Exploits

日期	标题	类型	平台	作者
2010-10-22	Adobe Shockwave Player – rcsL Memory Corruption (Metasploit)	remote	windows	Metasploit
2010-10-22	IBM Tivoli Access Manager for E-Business – ‘/ibm/wpm/group?method’ Cross-Site Scripting	webapps	multiple	IBM
2010-10-22	IBM Tivoli Access Manager for E-Business – ‘/ibm/wpm/domain?method’ Cross-Site Scripting	webapps	multiple	IBM
2010-10-22	IBM Tivoli Access Manager for E-Business – ‘/ibm/wpm/acl?method’ Cross-Site Scripting	webapps	multiple	IBM
2010-10-22	IBM Tivoli Access Manager for E-Business – ‘/ivt/ivtserver?parm1’ Cross-Site Scripting	webapps	multiple	IBM
2010-10-22	GNU C Library 2.x (libc6) – Dynamic Linker LD_AUDIT Arbitrary DSO Load Privilege Escalation	local	linux	Tavis Ormandy
2010-10-22	W-Agora 4.2.1 – ‘search.php?bn’ Cross-Site Scripting	webapps	php	MustLive
2010-10-22	Spider Player 2.4.5 – Denial of Service	dos	windows	MOHAMED ABDI
2010-10-22	W-Agora 4.2.1 – ‘search.php3?bn’ Traversal Local File Inclusion	webapps	php	MustLive
2010-10-21	Microsoft Windows Mobile 6.1/6.5 – Double-Free Denial of Service	dos	windows	musashi karak0rsan
2010-10-21	pecio CMS 2.0.5 – ‘target’ Cross-Site Scripting	webapps	php	Antu Sanadi
2010-10-21	Adobe Shockwave Player – ‘rcsL chunk’ Memory Corruption	remote	windows	Abysssec
2010-10-21	Micro CMS 1.0 – ‘name’ HTML Injection (2)	webapps	php	SecPod Research
2010-10-21	sNews CMS – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	High-Tech Bridge SA
2010-10-21	Wiccle Web Builder 2.0 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Veerendra G.G
2010-10-21	Microsoft Windows Mobile – Overly Long vCard Name Field Denial of Service	dos	windows	SecurityArchitect.Org
2010-10-21	Altova DatabaseSpy 2011 – Project File Handling Buffer Overflow (PoC)	dos	windows	LiquidWorm
2010-10-21	Squirrelcart PRO 3.0.0 – Blind SQL Injection	webapps	php	Salvatore Fresta
2010-10-21	Sawmill Enterprise < 8.1.7.3 - Multiple Vulnerabilities	remote	multiple	SEC Consult
2010-10-20	LibSMI smiGetNode – Buffer Overflow When Long OID Is Given In Numerical Form	dos	linux	Core Security
2010-10-20	Microsoft ASP.NET – Auto-Decryptor File Download (MS10-070)	remote	windows	Agustin Azubel
2010-10-20	Oracle Sun Java System Web Server – HTTP Response Splitting	webapps	jsp	Roberto Suggi Liverani
2010-10-20	Oracle JRE – java.net.URLConnection class Same-of-Origin ‘SOP’ Policy Bypass	remote	windows	Roberto Suggi Liverani
2010-10-19	JBoss JMX – Console Deployer Upload and Execute (Metasploit)	remote	multiple	Metasploit
2010-10-19	4Site CMS 2.6 – ‘cat’ SQL Injection	webapps	php	High-Tech Bridge SA
2010-10-19	sNews 1.7 – ‘snews.php’ Cross-Site Scripting / HTML Injection	webapps	php	High-Tech Bridge SA
2010-10-19	Mozilla Firefox SeaMonkey 3.6.10 / Thunderbird 3.1.4 – ‘document.write’ Memory Corruption	remote	linux	Alexander Miller
2010-10-19	Winamp 5.5.8 (in_mod plugin) – Local Stack Overflow	local	windows	Mighty-D
2010-10-19	ALPHA Player 2.4 – ‘.bmp’ Buffer Overflow	dos	windows	anT!-Tr0J4n
2010-10-19	Linux Kernel 2.6.36-rc8 – ‘RDS Protocol’ Local Privilege Escalation	local	linux	Dan Rosenberg
2010-10-19	MASS PLAYER 2.1 – File Processing Remote Denial of Service	dos	windows	Sweet
2010-10-19	phpCheckZ 1.1.0 – Blind SQL Injection	webapps	php	Salvatore Fresta
2010-10-19	VideoLAN VLC Media Player 1.1.4 Mozilla MultiMedia Plugin – Remote Code Execution	remote	windows	shinnai
2010-10-19	PowerDVD 5.0.1107 – ‘trigger.dll’ DLL Loading Arbitrary Code Execution	remote	windows	Inj3cti0n P4ck3t
2010-10-19	Hanso Converter 1.4.0 – ‘.ogg’ Denial of Service	dos	windows	anT!-Tr0J4n
2010-10-19	Cool iPhone Ringtone Maker 2.2.3 – ‘dwmapi.dll’ DLL Loading Arbitrary Code Execution	remote	windows	anT!-Tr0J4n
2010-10-19	Event Ticket Portal Script Admin Password Change – Cross-Site Request Forgery	webapps	php	KnocKout
2010-10-19	Phoenix Project Manager 2.1.0.8 – DLL Loading Arbitrary Code Execution	remote	windows	anT!-Tr0J4n
2010-10-19	Travel Portal Script – Cross-Site Request Forgery (Admin Password Change)	webapps	php	KnocKout
2010-10-19	Novell iManager – ‘getMultiPartParameters’ Arbitrary File Upload (Metasploit)	remote	windows	Metasploit
2010-10-19	Disk Pulse Server 2.2.34 – ‘GetServerInfo’ Remote Buffer Overflow (Metasploit)	remote	windows	James Fitts
2010-10-18	411cc – Multiple SQL Injections	webapps	php	KnocKout
2010-10-18	GNU C library dynamic linker – ‘$ORIGIN’ Expansion	local	linux	Tavis Ormandy
2010-10-18	RedHat Piranha Virtual Server Package – ‘passwd.php3’ Arbitrary Command Execution (Metasploit)	webapps	php	Metasploit
2010-10-18	Fat Player 0.6b – ‘.wav’ Local Buffer Overflow (SEH)	local	windows	James Fitts
2010-10-18	Brooky CubeCart 2.0.1 – SQL Injection	webapps	php	X_AviaTique_X
2010-10-18	GeekLog 1.7.0 – ‘FCKeditor’ Arbitrary File Upload	webapps	php	Kubanezi AHG
2010-10-17	Opera 10.63 – SVG Animation Element Denial of Service	dos	multiple	fla
2010-10-17	Kisisel Radyo Script – Multiple Vulnerabilities	webapps	asp	FuRty
2010-10-17	Tastydir 1.2 (1216) – Multiple Vulnerabilities	webapps	php	R