Exploits

日期	标题	类型	平台	作者
2010-09-28	e107 0.7.23 – SQL Injection	webapps	php	High-Tech Bridge SA
2010-09-28	JE CMS 1.0.0 – Authentication Bypass	webapps	php	Abysssec
2010-09-28	PHPMyFAQ 2.6.x – ‘index.php’ Cross-Site Scripting	webapps	php	Yam Mesicka
2010-09-28	AtomatiCMS – Upload Arbitrary File	webapps	asp	Abysssec
2010-09-28	Micro CMS 1.0 – ‘name’ HTML Injection (1)	webapps	php	Veerendra G.G
2010-09-28	Microsoft Internet Explorer – ‘Winhlp32.exe’ MsgBox Code Execution (MS10-023) (Metasploit)	remote	windows	Metasploit
2010-09-27	Microsoft Internet Explorer – MSHTML Findtext Processing	dos	windows	Abysssec
2010-09-27	Java – RMIConnectionImpl Deserialization Privilege Escalation (Metasploit)	remote	multiple	Metasploit
2010-09-27	pbboard 2.1.1 – Multiple Vulnerabilities	webapps	php	JIKO
2010-09-27	Car Portal 2.0 – Blind SQL Injection	webapps	php	**RoAd_KiLlEr**
2010-09-27	NetArt Media Car Portal 2.0 – ‘car’ SQL Injection	webapps	php	RoAd_KiLlEr
2010-09-27	Digital Music Pad 8.2.3.3.4 – Local Overflow (SEH) (Metasploit)	local	windows	Abhishek Lyall
2010-09-27	iworkstation 9.3.2.1.4 – Local Overflow (SEH)	local	windows	sanjeev gupta
2010-09-27	Fox Audio Player 0.8.0 – ‘.m3u’ Denial of Service	dos	windows	4n0nym0us
2010-09-27	Barracuda Networks Spam & Virus Firewall 4.1.1.021 – Remote Configuration Retrieval	webapps	cgi	ShadowHatesYou
2010-09-27	Horde IMP Webmail 4.3.7 – ‘fetchmailprefs.php’ HTML Injection	webapps	php	Moritz Naumann
2010-09-27	Allpc 2.5 osCommerce – SQL Injection / Cross-Site Scripting	webapps	windows_x86	**RoAd_KiLlEr**
2010-09-27	MySITE – SQL Injection / Cross-Site Scripting	webapps	php	MustLive
2010-09-27	Entrans – SQL Injection	webapps	php	keracker
2010-09-27	VirIT eXplorer 6.7.43 – ‘tg-scan.dll’ DLL Loading Arbitrary Code Execution	remote	windows	anT!-Tr0J4n
2010-09-27	ndCMS – SQL Injection	webapps	asp	Abysssec
2010-09-26	BS.Player 2.56 – ‘.m3u’ / ‘.pls’ File Processing Multiple Remote Denial of Service Vulnerabilities	dos	windows	modpr0be
2010-09-26	Blue River Mura CMS – Directory Traversal	webapps	cfm	mr_me
2010-09-26	PEEL Premium 5.71 – SQL Injection	webapps	php	KnocKout
2010-09-26	gokhun asp stok 1.0 – Multiple Vulnerabilities	webapps	asp	KnocKout
2010-09-26	ZenPhoto – Config Update / Command Execution	webapps	php	Abysssec
2010-09-26	Microsoft Cinepak Codec CVDecompress – Heap Overflow (MS10-055)	dos	windows	Abysssec
2010-09-25	Adobe Flash Player – ‘newfunction’ Invalid Pointer Use (Metasploit) (2)	local	windows	Metasploit
2010-09-25	Adobe Acrobat – Bundled LibTIFF Integer Overflow (Metasploit)	local	windows	Metasploit
2010-09-25	Millenium MP3 Studio 2.0 – ‘.pls’ Local Stack Buffer Overflow (Metasploit)	local	windows	Metasploit
2010-09-25	Adobe CoolType – SING Table ‘uniqueName’ Local Stack Buffer Overflow (Metasploit) (2)	local	windows	Metasploit
2010-09-25	Adobe Illustrator CS4 14.0.0 – Postscript (.eps) Buffer Overflow (Metasploit)	local	windows	Metasploit
2010-09-25	Adobe – FlateDecode Stream Predictor 02 Integer Overflow (Metasploit) (2)	local	windows	Metasploit
2010-09-25	AOL 9.5 – ‘Phobos.Playlist Import()’ Stack Buffer Overflow (Metasploit)	local	windows	Metasploit
2010-09-25	Free Download Manager 3.0 Build 844 – Torrent Parsing Buffer Overflow (Metasploit)	local	windows	Metasploit
2010-09-25	Microsoft Works 7 – ‘WkImgSrv.dll’ WKsPictureInterface() ActiveX (Metasploit)	remote	windows	Metasploit
2010-09-25	Microsoft HTML Help Workshop 4.74 – ‘.hhp’ compiled Buffer Overflow (Metasploit) (4)	local	windows	Metasploit
2010-09-25	Microsoft HTML Help Workshop 4.74 – ‘.hhp’ Cotent Buffer Overflow (Metasploit) (2)	local	windows	Metasploit
2010-09-25	ACDSee – ‘.XPM’ File Section Buffer Overflow (Metasploit)	local	windows	Metasploit
2010-09-25	Microsoft PowerPoint Viewer – TextBytesAtom Stack Buffer Overflow (MS10-004) (Metasploit)	local	windows	Metasploit
2010-09-25	Microsoft HTML Help Workshop 4.74 – ‘.hhp’ Index Buffer Overflow (Metasploit) (3)	local	windows	Metasploit
2010-09-25	Adobe – ‘Collab.getIcon()’ Local Buffer Overflow (Metasploit) (2)	local	windows	Metasploit
2010-09-25	gAlan 0.2.1 – Local Buffer Overflow (Metasploit) (2)	local	windows	Metasploit
2010-09-25	Microsoft Visual Basic – ‘.VBP’ Local Buffer Overflow (Metasploit)	local	windows	Metasploit
2010-09-25	URSoft W32Dasm 8.93 – Disassembler Function Buffer Overflow (Metasploit)	local	windows	Metasploit
2010-09-25	E-Xoopport Samsara 3.1 (eCal Module) – Blind SQL Injection	webapps	php	_mRkZ_
2010-09-25	VisualSite CMS 1.3 – Multiple Vulnerabilities	webapps	asp	Abysssec
2010-09-25	Mozilla Firefox CSS – font-face Remote Code Execution	dos	windows	Abysssec
2010-09-25	VMware Workstation 7.1.1 – ‘VMkbd.sys’ Denial of Service	dos	windows	Lufeng Li
2010-09-25	SasCam Webcam Server 2.6.5 – ‘Get()’ Method Buffer Overflow (Metasploit)	remote	windows	Metasploit