Exploits

日期	标题	类型	平台	作者
2010-07-25	Simple PHP Blog 0.4.0 – Remote Command Execution (Metasploit)	webapps	php	Metasploit
2010-07-25	XML-RPC Library 1.3.0 – ‘xmlrpc.php’ Arbitrary Code Execution (Metasploit)	webapps	php	Metasploit
2010-07-25	Novell ZENworks 6.5 – Desktop/Server Management Overflow (Metasploit)	remote	windows	Metasploit
2010-07-25	MC Content Manager 10.1 – SQL Injection / Cross-Site Scripting	webapps	php	MustLive
2010-07-25	Apache Tomcat mod_jk 1.2.20 – Remote Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-07-25	Microsoft Message Queueing Service – DNS Name Path Overflow (MS07-065) (Metasploit)	remote	windows	Metasploit
2010-07-25	vBulletin – ‘misc.php’ Template Name Arbitrary Code Execution (Metasploit)	webapps	php	Metasploit
2010-07-25	Microsoft DNS RPC Service – ‘extractQuotedChar()’ TCP Overflow (MS07-029) (Metasploit)	remote	windows	Metasploit
2010-07-24	Open Realty 2.x/3.x – Persistent Cross-Site Scripting	webapps	php	K053
2010-07-24	sNews – ‘index.php’ SQL Injection	webapps	php	MajoR
2010-07-24	DM FileManager 3.9.11 – Arbitrary File Upload	webapps	php	eidelweiss
2010-07-24	IBM AIX 5l – ‘FTPd’ Remote DES Hash	remote	aix	kingcope
2010-07-24	vBulletin 3.8.6 – ‘faq.php’ Information Disclosure	webapps	php	H-SK33PY
2010-07-24	Joomla! Component YouTube 1.5 – SQL Injection	webapps	php	Forza-Dz
2010-07-24	Joomla! Component Joomdle 0.24 – SQL Injection	webapps	php	kaMtiEz
2010-07-24	sNews 1.7 – ‘index.php?category’ SQL Injection	webapps	php	CoBRa_21
2010-07-24	Mediacoder 0.7.3.4682 – ‘.m3u’ Universal Buffer Overflow	local	windows	s-dz
2010-07-24	Joomla! Component com_itarmory – SQL Injection	webapps	php	Craw
2010-07-24	Joomla! Component Ozio Gallery – SQL Injection	webapps	php	ViRuS Qalaa
2010-07-24	AKY Blog – SQL Injection	webapps	asp	v0calist
2010-07-23	LILDBI – Arbitrary File Upload	webapps	php	EraGoN
2010-07-23	IBM Java – UTF8 Byte Sequences Security Bypass	remote	multiple	IBM
2010-07-23	ZeeAdbox 2.x – SQL Injection	webapps	php	SONIC
2010-07-23	ValidForm Builder script – Remote Command Execution	webapps	php	HaCkEr arar
2010-07-23	PhotoPost PHP 4.6.5 – ‘ecard.php’ SQL Injection	webapps	php	CoBRa_21
2010-07-23	FTP Client 0.17-19build1 ACCT (Ubuntu 10.04) – Buffer Overflow (PoC)	dos	linux	d0lc3
2010-07-23	EasyFTP Server 1.7.0.11 – ‘LIST’ (Authenticated) Remote Buffer Overflow (Metasploit)	remote	windows	Muhamad Fadzil Ramli
2010-07-23	Joomla! Component com_iproperty – SQL Injection	webapps	php	Amine_92
2010-07-23	Joomla! Component Huru Helpdesk – SQL Injection (2)	webapps	php	Amine_92
2010-07-23	Joomla! Component Golf Course Guide 0.9.6.0 – SQL Injection	webapps	php	Valentin
2010-07-23	Multiple Browsers (FF3.6.7/SM 2.0.6) – Clickjacking	remote	windows	Pouya Daneshmand
2010-07-23	PhotoPost – PHP SQL Injection	webapps	php	Cyber-sec
2010-07-23	ZeeMatri 3.x – Arbitrary File Upload	webapps	php	SONIC
2010-07-23	ZeeNetworking 1x – Arbitrary File Upload	webapps	php	SONIC
2010-07-23	SAP NetWeaver 6.4/7.0 – ‘wsnavigator’ Cross-Site Scripting	webapps	jsp	Alexandr Polyakov
2010-07-22	Claus Muus Spitfire 1.0.336 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	High-Tech Bridge SA
2010-07-22	WordPress Plugin myLDlinker – SQL Injection	webapps	php	H-SK33PY
2010-07-22	phpBB MOD 2.0.19 – Invitation Only (PassCode Bypass)	webapps	php	Silic0n
2010-07-22	phpBazar Admin – Information Disclosure	webapps	php	Net_Spy
2010-07-22	Free PHP Photo Gallery Script – Remote File Inclusion	webapps	php	ViRuS Qalaa
2010-07-22	Free PHP photo Gallery script – Remote Command Execution	webapps	php	ViRuS Qalaa
2010-07-22	AJ HYIP MERIDIAN – ‘news.php?id’ Blind SQL Injection	webapps	php	JosS
2010-07-22	Joomla! Component com_jomtube – ‘user_id’ Blind SQL Injection	webapps	php	SixP4ck3r
2010-07-22	Quick ‘n Easy FTP Server 3.9.1 – ‘USER’ Remote Buffer Overflow	dos	windows	demonalex
2010-07-22	AJ HYIP PRIME – ‘welcome.php?id’ Blind SQL Injection	webapps	php	JosS
2010-07-21	id Software id Tech 4 Engine – ‘idGameLocal::GetGameStateObject()’ Remote Code Execution	remote	windows	Luigi Auriemma
2010-07-21	Monolith Lithtech Game Engine – Memory Corruption	dos	multiple	Luigi Auriemma
2010-07-21	ZipCentral – ‘.zip’ Local Buffer Overflow (SEH)	local	windows	Jiten Pathy
2010-07-21	OpenX – ‘phpAdsNew’ Remote File Inclusion	webapps	php	ViRuS Qalaa
2010-07-21	QQPlayer – ‘.cue’ File Buffer Overflow	local	windows	Lufeng Li