Exploits

日期	标题	类型	平台	作者
2010-07-03	Family Connections Who is Chatting AddOn – Remote File Inclusion	webapps	php	lumut--
2010-07-03	cPanel 11.25 – Cross-Site Request Forgery	webapps	php	G0D-F4Th3r
2010-07-03	phpMyAdmin – Config File Code Injection (Metasploit)	webapps	php	Metasploit
2010-07-03	TWiki – Search Function Arbitrary Command Execution (Metasploit)	webapps	php	Metasploit
2010-07-03	Borland Interbase – ‘jrd8_create_database()’ Remote Buffer Overflow (Metasploit)	remote	linux	Metasploit
2010-07-03	Microsoft Internet Explorer – ‘VML’ Fill Method Code Execution (MS06-055) (Metasploit)	remote	windows	Metasploit
2010-07-03	Microsoft Internet Explorer – WebViewFolderIcon setSlice() Overflow (MS06-057) (Metasploit) (2)	remote	windows	Metasploit
2010-07-03	Borland Interbase – ‘isc_attach_database()’ Remote Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-07-03	BigAnt Server 2.50 SP1 – Remote Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-07-03	Veritas Backup Exec Windows – Remote Agent Overflow (Metasploit)	remote	windows	Metasploit
2010-07-03	ISC DHCPD – Denial of Service	dos	multiple	sid
2010-07-03	LPRng – use_syslog Remote Format String (Metasploit)	remote	linux	Metasploit
2010-07-03	BEA WebLogic – JSESSIONID Cookie Value Overflow (Metasploit)	remote	windows	Metasploit
2010-07-03	Microsoft Windows – ‘srv2.sys’ SMB Negotiate ProcessID Function Table Dereference (MS09-050) (Metasploit)	remote	windows	Metasploit
2010-07-03	SweetRice < 0.6.4 - 'FCKeditor' Arbitrary File Upload	webapps	php	ITSecTeam
2010-07-03	System V Derived /bin/login – Extraneous Arguments Buffer Overflow (Metasploit)	remote	linux	Metasploit
2010-07-03	TWiki History TWikiUsers – ‘rev’ Command Execution (Metasploit)	webapps	php	Metasploit
2010-07-03	Salim Gasmi GLD (Greylisting Daemon) – Postfix Buffer Overflow (Metasploit)	remote	linux	Metasploit
2010-07-03	Joomla! Component com_seyret – Local File Inclusion	webapps	php	Cooler_ unix
2010-07-03	QuickTime Streaming Server – ‘parse_xml.cgi’ Remote Execution (Metasploit)	webapps	cgi	Metasploit
2010-07-03	Borland Interbase – ‘open_marker_file()’ Remote Buffer Overflow (Metasploit)	remote	linux	Metasploit
2010-07-03	Coppermine Photo Gallery 1.4.14 – ‘picEditor.php’ Command Execution (Metasploit)	webapps	php	Metasploit
2010-07-03	phpBB – ‘viewtopic.php’ Arbitrary Code Execution (Metasploit)	webapps	php	Metasploit
2010-07-03	Borland Interbase – ‘PWD_db_aliased()’ Remote Buffer Overflow (Metasploit)	remote	linux	Metasploit
2010-07-03	Freeciv 2.2.1 – Multiple Remote Denial of Service Vulnerabilities	dos	linux	Luigi Auriemma
2010-07-03	McAfee Subscription Manager – Remote Stack Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-07-03	ProFTP 2.9 – Banner Remote Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-07-03	AOL Instant Messenger AIM – goaway Overflow (Metasploit)	remote	windows	Metasploit
2010-07-03	iScripts MultiCart 2.2 – Multiple SQL Injections	webapps	php	Salvatore Fresta
2010-07-03	HP OpenView Network Node Manager (OV NNM) – ‘connectedNodes.ovp’l Remote Command Execution (Metasploit)	remote	linux	Metasploit
2010-07-03	War-FTPD 1.65 – ‘Username’ Remote Overflow (Metasploit)	remote	windows	Metasploit
2010-07-03	Firebird Relational Database – ‘isc_attach_database()’ Remote Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-07-03	Sun Solaris sadmind – ‘adm_build_path()’ Remote Buffer Overflow (Metasploit)	remote	solaris	Metasploit
2010-07-03	Joomla! Component Techjoomla SocialAds – Persistent Cross-Site Scripting	webapps	php	Sid3^effects
2010-07-03	AWStats 6.4 < 6.5 - migrate Remote Command Execution (Metasploit)	webapps	cgi	Metasploit
2010-07-03	freeFTPd 1.0 – ‘Username’ Remote Overflow (Metasploit)	remote	windows	Metasploit
2010-07-02	iScripts Socialware 2.2.x – Arbitrary File Upload	webapps	php	Salvatore Fresta
2010-07-02	Mp3 Digitalbox 2.7.2.0 – ‘.mp3’ Local Stack Overflow (PoC)	dos	windows	v3n0m
2010-07-02	Joomla! Component com_seyret – Blind SQL Injection	webapps	php	RoAd_KiLlEr
2010-07-02	Iphone Pointter Social Network – Local File Inclusion	webapps	php	Sid3^effects
2010-07-02	Pointter Social Network – Local File Inclusion	webapps	php	Sid3^effects
2010-07-02	MooreAdvice – ‘productlist.asp’ SQL Injection	webapps	asp	Th3 RDX
2010-07-02	Xplico 0.5.7 – ‘add.ctp’ Cross-Site Scripting (2)	webapps	multiple	Marcos Garcia & Maximiliano Soler
2010-07-02	VGM Forbin – ‘article.asp’ SQL Injection	webapps	asp	Th3 RDX
2010-07-02	Bit Weaver 2.7 – Local File Inclusion	webapps	php	John Leitch
2010-07-02	iScripts EasyBiller – Cross-Site Scripting	webapps	php	Sangteamtham
2010-07-02	iScripts CyberMatch 1.0 – Blind SQL Injection	webapps	php	Salvatore Fresta
2010-07-02	HP OpenView Network Node Manager (OV NNM) – ‘getnnmdata.exe’ CGI Invalid Hostname Remote Code Execution	remote	windows	S2 Crew
2010-07-02	HP OpenView Network Node Manager (OV NNM) – ‘getnnmdata.exe’ CGI Invalid ICount Remote Code Execution	remote	windows	S2 Crew
2010-07-02	HP OpenView Network Node Manager (OV NNM) – ‘getnnmdata.exe’ CGI Invalid MaxAge Remote Code Execution	remote	windows	S2 Crew