Exploits

日期	标题	类型	平台	作者
2010-08-05	DiamondList 0.1.6 – Cross-Site Request Forgery	webapps	php	High-Tech Bridge SA
2010-08-05	Amethyst 0.1.5 – Cross-Site Scripting	webapps	php	High-Tech Bridge SA
2010-08-05	uzbl ‘uzbl-core’ – ‘@SELECTED_URI’ Mouse Button Bindings Command Injection	remote	linux	Chuzz
2010-08-05	BXR 0.6.8 – Cross-Site Request Forgery	webapps	php	High-Tech Bridge SA
2010-08-05	Open Blog 1.2.1 – Cross-Site Request Forgery	webapps	php	High-Tech Bridge SA
2010-08-05	ccTiddly 1.7.6 – Multiple Remote File Inclusions	webapps	php	eidelweiss
2010-08-05	APBoard 2.1.0 – ‘board.php?id’ SQL Injection	webapps	php	secret
2010-08-05	sX-Shop – Multiple SQL Injections	webapps	php	CoBRa_21
2010-08-05	sX-Shop – ‘view_image.php’ SQL Injection	webapps	php	secret
2010-08-05	Nuked-klaN Module Partenaires NK 1.5 – Blind SQL Injection	webapps	php	Metropolis
2010-08-05	Muraus Open Blog – Multiple HTML Injection Vulnerabilities	webapps	php	High-Tech Bridge SA
2010-08-05	MediaMonkey 3.2.1.1297 – Denial of Service (PoC)	dos	windows	anonymous
2010-08-05	Hulihan Applications Amethyst 0.1.5 – Multiple HTML Injection Vulnerabilities	webapps	php	High-Tech Bridge SA
2010-08-04	FathFTP 1.8 – ‘FileExists Method’ ActiveX Buffer Overflow (SEH)	remote	windows	H4kr3m
2010-08-04	FathFTP 1.8 – ‘EnumFiles Method’ ActiveX Buffer Overflow (SEH)	remote	windows	Madjix
2010-08-04	FathFTP 1.8 – ‘DeleteFile Method’ ActiveX Buffer Overflow (SEH)	remote	windows	Madjix
2010-08-04	Easy RM to MP3 2.7.3.700 – ‘.m3u’ / ‘.pls’ / ‘.smi’ / ‘.wpl’ / ‘.wax’ / ‘.wvx’ / ‘.ram’ Local Overflow	local	windows	Oh Yaw Theng
2010-08-04	K-Meleon 1.x – URI Handling Multiple Denial of Service Vulnerabilities	dos	windows	Lostmon
2010-08-03	JBoss – Java Class DeploymentFileRepository WAR Deployment (Metasploit)	remote	multiple	Metasploit
2010-08-03	HP OpenView Network Node Manager (OV NNM) 7.53 – ‘OvJavaLocale’ Buffer Overflow	webapps	windows	Nahuel Riva
2010-08-03	Progitek Visionner Photos 2.0 – File Format Denial of Service	dos	windows	antrhacks
2010-08-03	WordPress Plugin NextGEN Smooth Gallery 0.12 – Blind SQL Injection	webapps	php	kaMtiEz
2010-08-03	FathFTP 1.8 – ‘RasIsConnected Method’ ActiveX Buffer Overflow (SEH)	remote	windows	Madjix
2010-08-03	Apple iOS – ‘.pdf’ Local Privilege Escalation ‘Jailbreak’	local	ios	jailbreakme
2010-08-03	Oracle MySQL – ‘ALTER DATABASE’ Remote Denial of Service	dos	multiple	Shane Bester
2010-08-03	EMC Celerra NAS Appliance – Unauthorized Access to Root NFS Export	remote	hardware	Trustwave's SpiderLabs
2010-08-03	68KB 1.0.0rc4 – Remote File Inclusion	webapps	php	eidelweiss
2010-08-03	Oracle MySQL < 5.1.50 - Privilege Escalation	remote	multiple	Libing Song
2010-08-03	Avast! Internet Security 5.0 – ‘aswFW.sys’ Kernel Driver IOCTL Memory Pool Corruption	dos	windows	x90c
2010-08-03	PMSoftware Simple Web Server 2.1 – ‘From:’ Header Processing Remote Denial of Service	dos	windows	Rodrigo Escobar
2010-08-03	EasyFTP Server 1.7.0.11 – ‘LIST’ Stack Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-08-03	D-Link WBR-2310 1.0.4 – ‘GET’ Remote Buffer Overflow (PoC)	dos	hardware	Rodrigo Escobar
2010-08-03	Joomla! Component com_jigsaw – ‘Controller’ Directory Traversal	webapps	php	FL0RiX
2010-08-02	APT-WEBSHOP-SYSTEM – ‘modules.php’ SQL Injection	webapps	php	secret
2010-08-02	MyIT CRM – ‘index.php’ Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Juan Manuel Garcia
2010-08-02	WM Downloader 3.1.2.2 – Local Buffer Overflow (1)	local	windows	s-dz
2010-08-02	Jaangle 0.98e.971 – Denial of Service	dos	windows	s-dz
2010-08-02	SnoGrafx – ‘cat.php?cat’ SQL Injection	webapps	php	CoBRa_21
2010-08-02	Mini-stream RM-MP3 Converter/WMDownloader/ASX to MP3 Converter – Local Stack Buffer Overflow	local	windows	Praveen Darshanam
2010-08-02	MyIT CRM – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Juan Manuel Garcia
2010-08-02	Joomla! Component CamelcityDB 2.2 – SQL Injection	webapps	php	Amine_92
2010-08-01	Xerver 4.32 – Source Disclosure / HTTP Authentication Bypass (Metasploit)	remote	windows	Ben Schmidt
2010-08-01	Intellinet IP Camera MNC-L10 – Authentication Bypass	webapps	hardware	Magnefikko
2010-07-31	Barcodewiz Barcode ActiveX Control 3.29 – Remote HeapSpray (Internet Explorer 6/7)	remote	windows	Dr_IDE
2010-07-31	Joomla! Component com_spielothek 1.6.9 – Multiple Blind SQL Injections	webapps	php	Salvatore Fresta
2010-07-31	Xion Audio Player 1.0.125 – Denial of Service	dos	windows	s-dz
2010-07-31	Xmyplay 3.5.1 – Denial of Service	dos	windows	s-dz
2010-07-31	SigPlus Pro 3.74 – ActiveX ‘LCDWriteString()’ Remote Buffer Overflow JIT Spray (ASLR + DEP Bypass)	remote	windows	mr_me
2010-07-31	Concept E-Commerce – SQL Injection	webapps	php	gendenk
2010-07-30	Sourcefabric Campsite – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	High-Tech Bridge SA