Exploits

日期	标题	类型	平台	作者
2010-09-20	Microsoft Outlook – ‘ATTACH_BY_REF_RESOLVE’ File Execution (MS10-045) (Metasploit)	remote	windows	Metasploit
2010-09-20	Mozilla Suite/Firefox – Navigator Object Code Execution (Metasploit)	remote	multiple	Metasploit
2010-09-20	IBM TPM for OS Deployment 5.1.0.x – ‘rembo.exe’ Remote Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-09-20	3Com 3CDaemon 2.0 FTP Server – ‘Username’ Remote Overflow (Metasploit)	remote	windows	Metasploit
2010-09-20	Microsoft Windows – ANI LoadAniIcon() Chunk Size Stack Buffer Overflow (SMTP) (MS07-017) (Metasploit)	remote	windows	Metasploit
2010-09-20	Microsoft Windows XP/Vista/2003 – Metafile Escape() SetAbortProc Code Execution (MS06-001) (Metasploit)	remote	windows	Metasploit
2010-09-20	IPSwitch IMail IMAP4D – Delete Overflow (Metasploit)	remote	windows	Metasploit
2010-09-20	Lyris ListManager – MSDE Weak sa Password (Metasploit)	remote	windows	Metasploit
2010-09-20	Mozilla Firefox 3.5 – ‘escape()’ Return Value Memory Corruption (Metasploit)	remote	multiple	Metasploit
2010-09-20	primitive CMS 1.0.9 – Multiple Vulnerabilities	webapps	php	Stephan Sattler
2010-09-20	TikiWiki tiki-graph_formula – PHP Remote Code Execution (Metasploit)	webapps	php	Metasploit
2010-09-20	CA CAM (Windows x86) – ‘log_security()’ Remote Stack Buffer Overflow (Metasploit)	remote	windows_x86	Metasploit
2010-09-20	Oracle 9i XDB (Windows x86) – HTTP PASS Overflow (Metasploit)	remote	windows_x86	Metasploit
2010-09-20	Computer Associates License Server – GETCONFIG Overflow (Metasploit)	remote	windows	Metasploit
2010-09-20	Microsoft Internet Explorer – ‘createTextRange()’ Code Execution (MS06-013) (Metasploit)	remote	windows	Metasploit
2010-09-20	Adobe – FlateDecode Stream Predictor 02 Integer Overflow (Metasploit) (1)	local	windows	Metasploit
2010-09-20	Ultra Shareware Office Control – ActiveX HttpUpload Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-09-20	Sun Java – JRE AWT setDiffICM Buffer Overflow (Metasploit)	remote	multiple	Metasploit
2010-09-20	RarCrack 0.2 – ‘Filename init() .bss’ (PoC)	dos	linux	Stoke
2010-09-20	WebSTAR FTP Server – USER Overflow (Metasploit)	remote	osx	Metasploit
2010-09-20	Computer Associates License Client – GETCONFIG Overflow (Metasploit)	remote	windows	Metasploit
2010-09-20	VideoLAN VLC Client (Windows x86) – ‘smb://’ URI Buffer Overflow (Metasploit)	local	windows_x86	Metasploit
2010-09-20	Microsoft Internet Explorer – COM CreateObject Code Execution (MS06-014/MS06-073) (Metasploit)	remote	windows	Metasploit
2010-09-20	Microsoft Help Center – Cross-Site Scripting / Command Execution (MS10-042) (Metasploit)	remote	windows	Metasploit
2010-09-20	Adobe CoolType – SING Table ‘uniqueName’ Remote Stack Buffer Overflow (Metasploit) (1)	remote	windows	Metasploit
2010-09-20	Mercur MailServer 5.0 – IMAP SP3 SELECT Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-09-20	TinyIdentD 2.2 – Remote Stack Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-09-20	Microsoft DRM Technology – ‘msnetobj.dll’ ActiveX Multiple Vulnerabilities	dos	windows	Asheesh kumar Mani Tripathi
2010-09-20	Mercantec SoftCart – CGI Overflow (Metasploit)	remote	windows	Metasploit
2010-09-20	PeerCast 0.1216 (Linux) – URL Handling Buffer Overflow (Metasploit)	remote	linux	Metasploit
2010-09-20	SonicWALL Aventail – ‘epi.dll’ AuthCredential Format String (Metasploit)	remote	windows	Metasploit
2010-09-20	LightNEasy CMS 3.2.1 – Blind SQL Injection	webapps	php	Solidmedia
2010-09-20	Racer 0.5.3 Beta 5 – Remote Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-09-20	AstonSoft DeepBurner – ‘.dbr’ Path Buffer Overflow (Metasploit)	local	windows	Metasploit
2010-09-20	Microsoft WINS – Service Memory Overwrite (MS04-045) (Metasploit)	remote	windows	Metasploit
2010-09-20	Apple QTJava – ‘toQTPointer()’ Arbitrary Memory Access (Metasploit)	remote	multiple	Metasploit
2010-09-20	VWD-CMS – Cross-Site Request Forgery	webapps	asp	Abysssec
2010-09-20	iPhone MobileMail – LibTIFF Buffer Overflow (Metasploit)	remote	hardware	Metasploit
2010-09-20	Novell Messenger Server 2.0 – Accept-Language Overflow (Metasploit)	remote	windows	Metasploit
2010-09-20	Unreal Tournament 2004 (Windows) – ‘secure’ Remote Overflow (Metasploit)	remote	windows	Metasploit
2010-09-20	Microsoft IIS – ISAPI RSA WebAgent Redirect Overflow (Metasploit)	remote	windows	Metasploit
2010-09-20	PHP 4 – Unserialize() ZVAL Reference Counter Overflow (Cookie) (Metasploit)	remote	multiple	Metasploit
2010-09-20	Sun Java JRE – getSoundbank ‘file://’ URI Buffer Overflow (Metasploit)	remote	multiple	Metasploit
2010-09-20	Java 6.19 CMM readMabCurveData – Remote Stack Overflow	remote	windows	Abysssec
2010-09-20	QBik WinGate WWW Proxy Server – URL Processing Overflow (Metasploit)	remote	windows	Metasploit
2010-09-19	RarCrack 0.2 – Buffer Overflow (PoC)	dos	linux	The_UnKn@wn
2010-09-19	Opencart 1.4.9.1 – Arbitrary File Upload	webapps	php	Net.Edit0r
2010-09-19	BoutikOne 1.0 – SQL Injection	webapps	php	BrOx-Dz
2010-09-19	SmarterMail 7.1.3876 – Directory Traversal	remote	windows	sqlhacker
2010-09-19	Audiotran 1.4.2.4 – Local Overflow (SEH) (DEP Bypass)	local	windows	Muhamad Fadzil Ramli