Exploits

日期	标题	类型	平台	作者
2010-09-25	Adobe – ‘Doc.media.newPlayer’ Use-After-Free (Metasploit) (2)	local	windows	Metasploit
2010-09-25	ProShow Gold 4.0.2549 – ‘.psh’ Local Stack Buffer Overflow (Metasploit)	local	windows	Metasploit
2010-09-25	DjVu – ‘DjVu_ActiveX_MSOffice.dll’ ActiveX Component Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-09-25	Adobe – U3D CLODProgressiveMeshDeclaration Array Overrun (Metasploit) (2)	local	windows	Metasploit
2010-09-25	Adobe – JBIG2Decode Memory Corruption (Metasploit) (2)	local	windows	Metasploit
2010-09-25	Millenium MP3 Studio 2.0 – ‘.pls’ Local Stack Buffer Overflow (Metasploit)	local	windows	Metasploit
2010-09-25	Adobe CoolType – SING Table ‘uniqueName’ Local Stack Buffer Overflow (Metasploit) (2)	local	windows	Metasploit
2010-09-25	Adobe Flash Player – ‘newfunction’ Invalid Pointer Use (Metasploit) (2)	local	windows	Metasploit
2010-09-25	Adobe Acrobat – Bundled LibTIFF Integer Overflow (Metasploit)	local	windows	Metasploit
2010-09-24	Collaborative Passwords Manager 1.07 – Multiple Local File Inclusions	webapps	php	sh00t0ut
2010-09-24	WebDAV – Application DLL Hijacker (Metasploit)	remote	windows	Metasploit
2010-09-24	Traidnt UP – Cross-Site Request Forgery (Add Admin)	webapps	windows_x86	John Johnz
2010-09-24	Linksys WRT54 Access Point – ‘apply.cgi’ Remote Buffer Overflow (Metasploit)	remote	hardware	Metasploit
2010-09-24	Joomla! Component Elite Experts – SQL Injection	webapps	windows_x86	**RoAd_KiLlEr**
2010-09-24	SnackAmp 3.1.3B – SMP Buffer Overflow (SEH)	local	windows	James Fitts
2010-09-24	FreePBX 2.8.0 – Recordings Interface Allows Remote Code Execution	webapps	php	Trustwave's SpiderLabs
2010-09-24	Microsoft MPEG Layer-3 Audio Decoder – Division By Zero	dos	windows	Abysssec
2010-09-24	Microsoft Excel – OBJ Record Stack Overflow	local	windows	Abysssec
2010-09-23	OvBB 0.16a – Multiple Local File Inclusions	webapps	php	cOndemned
2010-09-23	GeekLog 1.3.8 (filemgmt) – SQL Injection	webapps	php	Gamoscu
2010-09-23	WAnewsletter 2.1.2 – SQL Injection	webapps	php	BrOx-Dz
2010-09-23	Microsoft Excel – HFPicture Record Parsing Memory Corruption	dos	windows	Abysssec
2010-09-23	Adobe Acrobat Reader and Flash – ‘newfunction’ Remote Code Execution	dos	multiple	Abysssec
2010-09-23	Joomla! Component com_tax – ‘eid’ SQL Injection	webapps	php	FL0RiX
2010-09-23	OpenText LiveLink 9.7.1 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Alejandro Ramos
2010-09-23	Microsoft Excel 2002 – Memory Corruption	dos	windows	Abysssec
2010-09-22	Joomla! Component Joostina – SQL Injection	webapps	php	Gamoscu
2010-09-22	Joomla! Component TimeTrack 1.2.4 – Multiple SQL Injections	webapps	php	Salvatore Fresta
2010-09-22	BSI Hotel Booking System Admin 1.4/2.0 – Authentication Bypass	webapps	php	K-159
2010-09-22	MP3 Workstation 9.2.1.1.2 – Local Overflow (SEH) (Metasploit)	local	windows	Madjix
2010-09-22	Skybluecanvas 1.1-r248 – Cross-Site Request Forgery	webapps	php	Sweet
2010-09-22	Sothink SWF Decompiler – ‘dwmapi.dll’ DLL Loading Arbitrary Code Execution	remote	windows	anT!-Tr0J4n
2010-09-22	gausCMS – Multiple Vulnerabilities	webapps	asp	Abysssec
2010-09-22	Easy Office Recovery – ‘dwmapi.dll’ DLL Loading Arbitrary Code Execution	remote	windows	anT!-Tr0J4n
2010-09-22	Adobe Shockwave Director tSAC – Chunk Memory Corruption	dos	windows	Abysssec
2010-09-22	GreenBrowser – ‘RSRC32.dll’ DLL Loading Arbitrary Code Execution	remote	windows	anT!-Tr0J4n
2010-09-21	Sun Java – Web Start Plugin Command Line Argument Injection (Metasploit)	remote	windows	Metasploit
2010-09-21	Novell iPrint Client – ActiveX Control call-back-url Buffer Overflow (Metasploit)	remote	windows	Trancer
2010-09-21	Softek Barcode Reader Toolkit ActiveX 7.1.4.14 – ‘SoftekATL.dll’ Remote Buffer Overflow	remote	windows	LiquidWorm
2010-09-21	ibPhotohost 1.1.2 – SQL Injection	webapps	php	fred777
2010-09-21	Acoustica Audio Converter Pro 1.1 (build 25) – ‘.mp3 / .wav / .ogg / .wma’ Local Heap Overflow	local	windows	Carlos Mario Penagos Hollmann
2010-09-21	Personal.Net Portal – Multiple Vulnerabilities	webapps	asp	Abysssec
2010-09-21	Microsoft Excel – WOPT Record Parsing Heap Memory Corruption	dos	windows	Abysssec
2010-09-21	Novell iPrint Client – ActiveX Control ExecuteRequest Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-09-21	Microsoft Windows – SMB Relay Code Execution (MS08-068) (Metasploit)	remote	windows	Metasploit
2010-09-21	Novell iPrint Client – ActiveX Control ExecuteRequest debug Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-09-21	Microsoft Windows – Shell LNK Code Execution (MS10-046) (Metasploit)	remote	windows	Metasploit
2010-09-21	wpQuiz 2.7 – Authentication Bypass	webapps	php	KnocKout
2010-09-21	CollabNet Subversion Edge Log Parser – HTML Injection	remote	multiple	Sumit Kumar Soni
2010-09-21	mountall 2.15.2 (Ubuntu 10.04/10.10) – Local Privilege Escalation	local	linux	fuzz