Exploits

日期	标题	类型	平台	作者
2010-09-06	WordPress Plugin Events Manager Extended – Persistent Cross-Site Scripting	webapps	php	Craw
2010-09-06	Joomla! Component Aardvertiser 2.1 – Blind SQL Injection	webapps	php	Stephan Sattler
2010-09-06	Micronetsoft Rental Property Management Website – SQL Injection	webapps	asp	L0rd CrusAd3r
2010-09-06	HP OpenView Network Node Manager (OV NNM) – ‘webappmon.exe execvp_nc’ Remote Code Execution	dos	windows	Abysssec
2010-09-06	InterPhoto Gallery – Multiple Vulnerabilities	webapps	php	Abysssec
2010-09-06	Micronetsoft RV Dealer Website – SQL Injection	webapps	asp	L0rd CrusAd3r
2010-09-06	DMXReady Members Area Manager – Persistent Cross-Site Scripting	webapps	asp	L0rd CrusAd3r
2010-09-06	MySource Matrix – ‘char_map.php’ Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Gjoko Krstic
2010-09-06	HeffnerCMS 1.22 – ‘index.php’ Local File Inclusion	webapps	php	MiND C0re
2010-09-06	Horde Application Framework 3.3.8 – ‘icon_browser.php’ Cross-Site Scripting	webapps	php	Moritz Naumann
2010-09-06	Santafox 2.0.2 – ‘search’ Cross-Site Scripting	webapps	php	High-Tech Bridge SA
2010-09-06	BlueCMS 1.6 – ‘x-forwarded-for’ Header SQL Injection	webapps	php	cnryan
2010-09-06	Adobe Acrobat and Reader 9.3.4 – ‘acroform_PlugInMain’ Memory Corruption	dos	windows	ITSecTeam
2010-09-05	Joomla! Component iJoomla! Magazine 3.0.1 – Remote File Inclusion	webapps	php	LoSt.HaCkEr
2010-09-05	Microsoft MPEG Layer-3 – Remote Command Execution	remote	windows	Abysssec
2010-09-05	A-Blog 2.0 – ‘/sources/search.php’ SQL Injection	webapps	php	Ptrace Security
2010-09-05	ChillyCMS 1.1.3 – Multiple Vulnerabilities	webapps	php	AmnPardaz
2010-09-05	Joomla! Component Gantry 3.0.10 – Blind SQL Injection	webapps	php	jdc
2010-09-05	Softbiz Article Directory Script – ‘sbiz_id’ Blind SQL Injection	webapps	php	h4ck3r
2010-09-05	Virtual DJ Trial 6.1.2 – Buffer Overflow Crash (SEH) (PoC)	dos	windows	Abhishek Lyall
2010-09-05	DMXready Polling Booth Manager – SQL Injection	webapps	asp	L0rd CrusAd3r
2010-09-05	FCrackZip 1.0 – Local Buffer Overflow (PoC)	dos	linux	0x6264
2010-09-05	Joomla! Component Clantools 1.2.3 – Multiple Blind SQL Injections	webapps	php	Solidmedia
2010-09-05	Joomla! Component Clantools 1.5 – Blind SQL Injection	webapps	php	Solidmedia
2010-09-05	ifnuke – Multiple Vulnerabilities	webapps	asp	Abysssec
2010-09-04	PHP Classifieds 7.3 – Remote File Inclusion	webapps	php	alsa7r
2010-09-04	VideoLAN VLC Media Player < 1.1.4 - '.xspf smb://' URI Handling Remote Stack Overflow (PoC)	dos	windows	s-dz
2010-09-04	PHP Classifieds ADS – ‘sid’ Blind SQL Injection	webapps	php	h4ck3r
2010-09-04	mBlogger 1.0.04 – ‘addcomment.php’ Persistent Cross-Site Scripting	webapps	php	Ptrace Security
2010-09-04	SyndeoCMS 2.8.02 – Multiple Vulnerabilities (1)	webapps	php	Abysssec
2010-09-04	Samba 3.3.12 (Linux x86) – ‘chain_reply’ Memory Corruption (Metasploit)	remote	linux_x86	Metasploit
2010-09-04	Microsoft Movie Maker – Remote Code Execution (MS10-016)	remote	windows	Abysssec
2010-09-03	Pligg CMS 1.0.4 – SQL Injection / Cross-Site Scripting	webapps	php	Bogdan Calin
2010-09-03	NuSOAP 0.9.5 – ‘nusoap.php’ Cross-Site Scripting	webapps	php	Bogdan Calin
2010-09-03	smbind 0.4.7 – SQL Injection	webapps	php	r00t
2010-09-03	Intel Video Codecs 5.0 – Remote Denial of Service	dos	windows	Matthew Bergin
2010-09-03	FFDshow – Overflow (SEH) Exception Leading to Null Pointer on Read	dos	windows	Matthew Bergin
2010-09-03	visinia 1.3 – Multiple Vulnerabilities	webapps	asp	Abysssec
2010-09-03	Trend Micro Internet Security Pro 2010 – ActiveX ‘extSetOwner()’ Remote Code Execution (2)	remote	windows	Abysssec
2010-09-02	Accton-based switches (3com / Dell / SMC / Foundry / EdgeCore) – Backdoor Password	remote	multiple	Edwin Eefting
2010-09-02	rainbowportal – Multiple Vulnerabilities	webapps	asp	Abysssec
2010-09-02	Apple QuickTime FlashPix NumberOfTiles – Remote Code Execution	dos	windows	Abysssec
2010-09-02	vbShout 5.2.2 – Local/Remote File Inclusion	webapps	php	fred777
2010-09-02	CMS WebManager-Pro – ‘c.php’ SQL Injection	webapps	php	MustLive
2010-09-02	OneCMS 2.6.1 – ‘index.php’ Cross-Site Scripting	webapps	php	anT!-Tr0J4n
2010-09-02	TBDev 2.0 – Remote File Inclusion / SQL Injection	webapps	php	Inj3ct0r
2010-09-02	Shop a la Cart – Multiple Vulnerabilities	webapps	php	Ariko-Security
2010-09-01	Novell Netware 6.5 – OpenSSH Remote Stack Overflow	dos	novell	Francis Provencher
2010-09-01	PHP Joke Site Software – ‘sbjoke_id’ SQL Injection	webapps	php	h4ck3r
2010-09-01	Autodesk MapGuide Viewer – ActiveX Denial of Service	dos	windows	d3b4g