMware 2 Web Server – Directory Traversal	remote	multiple	clshack
2010-11-25	Frog CMS 0.9.5 – Multiple Vulnerabilities	webapps	php	High-Tech Bridge SA
2010-11-25	Wolf CMS 0.6.0b – Multiple Vulnerabilities	webapps	php	High-Tech Bridge SA
2010-11-25	NCH Officeintercom 5.20 – Remote Denial of Service	dos	windows	xsploited security