Exploits

日期	标题	类型	平台	作者
2010-11-20	Microsoft Windows – Task Scheduler Privilege Escalation	local	windows	webDEViL
2010-11-20	S_CMS 2.5 – Multiple Vulnerabilities	webapps	php	LordTittiS
2010-11-20	Joomla! Component Jimtawl 1.0.2 – Local File Inclusion	webapps	php	Mask_magicianz
2010-11-20	Native Instruments Service Center 2.2.5 – Local Privilege Escalation	local	windows	LiquidWorm
2010-11-20	Native Instruments Massive 1.1.4 – KSD File Handling Use-After-Free	dos	windows	LiquidWorm
2010-11-20	Native Instruments Kontakt 4 Player – ‘.NKI’ File Syntactic Analysis Buffer Overflow (PoC)	dos	windows	LiquidWorm
2010-11-20	Native Instruments Reaktor 5 Player 5.5.1 – Heap Memory Corruption	dos	windows	LiquidWorm
2010-11-20	Native Instruments Traktor Pro 1.2.6 – Stack Buffer Overflow (PoC)	dos	windows	LiquidWorm
2010-11-19	Native Instruments (Multiple Products) – DLL Loading Arbitrary Code Execution	remote	windows	Gjoko Krstic
2010-11-19	Arabian YouTube Script – Blind SQL Injection	webapps	php	R3d-D3V!L
2010-11-19	PHPGallery 1.1.0 – Cross-Site Request Forgery	webapps	php	Or4nG.M4N
2010-11-19	ViArt Shop 4.0.5 – Multiple Vulnerabilities	webapps	php	Ariko-Security
2010-11-19	DVD Rental Software – SQL Injection	webapps	php	JaMbA
2010-11-19	Plogger Gallery 1.0 – Cross-Site Request Forgery (Change Admin Password)	webapps	php	Or4nG.M4N
2010-11-19	MiniShare 1.5.5 – ‘users.txt’ Local Buffer Overflow (Egghunter)	local	windows	0v3r
2010-11-18	WebKit – Insufficient Entropy Random Number Generator (2)	remote	windows	Amit Klein
2010-11-18	WebKit – Insufficient Entropy Random Number Generator (1)	remote	windows	Amit Klein
2010-11-18	CompactCMS 1.4.1 – Multiple Cross-Site Scripting Vulnerabilities (1)	webapps	php	High-Tech Bridge SA
2010-11-18	Fozzcom Shopping < 7.94 / < 8.04 - Multiple Vulnerabilities	webapps	php	Dr.0rYX & Cr3W-DZ
2010-11-18	Joomla! Component com_mtree 2.1.6 – Overwrite Cross-Site Request Forgery	webapps	php	jdc
2010-11-18	MP3-Nator – Local Buffer Overflow (SEH) (DEP Bypass)	local	windows	Muhamad Fadzil Ramli
2010-11-18	chCounter 3.1.3 – SQL Injection	webapps	php	Matias Fontanini
2010-11-18	WebRCSdiff 0.9 – ‘viewver.php’ Remote File Inclusion	webapps	php	FL0RiX
2010-11-18	DIZzy 1.12 – Local Stack Overflow	local	windows	g30rg3_x
2010-11-17	Trend Micro Internet Security 2010 – ‘UfPBCtrl.DLL’ ActiveX Remote Command Execution	remote	windows	Dr_IDE
2010-11-17	SAP NetWeaver 7.0 – SQL Monitor Multiple Cross-Site Scripting Vulnerabilities	remote	windows	a.polyakov
2010-11-17	Front Accounting 2.3RC2 – Multiple SQL Injections	webapps	php	Juan Manuel Garcia
2010-11-17	Front Accounting 2.3RC2 – Multiple Persistent Cross-Site Scripting Vulnerabilities	webapps	php	Juan Manuel Garcia
2010-11-17	Sitefinity CMS – ‘ASP.NET’ Arbitrary File Upload	webapps	asp	Net.Edit0r
2010-11-16	openEngine 2.0 100226 – Local File Inclusion / Cross-Site Scripting	webapps	php	SecPod Research
2010-11-16	Joomla! Component com_maianmedia – SQL Injection	webapps	php	v3n0m
2010-11-16	BPRealestate Real Estate – Authentication Bypass	webapps	asp	v3n0m
2010-11-16	BPConferenceReporting Web Reporting – Authentication Bypass	webapps	asp	v3n0m
2010-11-16	BPDirectory Business Directory – Authentication Bypass	webapps	asp	v3n0m
2010-11-16	BPAffiliate Affiliate Tracking – Authentication Bypass	webapps	asp	v3n0m
2010-11-16	vBulletin 4.0.8 – Persistent Cross-Site Scripting via Profile Customization	webapps	php	MaXe
2010-11-16	Eclipse 3.6.1 – Help Server ‘help/advanced/content.jsp’ Cross-Site Scripting	remote	linux	Aung Khant
2010-11-16	Eclipse 3.6.1 – Help Server ‘help/index.jsp’ Cross-Site Scripting	remote	linux	Aung Khant
2010-11-16	DServe – Multiple Cross-Site Scripting Vulnerabilities	remote	windows	Axiell
2010-11-16	Raised Eyebrow CMS – ‘venue.php’ SQL Injection	webapps	php	Cru3l.b0y
2010-11-16	Simea CMS – ‘index.php’ SQL Injection	webapps	php	Cru3l.b0y
2010-11-16	CompactCMS 1.4.1 – SQL Injection	webapps	php	High-Tech Bridge SA
2010-11-16	ClanSphere 2010.0 Final – Multiple Vulnerabilities	webapps	php	High-Tech Bridge SA
2010-11-16	IceBB 1.0-rc10 – Multiple Vulnerabilities	webapps	php	High-Tech Bridge SA
2010-11-16	Apple Safari 5.02 – Stack Overflow Denial of Service	dos	multiple	clshack
2010-11-15	Joomla! Component com_alfurqan15x – SQL Injection	webapps	php	kaMtiEz
2010-11-15	Google Android 2.0/2.1 – Use-After-Free Remote Code Execution on Webkit	remote	android	Itzhak Avraham
2010-11-15	Nuked-klaN Module Boutique – Blind SQL Injection	webapps	php	[AR51]Kevinos
2010-11-15	Web Wiz NewsPad Express Edition 1.03 – Database File Disclosure	webapps	asp	keracker
2010-11-15	Chameleon Social Networking Software – Persistent Cross-Site Scripting	webapps	php	Dr-mosta