Exploits

日期	标题	类型	平台	作者
2010-07-10	Image22 ActiveX 1.1.1 – Remote Buffer Overflow	remote	windows	blake
2010-07-09	MP3 Cutter 1.5 – Denial of Service	dos	windows	Prashant Uniyal
2010-07-09	Real Estate Manager 1.0.1 – ‘index.php’ Cross-Site Scripting	webapps	php	bi0
2010-07-09	b2evolution 3.3.3 – Cross-Site Request Forgery	webapps	php	saudi0hacker
2010-07-09	MP3 Cutter 1.8 MP3 – File Processing Remote Denial of Service	dos	windows	Prashant Uniyal
2010-07-09	Sun Java Web Server 7.0 u7 – Remote Overflow (DEP Bypass)	remote	windows	dmc
2010-07-09	Oracle MySQL < 5.1.49 - 'DDL' Statements Denial of Service	dos	linux	Elena Stepanova
2010-07-09	dotDefender – Cross-Site Scripting Security Bypass	remote	multiple	SH4V
2010-07-09	RSP MP3 Player OCX 3.2 – ActiveX Buffer Overflow	remote	windows	blake
2010-07-09	dotDefender 3.8-5 – Remote Code Execution (via Cross-Site Scripting)	webapps	php	rAWjAW
2010-07-09	WordPress Plugin Firestats 1.6.5 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Jelmer de Hen
2010-07-09	WordPress Plugin Firestats – Remote Configuration File Download	webapps	php	Jelmer de Hen
2010-07-09	HoloCMS 9.0.47 – ‘news.php’ SQL Injection	webapps	php	GlaDiaT0R
2010-07-09	CMS Contentia – ‘news.php’ SQL Injection	webapps	php	GlaDiaT0R
2010-07-09	Joomla! Component QuickFAQ 1.0.3 – Blind SQL Injection	webapps	php	RoAd_KiLlEr
2010-07-09	Microsoft – ‘MSHTML.dll’ CTIMEOUTEVENTLIST::INSERTINTOTIMEOUTLIST Memory Leak	dos	windows	Ruben Santamarta
2010-07-09	Yappa 3.1.2 – ‘yappa.php’ Multiple Remote Command Execution Vulnerabilities	webapps	php	Sn!pEr.S!Te Hacker
2010-07-09	sphider 1.3.5 – Remote File Inclusion	webapps	php	Li0n-PaL
2010-07-09	SimpNews 2.47.3 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	MustLive
2010-07-09	Joomla! Component Minify4Joomla! – Arbitrary File Upload / Persistent Cross-Site Scripting	webapps	php	Sid3^effects
2010-07-09	Joomla! Component IXXO Cart – SQL Injection	webapps	php	Sid3^effects
2010-07-08	UFO: Alien Invasion 2.2.1 (OSX Snow Leopard) – IRC Client Remote Code Execution (ROP)	remote	osx	d1dn0t
2010-07-08	Pithcms – ‘theme’ Local/Remote File Inclusion	webapps	php	eidelweiss
2010-07-08	Zylone IT – Multiple Blind SQL Injections	webapps	php	Callo
2010-07-08	Ghost Recon Advanced Warfighter – Integer Overflow / Array Indexing Overflow	dos	windows	Luigi Auriemma
2010-07-08	FathFTP 1.7 – ActiveX Buffer Overflow	remote	windows	blake
2010-07-08	Outlook Web Access 2007 – Cross-Site Request Forgery	webapps	windows	Rosario Valotta
2010-07-08	Qt 4.6.3 – ‘QSslSocketBackendPrivate::transmit()’ Denial of Service	dos	multiple	Luigi Auriemma
2010-07-08	i-Gallery – Multiple Vulnerabilities	webapps	asp	SONIC
2010-07-08	EA Battlefield 2 / Battlefield 2142 – Multiple Arbitrary File Upload Vulnerabilities	remote	windows	Luigi Auriemma
2010-07-08	ClickGallery Server – SQL Injection	webapps	asp	SONIC
2010-07-08	IrcDelphi Daemon Server – Denial of Service	dos	windows	Crash
2010-07-08	BEA Weblogic – Transfer-Encoding Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-07-08	Microsoft Windows – ‘cmd.exe’ Unicode Buffer Overflow (SEH)	dos	windows	bitform
2010-07-08	KMSoft GB – SQL Injection	webapps	asp	SONIC
2010-07-08	PG Social Networking – Arbitrary File Upload	webapps	php	SONIC
2010-07-08	Inout Ad server Ultimate – Arbitrary File Upload	webapps	php	SONIC
2010-07-08	Inout Article Base Ultimate – Arbitrary File Upload	webapps	php	SONIC
2010-07-08	Inout Music 1.0 – Arbitrary File Upload	webapps	php	SONIC
2010-07-08	BadBlue 2.72b – PassThru Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-07-08	Real Player 12.0.0.879 – Code Execution	remote	windows	webDEViL
2010-07-08	Joomla! Component Music Manager – Local File Inclusion	webapps	php	Sid3^effects
2010-07-08	Linux PAM 1.1.0 (Ubuntu 9.10/10.04) – MOTD File Tampering Privilege Escalation (1)	local	linux	Kristian Erik Hermansen
2010-07-08	osCSS 1.2.2 – ‘page’ Cross-Site Scripting	webapps	php	High-Tech Bridge SA
2010-07-07	Microsoft IIS – ISAPI ‘w3who.dll’ Query String Overflow (Metasploit)	remote	windows	Metasploit
2010-07-07	Apache (Windows x86) – Chunked Encoding (Metasploit)	remote	windows_x86	Metasploit
2010-07-07	MailEnable – Authorisation Header Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-07-07	Joomla! Component PaymentsPlus 2.1.5 – Blind SQL Injection	webapps	php	Sid3^effects
2010-07-07	Harris Stratex StarMAX 2100 WIMAX Subscriber Station – Running Configuration Cross-Site Request Forgery	webapps	hardware	kalyanakumar
2010-07-07	Joomla! Component ArtForms 2.1b7.2 rc2 – Multiple Vulnerabilities	webapps	php	Salvatore Fresta