Exploits

日期	标题	类型	平台	作者
2010-08-10	Rosoft Media Player 4.4.4 – Buffer Overflow (SEH) (PoC)	dos	windows	anonymous
2010-08-10	SopCast 3.2.9 – Remote Command Execution	remote	windows	sud0
2010-08-10	AoA Audio Extractor – Remote ActiveX SEH JIT Spray (ASLR + DEP Bypass)	remote	windows	Dr_IDE
2010-08-10	SyntaxCMS – ‘rows_per_page’ SQL Injection	webapps	php	High-Tech Bridge SA
2010-08-10	Joomla! Component Teams – Multiple Blind SQL Injections	webapps	php	Salvatore Fresta
2010-08-10	Mthree Development MP3 to WAV Decoder – Denial of Service	dos	windows	Oh Yaw Theng
2010-08-10	Joomla! Component Amblog 1.0 – Multiple SQL Injections	webapps	php	Salvatore Fresta
2010-08-10	Nasim Guest Book – ‘page’ Cross-Site Scripting	webapps	php	Moudi
2010-08-10	Microsoft Windows – ‘SfnLOGONNOTIFY’ Privilege Escalation (MS10-048)	dos	windows	MJ0011
2010-08-10	Microsoft Windows – Tracing Registry Key ACL Privilege Escalation	local	windows	Cesar Cerrudo
2010-08-10	Microsoft Msxml2.XMLHTTP.3.0 – Response Handling Memory Corruption (MS10-051)	dos	windows	Skylined
2010-08-10	Microsoft Windows – CreateWindow Function Callback (MS10-048)	dos	windows	Core Security
2010-08-10	Microsoft – SMB Server Trans2 Zero Size Pool Alloc (MS10-054)	dos	windows	laurent gaffie
2010-08-10	Zendesk – Multiple Vulnerabilities	webapps	multiple	Luis Santana
2010-08-09	dBpowerAMP Audio Player 2 – ‘FileExists’ ActiveX Buffer Overflow	remote	windows	s-dz
2010-08-09	kleeja 1.0.0RC6 – Database Disclosure	webapps	php	indoushka
2010-08-09	QQ Computer Manager – ‘TSKsp.sys’ Local Denial of Service	dos	windows	Lufeng Li
2010-08-09	wizmall 6.4 – Cross-Site Request Forgery	webapps	php	pyw1414
2010-08-09	Linux Kernel 2.6.33.3 – SCTP INIT Remote Denial of Service	dos	linux	Jon Oberheide
2010-08-09	Preation Eden Platform 27.7.2010 – Multiple HTML Injection Vulnerabilities	webapps	php	High-Tech Bridge SA
2010-08-09	AoAAudioExtractor 2.0.0.0 – ActiveX (PoC) (SEH)	dos	windows	s-dz
2010-08-09	Allinta CMS 22.07.2010 – Multiple SQL Injections / Cross-Site Scripting Vulnerabilities	webapps	asp	High-Tech Bridge SA
2010-08-09	Joomla! Component com_yellowpages – SQL Injection	webapps	php	al bayraqim
2010-08-09	Quintessential Media Player 5.0.121 – ‘.m3u’ Buffer Overflow	dos	windows	Abhishek Lyall
2010-08-09	Fat Player 0.6b – ‘.WAV’ File Processing Buffer Overflow (SEH)	local	windows	Praveen Darshanam
2010-08-09	PHP-Nuke 8.x – Blind SQL Injection	webapps	php	ITSecTeam
2010-08-09	Visual MP3 Splitter & Joiner 6.1 – Denial of Service	dos	windows	Oh Yaw Theng
2010-08-08	ffdshow Video Codec – Denial of Service	dos	windows	Nishant Das Patnaik
2010-08-08	myMP3-Player 3.0 – Local Buffer Overflow	local	windows	Oh Yaw Theng
2010-08-08	Advanced File Vault – ‘eSellerateControl350.dll’ ActiveX HeapSpray	remote	windows	ThE g0bL!N
2010-08-08	PHPKick 0.8 – ‘Statistics.php’ SQL Injection	webapps	php	garwga
2010-08-07	RealServer – Describe Buffer Overflow (Metasploit)	remote	multiple	Metasploit
2010-08-07	Subversion – Date Svnserve (Metasploit)	dos	unix	Metasploit
2010-08-07	Mini-stream Ripper 3.1.2.1 – Local Buffer Overflow (DEP Bypass)	local	windows	fl0 fl0w
2010-08-07	LibTIFF – ‘td_stripbytecount’ Null Pointer Dereference Remote Denial of Service	dos	linux	Tomas Hoger
2010-08-07	Tycoon CMS Record Script 1.0.9 – SQL Injection	webapps	php	Silic0n
2010-08-07	Nagios XI – Multiple Cross-Site Request Forgery Vulnerabilities	remote	linux	Adam Baldwin
2010-08-07	Sun Java Web Server – System WebDAV OPTIONS Buffer Overflow (Metasploit)	remote	multiple	Metasploit
2010-08-07	Joomla! Component NeoRecruit 1.4 – SQL Injection	webapps	php	v3n0m
2010-08-07	OpenSSL – ‘ssl3_get_key_exchange()’ Use-After-Free Memory Corruption	dos	linux	Georgi Guninski
2010-08-06	Dataface 1.0 – ‘admin.php’ Cross-Site Scripting	webapps	php	MustLive
2010-08-06	Prado Portal 1.2 – ‘page’ Cross-Site Scripting	webapps	php	High-Tech Bridge SA
2010-08-06	Joomla! Component com_cgtestimonial 2.2 – Multiple Vulnerabilities	webapps	php	Salvatore Fresta
2010-08-06	Microsoft Windows – ‘win32k.sys’ Driver ‘CreateDIBPalette()’ Local Buffer Overflow	local	windows	Arkon
2010-08-06	EFS Easy Chat Server – Authentication Request Handling Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-08-05	Open Blog 1.2.1 – Cross-Site Request Forgery	webapps	php	High-Tech Bridge SA
2010-08-05	ccTiddly 1.7.6 – Multiple Remote File Inclusions	webapps	php	eidelweiss
2010-08-05	APBoard 2.1.0 – ‘board.php?id’ SQL Injection	webapps	php	secret
2010-08-05	sX-Shop – Multiple SQL Injections	webapps	php	CoBRa_21
2010-08-05	sX-Shop – ‘view_image.php’ SQL Injection	webapps	php	secret