Exploits

日期	标题	类型	平台	作者
2010-10-04	Research In Motion BlackBerry Device Software 4.7.1 – Cross Domain Information Disclosure	remote	hardware	599eme Man
2010-10-04	Cilem Haber 1.4.4 (Tr) – Database Disclosure	webapps	asp	ZoRLu
2010-10-04	ITS SCADA – ‘Username’ SQL Injection	webapps	php	Eugene Salov
2010-10-04	Savant Web Server 3.1 – Remote Overflow (Metasploit)	remote	windows	Metasploit
2010-10-04	Surgemail SurgeWeb 4.3e – Cross-Site Scripting	webapps	php	Kerem Kocaer
2010-10-04	Portili Personal and Team Wiki 1.14 – Multiple Vulnerabilities (2)	webapps	php	Abysssec
2010-10-03	Hanso Player 1.3.0 – ‘.m3u’ Denial of Service	dos	windows	xsploited security
2010-10-03	Aprox CMS Engine 6.0 – Multiple Vulnerabilities	webapps	php	Stephan Sattler
2010-10-03	TinyMCE MCFileManager 2.1.2 – Arbitrary File Upload	webapps	php	Hackeri-AL
2010-10-02	TradeMC E-Ticaret – SQL Injection / Cross-Site Scripting	webapps	asp	KnocKout
2010-10-02	SmarterMail < 7.2.3925 - LDAP Injection	webapps	asp	sqlhacker
2010-10-02	iOS FileApp < 2.0 - FTP Remote Denial of Service	dos	ios	m0ebiusc0de
2010-10-02	iOS FileApp < 2.0 - Directory Traversal	remote	ios	m0ebiusc0de
2010-10-02	SmarterMail < 7.2.3925 - Persistent Cross-Site Scripting	webapps	asp	sqlhacker
2010-10-02	AudioTran 1.4.2.4 – SafeSEH + SEHOP	local	windows	x90c
2010-10-02	Bka Haber 1.0 (Tr) – File Disclosure	webapps	asp	ZoRLu
2010-10-01	Zen Cart 1.3.9f – ‘typefilter’ Local File Inclusion	webapps	php	LiquidWorm
2010-10-01	zen cart 1.3.9f – Multiple Vulnerabilities	webapps	php	LiquidWorm
2010-10-01	Intellicom Netbiter webSCADA Products – ‘read.cgi’ Multiple Remote Security Vulnerabilities	webapps	cgi	Eugene Salov
2010-10-01	iGaming CMS 1.5 – Blind SQL Injection	webapps	php	plucky
2010-10-01	Chipmunk Board 1.3 – ‘index.php?forumID’ SQL Injection	webapps	php	Shamus
2010-10-01	Tiki Wiki CMS Groupware 5.2 – Multiple Vulnerabilities	webapps	php	John Leitch
2010-10-01	phpMyShopping 1.0.1505 – Multiple Vulnerabilities	webapps	php	Metropolis
2010-10-01	jCart 1.1 – Multiple Cross-Site Scripting / Cross-Site Request Forgery/Open Redirect Vulnerabilities	webapps	php	p0deje
2010-10-01	Evaria Content Management System 1.1 – File Disclosure	webapps	php	khayeye shotor
2010-10-01	Trend Micro Internet Security Pro 2010 – ActiveX ‘extSetOwner()’ Remote Code Execution (Metasploit)	remote	windows	Trancer
2010-10-01	Microsoft IIS 6.0 – ASP Stack Overflow Stack Exhaustion (Denial of Service) (MS10-065)	dos	windows	kingcope
2010-09-30	JomSocial 1.8.8 – Arbitrary File Upload	webapps	php	Jeff Channell
2010-09-30	Joomla! Component JE Directory 1.0 – SQL Injection	webapps	php	Easy Laster
2010-09-30	Joomla! Component JE Job – SQL Injection	webapps	php	Easy Laster
2010-09-30	ASPMass Shopping Cart – Arbitrary File Upload / Cross-Site Request Forgery	webapps	asp	Abysssec
2010-09-30	Microsoft Unicode Scripts Processor – Remote Code Execution (MS10-063)	dos	windows	Abysssec
2010-09-30	Joomla! Component JE Guestbook 1.0 – Multiple Vulnerabilities	webapps	php	Salvatore Fresta
2010-09-29	Getsimple CMS 2.01 – ‘changedata.php’ Cross-Site Scripting	webapps	php	High-Tech Bridge SA
2010-09-29	Pluck CMS 4.6.3 – ‘cont1’ HTML Injection	webapps	php	High-Tech Bridge SA
2010-09-29	MODx 2.0.2-pl – ‘/manager/index.php?modahsh’ Cross-Site Scripting	webapps	php	John Leitch
2010-09-29	MODx manager – ‘/controllers/default/resource/tvs.php?class_key’ Traversal Local File Inclusion	webapps	php	John Leitch
2010-09-29	Quick Player 1.3 – Unicode (SEH)	local	windows	Abhishek Lyall
2010-09-29	XFS – Deleted Inode Local Information Disclosure	local	linux	Red Hat
2010-09-29	MyPhpAuction 2010 – ‘id’ SQL Injection	webapps	php	h4ck3r
2010-09-29	Webspell 4.x – safe_query Bypass	webapps	php	silent vapor
2010-09-29	Webspell wCMS-Clanscript4.01.02net – static Blind SQL Injection	webapps	php	Easy Laster
2010-09-29	Webspell 4.2.1 – ‘asearch.php’ SQL Injection	webapps	php	silent vapor
2010-09-29	Linux Kernel < 2.6.36-rc6 (RedHat / Ubuntu 10.04) - 'pktcdvd' Kernel Memory Disclosure	local	linux	Jon Oberheide
2010-09-29	Microsoft Excel – SxView Record Parsing Heap Memory Corruption	dos	windows	Abysssec
2010-09-28	Micro CMS 1.0 b1 – Persistent Cross-Site Scripting	webapps	php	SecPod Research
2010-09-28	Achievo 1.4.3 – Cross-Site Request Forgery	webapps	php	Pablo Milano
2010-09-28	Achievo 1.4.3 – Multiple Authorisation Vulnerabilities	webapps	php	Pablo Milano
2010-09-28	Microsoft DNS RPC Service – ‘extractQuotedChar()’ Remote Overflow ‘SMB’ (MS07-029) (Metasploit)	remote	windows	Metasploit
2010-09-28	Aleza Portal 1.6 – Insecure SQL Injection / Cookie Handling	webapps	windows	KnocKout