Exploits

日期	标题	类型	平台	作者
2010-11-06	phpCow 2.1 – File Inclusion	webapps	php	ViRuS_HiMa
2010-11-05	Avidemux 2.5.4 – Buffer Overflow	dos	multiple	The_UnKn@wn
2010-11-05	WinTFTP Server Pro 3.1 – Directory Traversal	remote	windows	Yakir Wizman
2010-11-05	Adobe Flash – ActionIf Integer Denial of Service	dos	windows	Matthew Bergin
2010-11-05	pfSense 2 Beta 4 – ‘graph.php’ Multiple Cross-Site Scripting Vulnerabilities	remote	php	dave b
2010-11-05	Google Android 2.0 < 2.1 - Code Execution (Reverse Shell 10.0.2.2:2222/TCP)	remote	android	MJ Keith
2010-11-05	Sami HTTP Server 2.0.1 – GET Denial of Service	dos	windows	wingthor
2010-11-05	LeadTools 11.5.0.9 – ‘ltdlg11n.ocx’ GetColorRes() Access Violation Denial of Service	dos	windows	Matthew Bergin
2010-11-05	Quick Tftp Server Pro 2.1 – Directory Traversal	remote	windows	Yakir Wizman
2010-11-05	LeadTools 11.5.0.9 – ‘ltdlg11n.ocx’ Bitmap Access Violation Denial of Service	dos	windows	Matthew Bergin
2010-11-05	MOXA MediaDBPlayback – ActiveX Control Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-11-05	LeadTools 11.5.0.9 – ‘lttmb11n.ocx’ BrowseDir() Access Violation Denial of Service	dos	windows	Matthew Bergin
2010-11-05	Joomla! 1.5.x – SQL Error Information Disclosure	webapps	php	YGN Ethical Hacker Group
2010-11-05	LeadTools 11.5.0.9 – ‘ltlst11n.ocx’ Insert() Access Violation Denial of Service	dos	windows	Matthew Bergin
2010-11-05	LeadTools 11.5.0.9 – ‘ltisi11n.ocx’ DriverName() Access Violation Denial of Service	dos	windows	Matthew Bergin
2010-11-05	PHP 5.3.3/5.2.14 – ZipArchive::getArchiveComment Null Pointer Dereference	dos	php	Maksymilian Arciemowicz
2010-11-05	Joomla! Component ccInvoices – SQL Injection	webapps	php	FL0RiX
2010-11-05	Joomla! Component AutoArticles 3000 – SQL Injection	webapps	php	jos_ali_joe
2010-11-05	FileFuzz – Denial of Service	dos	windows	Sweet
2010-11-05	Angel Learning Management System 7.3 – ‘pdaview.asp’ Cross-Site Scripting	webapps	asp	Wesley Kerfoot
2010-11-04	Microsoft Internet Explorer 6/7/8 – Memory Corruption	remote	windows	ryujin
2010-11-04	Avast! Internet Security – aswtdi.sys Local Denial of Service (PoC)	dos	windows	Nikita Tarakanov
2010-11-04	Acrobat Reader 9.4 – Memory Corruption	dos	windows	scup
2010-11-04	Microsoft Internet Explorer – Memory Corruption	dos	windows	anonymous
2010-11-04	GSPlayer 1.83a Win32 Release – Local Buffer Overflow	local	windows	moigai
2010-11-04	JBI CMS – SQL Injection	webapps	php	Cru3l.b0y
2010-11-04	MiniBB 2.5 – SQL Injection	webapps	php	High-Tech Bridge SA
2010-11-04	CA BrightStor ARCserve for Laptops & Desktops LGServer – Multiple Commands Buffer Overflows (Metasploit)	remote	windows	Metasploit
2010-11-04	JAF CMS 4.0 rc2 – Multiple Vulnerabilities	webapps	php	High-Tech Bridge SA
2010-11-04	SweetRice 0.6.7 – Multiple Vulnerabilities	webapps	php	High-Tech Bridge SA
2010-11-04	eoCMS 0.9.04 – Multiple Vulnerabilities	webapps	php	High-Tech Bridge SA
2010-11-04	HtaEdit 3.2.3.0 – ‘.hta’ Buffer Overflow	dos	windows	anT!-Tr0J4n
2010-11-03	Zen Cart 1.3.9h – Local File Inclusion	webapps	php	Salvatore Fresta
2010-11-03	CA BrightStor ARCserve for Laptops & Desktops LGServer – Remote Buffer Overflow (Metasploit) (3)	remote	windows	Metasploit
2010-11-03	Crystal Report Viewer 8.0.0.371 – ActiveX Denial of Service	dos	windows	Matthew Bergin
2010-11-03	Avira Premium Security Suite – ‘NtCreateKey’ Race Condition	dos	windows	Nikita Tarakanov
2010-11-03	CA BrightStor ARCserve for Laptops & Desktops LGServer – Remote Buffer Overflow (Metasploit) (2)	remote	windows	Metasploit
2010-11-03	MiniShare 1.5.5 – ‘users.txt’ Local Buffer Overflow (SEH)	local	windows	Muhamad Fadzil Ramli
2010-11-03	digiSHOP 2.0.2 – SQL Injection	webapps	php	Silic0n
2010-11-03	eLouai’s Force Download Script – Arbitrary Local File Download	webapps	php	v1R00Z
2010-11-03	Webster HTTP Server – GET Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-11-03	Cisco Unified Communications Manager 8.0 – Invalid Argument Privilege Escalation	local	hardware	Knud Erik Hjgaard
2010-11-03	CA BrightStor ARCserve License Service – ‘GCR NETWORK’ Remote Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-11-02	MetInfo 3.0 – ‘FCKeditor’ Arbitrary File Upload	webapps	php	[sh3n]
2010-11-02	Webmedia Explorer 6.13.1 – Persistent Cross-Site Scripting	webapps	php	High-Tech Bridge SA
2010-11-02	MemHT Portal 4.0.1 – Persistent Cross-Site Scripting	webapps	php	High-Tech Bridge SA
2010-11-02	VideoLAN VLC Media Player 1.1.x – Calling Convention Remote Buffer Overflow	remote	windows	shinnai
2010-11-02	Kandidat CMS 1.4.2 – Persistent Cross-Site Scripting	webapps	php	High-Tech Bridge SA
2010-11-02	AVG Internet Security 9.0.851 – Local Denial of Service	dos	windows	Nikita Tarakanov
2010-11-02	Rising – ‘RSNTGDI.sys’ Local Denial of Service	dos	windows	ze0r