Exploits

日期	标题	类型	平台	作者
2010-10-28	Platinum SDK Library – POST UPnP ‘sscanf’ Buffer Overflow (PoC)	dos	multiple	n00b
2010-10-28	TFTgallery 0.13.1 – Local File Inclusion	webapps	php	Havok
2010-10-28	Linux Kernel 2.6.36 – VIDIOCSMICROCODE IOCTL Local Memory Overwrite	local	linux	Kees Cook
2010-10-28	RoSPORA 1.5.0 – Remote PHP Code Injection	webapps	php	EgiX
2010-10-28	Mozilla Firefox – Simplified Memory Corruption (PoC)	dos	multiple	extraexploit
2010-10-28	Mozilla Firefox – Interleaving ‘document.write’ / ‘appendChild’ Denial of Service	dos	multiple	Daniel Veditz
2010-10-27	DATAC RealWin SCADA Server 1.06 – Remote Buffer Overflow	remote	windows	blake
2010-10-27	DBHcms 1.1.4 – ‘dbhcms_user/SearchString’ SQL Injection	webapps	php	High-Tech Bridge SA
2010-10-27	MinaliC WebServer 1.0 – Remote Source Disclosure / File Download	remote	windows	Dr_IDE
2010-10-27	LES PACKS – ‘ID’ SQL Injection	webapps	php	Cru3l.b0y
2010-10-27	Alstrasoft e-Friends 4.96 – Multiple Vulnerabilities	webapps	php	Salvatore Fresta
2010-10-27	Joomla! Component Projects ‘com_projects’ – SQL Injection / Local File Inclusion	webapps	php	jos_ali_joe
2010-10-27	MinaliC WebServer 1.0 – Denial of Service	dos	windows	John Leitch
2010-10-27	MinaliC WebServer 1.0 – Directory Traversal	remote	windows	John Leitch
2010-10-27	BlogBird Platform – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	High-Tech Bridge SA
2010-10-27	Zomplog 3.9 – Multiple Cross-Site Scripting / Cross-Site Request Forgery Vulnerabilities	webapps	php	High-Tech Bridge SA
2010-10-27	NinkoBB 1.3RC5 – Cross-Site Scripting	webapps	php	High-Tech Bridge SA
2010-10-27	Zomplog 3.9 – Cross-Site Request Forgery	webapps	php	High-Tech Bridge SA
2010-10-27	BloofoxCMS Registration Plugin – SQL Injection	webapps	php	High-Tech Bridge SA
2010-10-27	Energine CMS – SQL Injection	webapps	php	High-Tech Bridge SA
2010-10-27	BloofoxCMS 0.3.5 – Information Disclosure	webapps	php	High-Tech Bridge SA
2010-10-27	MyBB 1.6 – Full Path Disclosure	webapps	php	High-Tech Bridge SA
2010-10-27	Novaboard 1.1.4 – Local File Inclusion	webapps	php	High-Tech Bridge SA
2010-10-27	mycart 2.0 – Multiple Vulnerabilities	webapps	php	Salvatore Fresta
2010-10-27	DZCP (deV!L`z Clanportal) 1.5.4 – Local File Inclusion	webapps	php	High-Tech Bridge SA
2010-10-27	W-Agora 4.1.5 – Local File Inclusion / Cross-Site Scripting	webapps	php	MustLive
2010-10-27	ACC IMoveis 4.0 – SQL Injection	webapps	php	EraGoN
2010-10-27	phpLiterAdmin 1.0 RC1 – Authentication Bypass	webapps	php	High-Tech Bridge SA
2010-10-26	BigACE 2.7.3 – Cross-Site Request Forgery (Change Admin Password)	webapps	php	Sweet
2010-10-26	Apache 2.2 (Windows) – Local Denial of Service	dos	windows	fb1h2s
2010-10-26	NitroSecurity ESM 8.4.0a – Remote Code Execution	remote	linux	Filip Palian
2010-10-26	NitroView ESM – ‘ess.pm’ Remote Command Execution	remote	linux	s_n
2010-10-25	Oracle VM Server Virtual Server Agent – Command Injection (Metasploit)	remote	linux	Metasploit
2010-10-25	Plesk Small Business Manager 10.2.0 and Site Editor – Multiple Vulnerabilities	webapps	php	David Hoyt
2010-10-25	Microsoft Windows Vista – ‘lpksetup.exe oci.dll’ DLL Loading Arbitrary Code Execution	remote	windows	Tyler Borland
2010-10-25	Winamp 5.5.8.2985 (in_mod plugin) – Local Stack Overflow	local	windows	Mighty-D & 7eK
2010-10-25	Jamb – Cross-Site Request Forgery (Add a Post)	webapps	php	Stoke
2010-10-24	DBHcms 1.1.4 – ‘dbhcms_pid’ SQL Injection	webapps	php	ZonTa
2010-10-24	Pulse Pro 1.4.3 – Persistent Cross-Site Scripting	webapps	php	Th3 RDX
2010-10-23	HP Data Protector Media Operations 6.11 – HTTP Server Remote Integer Overflow Denial of Service	dos	windows	d0lc3
2010-10-23	AnyDVD 6.7.1.0 – Denial of Service	dos	windows_x86	Havok
2010-10-23	RarmaRadio 2.53.1 – ‘.m3u’ Denial of Service	dos	windows	anT!-Tr0J4n
2010-10-22	IBM Tivoli Access Manager for E-Business – ‘/ibm/wpm/webseal?method’ Cross-Site Scripting	webapps	multiple	IBM
2010-10-22	IBM Tivoli Access Manager for E-Business – ‘/ibm/wpm/user?method’ Cross-Site Scripting	webapps	multiple	IBM
2010-10-22	IBM Tivoli Access Manager for E-Business – ‘/ibm/wpm/rule?method’ Cross-Site Scripting	webapps	multiple	IBM
2010-10-22	IBM Tivoli Access Manager for E-Business – ‘/ibm/wpm/pop?method’ Cross-Site Scripting	webapps	multiple	IBM
2010-10-22	IBM Tivoli Access Manager for E-Business – ‘/ibm/wpm/os?method’ Cross-Site Scripting	webapps	multiple	IBM
2010-10-22	IBM Tivoli Access Manager for E-Business – ‘/ibm/wpm/gsogroup?method’ Cross-Site Scripting	webapps	multiple	IBM
2010-10-22	IBM Tivoli Access Manager for E-Business – ‘/ibm/wpm/gso?method’ Cross-Site Scripting	webapps	multiple	IBM
2010-10-22	Simple Directory Listing 2.1 – ‘SDL2.php’ Cross-Site Scripting	webapps	php	Amol Naik