Exploits

日期	标题	类型	平台	作者
2010-09-01	LeadTools ActiveX common dialogs 16.5 – Multiple Vulnerabilities	dos	windows	LiquidWorm
2010-09-01	dompdf 0.6.0 beta1 – Remote File Inclusion	webapps	php	Andre_Corleone
2010-09-01	Novell Netware 6.5 – OpenSSH Remote Stack Overflow	dos	novell	Francis Provencher
2010-09-01	PHP Joke Site Software – ‘sbjoke_id’ SQL Injection	webapps	php	h4ck3r
2010-09-01	Autodesk MapGuide Viewer – ActiveX Denial of Service	dos	windows	d3b4g
2010-09-01	tftp desktop 2.5 – Directory Traversal	remote	windows	chr1x
2010-09-01	ArtGK CMS – Cross-Site Scripting / HTML Injection	webapps	php	High-Tech Bridge SA
2010-09-01	TFTPDWIN 0.4.2 – Directory Traversal	remote	windows	chr1x
2010-09-01	Rumba XML 2.4 – ‘index.php’ Multiple HTML Injection Vulnerabilities	webapps	php	High-Tech Bridge SA
2010-08-31	mBlogger 1.0.04 – ‘viewpost.php’ SQL Injection	webapps	php	Ptrace Security
2010-08-31	Web-Ideas Web Shop Standard – SQL Injection	webapps	php	Ariko-Security
2010-08-31	HP Insight Diagnostics Online Edition 8.4 – ‘custom.php?testmode’ Cross-Site Scripting	webapps	php	Mr Teatime
2010-08-31	Joomla! Component JE FAQ Pro 1.5.0 – Multiple Blind SQL Injections	webapps	php	Chip d3 bi0s
2010-08-31	HP Insight Diagnostics Online Edition 8.4 – ‘globals.php?tabpage’ Cross-Site Scripting	webapps	php	Mr Teatime
2010-08-31	HP Insight Diagnostics Online Edition 8.4 – ‘survey.php?category’ Cross-Site Scripting	webapps	php	Mr Teatime
2010-08-31	HP Insight Diagnostics Online Edition 8.4 – ‘idstatusframe.php’ Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Mr Teatime
2010-08-31	HP Insight Diagnostics Online Edition 8.4 – ‘parameters.php?device’ Cross-Site Scripting	webapps	php	Mr Teatime
2010-08-30	Joomla! Component PicSell 1.0 – Local File Disclosure	webapps	php	Craw
2010-08-30	Apple QuickTime – ‘_Marshaled_pUnk’ Backdoor Client-Side Arbitrary Code Execution	dos	windows	Ruben Santamarta
2010-08-30	seagull 0.6.7 – Remote File Inclusion	webapps	php	FoX HaCkEr
2010-08-30	Mereo 1.9.2 – Remote HTTP Server Denial of Service	dos	windows	CwG GeNiuS
2010-08-30	UltraVNC 1.0.8.2 – DLL Loading Arbitrary Code Execution	remote	windows	Ivan Markovic
2010-08-30	Microsoft Plug and Play Service – Overflow (MS05-039) (Metasploit)	dos	windows	Metasploit
2010-08-29	vBulletin 3.8.4/3.8.5 – Registration Bypass	webapps	php	Immortal Boy
2010-08-29	SnackAmp 3.1.2 – ‘.wav’ Buffer Overflow (PoC)	dos	windows	James Fitts
2010-08-29	SnackAmp 3.1.2 – SMP Buffer Overflow (SEH)	local	windows	James Fitts
2010-08-29	Nginx 0.6.38 – Heap Corruption	local	linux	Aaron Conole
2010-08-29	GuestBookPlus – HTML Injection / Bypass Comments Limit	webapps	php	MiND C0re
2010-08-29	WebsiteKit Gbplus – ‘Name’ / ‘Body’ HTML Injection	webapps	php	MiND
2010-08-29	Seagull 0.6.7 – SQL Injection	webapps	php	Sweet
2010-08-29	CF Image Hosting Script 1.3.8 – Remote File Inclusion	webapps	php	FoX HaCkEr
2010-08-29	Multi-lingual E-Commerce System 0.2 – Multiple Remote File Inclusions	webapps	php	JosS
2010-08-29	Max’s Guestbook – HTML Injection / Cross-Site Scripting	webapps	php	MiND C0re
2010-08-28	CF Image Hosting Script 1.3 – ‘settings.cdb’ Information Disclosure	webapps	php	Dr.$audi
2010-08-28	XOOPS 2.0.14 – ‘article.php’ SQL Injection	webapps	php	[]0iZy5
2010-08-28	Blogman 0.7.1 – ‘profile.php’ SQL Injection	webapps	php	Ptrace Security
2010-08-28	GaleriaSHQIP 1.0 – SQL Injection	webapps	php	Valentin
2010-08-28	LeadTools ActiveX Raster Twain 16.5 – ‘LtocxTwainu.dll’ Buffer Overflow (PoC)	dos	windows	LiquidWorm
2010-08-28	textpattern CMS 4.2.0 – Remote File Inclusion	webapps	php	Sn!pEr.S!Te
2010-08-28	DIY-CMS 1.0 – Multiple Remote File Inclusions	webapps	php	LoSt.HaCkEr
2010-08-27	pecio CMS 2.0.5 – Multiple Remote File Inclusions	webapps	php	eidelweiss
2010-08-27	Linux Kernel < 2.6.36-rc1 (Ubuntu 10.04 / 2.6.32) - 'CAN BCM' Local Privilege Escalation	local	linux	Jon Oberheide
2010-08-27	Shop Creator 4.0 – SQL Injection	webapps	asp	Pouya_Server
2010-08-27	iGaming CMS – Multiple SQL Injections	webapps	php	Sweet
2010-08-27	Pc4Uploader 9.0 – Cross-Site Request Forgery	webapps	php	RENO
2010-08-27	McAfee LinuxShield 1.5.1 – Local/Remote File Inclusion / Remote Code Execution	webapps	linux	Nikolas Sotiriu
2010-08-27	Esvon Classifieds 4.0 – Multiple Vulnerabilities	webapps	php	Sn!pEr.S!Te
2010-08-26	CompuCMS – Multiple SQL Injections / Cross-Site Scripting Vulnerabilities	webapps	php	High-Tech Bridge SA
2010-08-26	Valarsoft WebMatic 3.0.5 – Multiple HTML Injection Vulnerabilities	webapps	php	High-Tech Bridge SA
2010-08-26	Joomla! Component com_remository – Arbitrary File Upload	webapps	php	J3yk0ob