Exploits

日期	标题	类型	平台	作者
2010-07-07	Simple Document Management System – SQL Injection	webapps	php	Sid3^effects
2010-07-07	Ubisoft Ghost Recon Advanced Warfighter – Integer Overflow / Array Indexing Overflow	dos	multiple	Luigi Auriemma
2010-07-07	DD-WRT HTTPd Daemon/Service – Arbitrary Command Execution (Metasploit)	webapps	cgi	Metasploit
2010-07-07	Sijio Community Software – SQL Injection / Persistent Cross-Site Scripting	webapps	php	Sid3^effects
2010-07-07	Worxware DCP-Portal 7.0 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Andrei Rimsa Alvares
2010-07-07	Green Shop – SQL Injection	webapps	php	PrinceofHacking
2010-07-07	Altair Engineering PBS Pro 10.x – ‘pbs_mom’ Insecure Temporary File Creation	local	linux	Bartlomiej Balcerek
2010-07-07	GSM SIM Utility 5.15 – Direct RET Overflow	local	windows	chap0
2010-07-07	RunCMS 2.1 – ‘check.php’ Cross-Site Scripting	webapps	php	Andrei Rimsa Alvares
2010-07-07	Hero DVD Remote 1.0 – Remote Buffer Overflow	remote	windows	chap0
2010-07-07	Exponent CMS 0.97 – ‘Slideshow.js.php’ Cross-Site Scripting	webapps	php	Andrei Rimsa Alvares
2010-07-07	HP OpenView Network Node Manager (OV NNM) 7.53 – ‘ovwebsnmpsrv.exe’ Local Buffer Overflow (SEH)	local	windows	bitform
2010-07-07	Alt-N SecurityGateway 1.0.1 – ‘Username’ Remote Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-07-07	Microsoft IIS – ISAPI ‘w3who.dll’ Query String Overflow (Metasploit)	remote	windows	Metasploit
2010-07-06	Joomla! Component NeoRecruit 1.6.4 – ‘Itemid’ Blind SQL Injection	webapps	php	Sid3^effects
2010-07-06	Joomla! Component AutarTimonial 1.0.8 – SQL Injection	webapps	php	Sid3^effects
2010-07-06	minerCPP 0.4b – Remote Buffer Overflow / Format String	remote	windows	l3D
2010-07-06	NTSOFT BBS E-Market Professional – Multiple Cross-Site Scripting Vulnerabilities (2)	webapps	php	Ivan Sanchez
2010-07-06	Auction_Software Script – Admin Authentication Bypass	webapps	php	ALTBTA
2010-07-06	PreProject Multi-Vendor Shopping Malls – SQL Injection / Authentication Bypass	webapps	php	**RoAd_KiLlEr**
2010-07-06	Lyrics 3.0 – Engine SQL Injection	webapps	php	Sid3^effects
2010-07-06	BS Events Directory – ‘articlesdetails.php’ SQL Injection	webapps	php	Easy Laster
2010-07-06	BS Classifieds Ads – ‘articlesdetails.php’ SQL Injection	webapps	php	Easy Laster
2010-07-06	i-Net Solution Matrimonial Script 2.0.3 – ‘alert.php’ Cross-Site Scripting	webapps	php	Andrea Bocchetti
2010-07-06	BS Business Directory – ‘articlesdetails.php’ SQL Injection	webapps	php	Easy Laster
2010-07-06	BS Auto Classifieds – ‘info.php’ SQL Injection	webapps	php	Easy Laster
2010-07-06	Auto Dealer – SQL Injection	webapps	php	Easy Laster
2010-07-06	BS Auction – SQL Injection	webapps	php	Easy Laster
2010-07-06	IBM Bladecenter Management – Multiple Web Application Vulnerabilities	webapps	php	Alexey Sintsov
2010-07-06	sandbox 2.0.3 – Multiple Vulnerabilities	webapps	php	Salvatore Fresta
2010-07-06	Sun Java Web Server 7.0 u7 – Admin Interface Denial of Service	dos	windows	muts
2010-07-06	Apple Mac OSX EvoCam Web Server (Snow Leopard) – ROP Remote Overflow	remote	osx	d1dn0t
2010-07-06	Unreal Engine 2.5 – ‘UpdateConnectingMessage()’ Remote Stack Buffer Overflow (PoC)	dos	multiple	Luigi Auriemma
2010-07-06	PsNews 1.3 – SQL Injection	webapps	php	S.W.T
2010-07-05	Bs Business_Directory Script – SQL Injection / Authentication Bypass	webapps	php	Sid3^effects
2010-07-05	odCMS 1.07 – ‘archive.php’ Cross-Site Scripting	webapps	php	John Leitch
2010-07-05	Bs Auto_Classifieds Script – ‘articlesdetails.php’ SQL Injection	webapps	php	Sid3^effects
2010-07-05	NewsOffice 2.0.18 – ‘news_show.php’ Cross-Site Scripting	webapps	php	John Leitch
2010-07-05	Bs General_Classifieds Script – SQL Injection	webapps	php	Sid3^effects
2010-07-05	Bs Events_Locator Script – SQL Injection	webapps	php	Sid3^effects
2010-07-05	SocialABC NetworX 1.0.3 – Arbitrary File Upload / Cross-Site Scripting	webapps	php	John Leitch
2010-07-05	Bs Home_Classifieds Script – SQL Injection	webapps	php	Sid3^effects
2010-07-05	Bs Realtor_Web Script – SQL Injection	webapps	php	Sid3^effects
2010-07-05	Bs Recipes_Website Script – SQL Injection / Authentication Bypass	webapps	php	Sid3^effects
2010-07-05	id Software id Tech 4 Engine – ‘key’ Packet Remote Code Execution	remote	multiple	Luigi Auriemma
2010-07-05	Orbis CMS 1.0.2 – ‘editor-body.php’ Cross-Site Scripting	webapps	php	John Leitch
2010-07-05	Bs Scripts_Directory – SQL Injection / Authentication Bypass	webapps	php	Sid3^effects
2010-07-05	UFO: Alien Invasion 2.2.1 (Windows 7) – Remote Buffer Overflow (ASLR + DEP Bypass)	remote	windows	Node
2010-07-05	Multiple Tripwire Interactive Games – ‘STEAMCLIENTBLOB’ Multiple Denial of Service Vulnerabilities	dos	windows	Luigi Auriemma
2010-07-05	WikiWebHelp 0.28 – SQL Injection	webapps	php	ADEO Security