Exploits

日期	标题	类型	平台	作者
2010-10-10	Microsoft Visio 2007 – ‘mfc80esn.dll’ DLL Loading Arbitrary Code Execution	remote	windows	Pepelux
2010-10-10	NetStumbler 0.4 – ‘mfc71esn.dll’ DLL Loading Arbitrary Code Execution	remote	windows	Pepelux
2010-10-10	IsoBuster 2.7 – ‘wnaspi32.dll’ DLL Loading Arbitrary Code Execution	remote	windows	Pepelux
2010-10-09	UFO: Alien Invasion IRC Client (OSX) – Remote Buffer Overflow (Metasploit)	remote	osx	Metasploit
2010-10-09	Apple Mac OSX EvoCam Web Server – GET Buffer Overflow (Metasploit)	remote	osx	Metasploit
2010-10-09	UFO: Alien Invasion IRC Client (Windows) – Remote Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-10-09	Apple QuickTime (Mac OSX) – RTSP Content-Type Overflow (Metasploit)	remote	osx	Metasploit
2010-10-09	VideoDB 3.0.3 – Multiple Vulnerabilities	webapps	php	Valentin
2010-10-09	Joomla! Component JS Calendar 1.5.1 – Multiple Vulnerabilities	webapps	php	Salvatore Fresta
2010-10-09	Chipmunk Pwngame – Multiple SQL Injections	webapps	php	KnocKout
2010-10-09	ClamAV Milter – Blackhole-Mode Remote Code Execution (Metasploit)	remote	linux	Metasploit
2010-10-09	hplip – ‘hpssd.py’ From Address Arbitrary Command Execution (Metasploit)	remote	linux	Metasploit
2010-10-09	Joomla! Component Community Builder Enhanced (CBE) 1.4.8/1.4.9/1.4.10 – Local File Inclusion / Remote Code Execution	webapps	php	Delf Tonder
2010-10-09	ContentKeeper Web – Remote Command Execution (Metasploit)	webapps	hardware	Metasploit
2010-10-08	OPEN IT OverLook 5 – ‘title.php’ Cross-Site Scripting	webapps	php	Anatolia Security
2010-10-08	Lantern CMS – ’11-login.asp’ Cross-Site Scripting	webapps	php	High-Tech Bridge SA
2010-10-08	Dupehunter Professional 9.0.0.3911 – ‘Fwpuclnt.dll’ DLL Loading Arbitrary Code Execution	remote	windows	anT!-Tr0J4n
2010-10-08	Flex Timesheet – Authentication Bypass	webapps	php	KnocKout
2010-10-08	xWeblog 2.2 – ‘arsiv.asp?tarih’ SQL Injection	webapps	asp	ZoRLu
2010-10-07	xWeblog 2.2 – ‘oku.asp?makale_id’ SQL Injection	webapps	asp	KnocKout
2010-10-07	Feindura File Manager 1.0(rc) – Arbitrary File Upload	webapps	php	KnocKout
2010-10-07	libc/glob(3) – Resource Exhaustion / Remote ftpd-anonymous (Denial of Service)	dos	multiple	Maksymilian Arciemowicz
2010-10-06	Backbone Technology Expression 18.9.2010 – Cross-Site Scripting	webapps	php	High-Tech Bridge SA
2010-10-06	HP Data Protector Media Operations – Null Pointer Dereference Remote Denial of Service	dos	windows_x86	d0lc3
2010-10-06	Microsoft ASP.NET – Padding Oracle (MS10-070)	remote	asp	Giorgio Fedon
2010-10-06	Adobe Acrobat and Reader – Array Indexing Remote Code Execution	dos	osx	Knud & nSense
2010-10-06	Joomla! Component Club Manager – ‘cm_id’ SQL Injection	webapps	php	FL0RiX
2010-10-06	HP-UX LPD – Command Execution (Metasploit)	remote	hp-ux	Metasploit
2010-10-05	NetTerm NetFTPD – ‘USER’ Remote Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-10-05	Ipswitch WS_FTP Server 5.03 – MKD Overflow (Metasploit)	remote	windows	Metasploit
2010-10-05	GlobalScape Secure FTP Server – Input Overflow (Metasploit)	remote	windows	Metasploit
2010-10-05	CA BrightStor ARCserve Tape Engine – 0x8A Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-10-05	Cag CMS 0.2 – Cross-Site Scripting / Blind SQL Injection	webapps	php	Shamus
2010-10-05	SPAW Editor 2.0.8.1 – Local File Inclusion	webapps	php	soorakh kos
2010-10-05	Oracle 9i XDB (Windows x86) – FTP UNLOCK Overflow (Metasploit)	remote	windows_x86	Metasploit
2010-10-05	CuteNews – ‘page’ Local File Inclusion	webapps	php	eidelweiss
2010-10-05	Alcatel-Lucent OmniPCX Enterprise – masterCGI Arbitrary Command Execution (Metasploit)	webapps	cgi	Metasploit
2010-10-05	SlimFTPd – ‘LIST’ Concatenation Overflow (Metasploit)	remote	windows	Metasploit
2010-10-05	CA BrightStor ARCserve Message Engine 0x72 – Remote Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-10-05	SquirrelMail Virtual Keyboard Plugin – ‘vkeyboard.php’ Cross-Site Scripting	webapps	php	Moritz Naumann
2010-10-05	Elxis 2009.2 rev2631 – SQL Injection	webapps	php	High-Tech Bridge SA
2010-10-05	Microsoft DirectX DirectShow – SAMI Buffer Overflow (MS07-064) (Metasploit)	remote	windows	Metasploit
2010-10-05	Microsoft Workstation Service – NetpManageIPCConnect Overflow (MS06-070) (Metasploit)	remote	windows	Metasploit
2010-10-04	ITS SCADA – ‘Username’ SQL Injection	webapps	php	Eugene Salov
2010-10-04	Savant Web Server 3.1 – Remote Overflow (Metasploit)	remote	windows	Metasploit
2010-10-04	Surgemail SurgeWeb 4.3e – Cross-Site Scripting	webapps	php	Kerem Kocaer
2010-10-04	Portili Personal and Team Wiki 1.14 – Multiple Vulnerabilities (2)	webapps	php	Abysssec
2010-10-04	Uebimiau Webmail 3.2.0-2.0 – Local File Inclusion	webapps	php	blake
2010-10-04	FreeBSD – ‘pseudofs’ Null Pointer Dereference Privilege Escalation	local	bsd	Babcia Padlina
2010-10-04	Aspect Ratio CMS – Blind SQL Injection	webapps	php	Stephan Sattler