Exploits

日期	标题	类型	平台	作者
2010-07-02	HP OpenView Network Node Manager (OV NNM) – ‘getnnmdata.exe’ CGI Invalid ICount Remote Code Execution	remote	windows	S2 Crew
2010-07-02	HP OpenView Network Node Manager (OV NNM) – ‘getnnmdata.exe’ CGI Invalid MaxAge Remote Code Execution	remote	windows	S2 Crew
2010-07-01	Microsoft Windows Vista/2008 – NtUserCheckAccessForIntegrityLevel Use-After-Free	dos	windows	MSRC
2010-07-01	SIDA University System – SQL Injection	webapps	asp	K053
2010-07-01	Joomla! Component com_dateconverter 0.1 – SQL Injection	webapps	php	RoAd_KiLlEr
2010-07-01	Mediacoder 0.7.3.4682 – Universal Buffer Overflow (SEH)	local	windows	Madjix
2010-07-01	Oxygen2PHP 1.1.3 – ‘forumdisplay.php’ Blind SQL Injection	webapps	php	Dante90
2010-07-01	Oxygen2PHP 1.1.3 – ‘post.php’ Blind SQL Injection	webapps	php	Dante90
2010-07-01	RM Downloader 3.1.3 (Windows 7) – Local ASLR + DEP Bypass (SEH)	local	windows	Node
2010-07-01	Setiran CMS – Blind SQL Injection	webapps	asp	Th3 RDX
2010-07-01	Alt-N MDaemon 6.8.5 – WorldClient ‘form2raw.cgi’ Remote Stack Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-07-01	NinkoBB – Cross-Site Request Forgery	webapps	php	ADEO Security
2010-07-01	ReCMS – ‘users_lang’ Directory Traversal	webapps	php	Locu
2010-07-01	Wiki Web Help 0.2.7 – Cross-Site Scripting / HTML Injection	webapps	php	John Leitch
2010-07-01	Flatnux 2010-06.09 – ‘find’ Cross-Site Scripting	webapps	php	ITSecTeam
2010-07-01	Sumatra PDF 1.1 – Denial of Service	dos	windows	Azim Poonawala
2010-07-01	iScripts ReserveLogic 1.0 – SQL Injection	webapps	php	Salvatore Fresta
2010-07-01	DPScms – ‘q’ SQL Injection / Cross-Site Scripting	webapps	php	Ariko-Security
2010-07-01	iScripts EasySnaps 2.0 – Multiple SQL Injections	webapps	php	Salvatore Fresta
2010-07-01	Eudora Qualcomm WorldMail 3.0 – IMAPd ‘LIST’ Remote Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-07-01	Interscan Web Security 5.0 – Persistent Cross-Site Scripting	webapps	php	Ivan Huertas
2010-07-01	Google Appliance ProxyStyleSheet – Command Execution (Metasploit)	webapps	hardware	Metasploit
2010-07-01	Mini-stream RM-MP3 Converter 3.1.2.1 – ‘.m3u’ Local Buffer Overflow	local	windows	Madjix
2010-06-30	Joomla! Component Gamesbox 1.0.2 – ‘id’ SQL Injection	webapps	php	v3n0m
2010-06-30	System CMS Contentia – ‘news.php’ SQL Injection	webapps	php	GlaDiaT0R
2010-06-30	ShopCartDx 4.30 – ‘products.php’ Blind SQL Injection	webapps	php	Dante90
2010-06-30	PHP-Nuke 8.0 – SQL Injection	webapps	php	Dante90
2010-06-30	Ubiquity Nanostation5 (Air OS) – Remote Command Execution	webapps	hardware	emgent
2010-06-30	Golf Club Site – SQL Injection	webapps	php	JaMbA
2010-06-30	Specialist Bed and Breakfast Website – SQL Injection	webapps	php	JaMbA
2010-06-30	Oxygen2PHP 1.1.3 – ‘member.php’ SQL Injection	webapps	php	Dante90
2010-06-30	webERP 3.11.4 – Multiple Vulnerabilities	webapps	php	ADEO Security
2010-06-30	Joomla! Component com_wmtpic 1.0 – SQL Injection	webapps	php	RoAd_KiLlEr
2010-06-30	Joomla! Component Joomanager – SQL Injection	webapps	php	Sid3^effects
2010-06-29	TornadoStore 1.4.3 – SQL Injection / HTML Injection	webapps	php	Lucas Apa
2010-06-29	Kryn.cms 6.0 – Cross-Site Request Forgery / HTML Injection	webapps	multiple	TurboBorland
2010-06-29	WebDM CMS – SQL Injection	webapps	php	Dr.0rYX & Cr3W-DZ
2010-06-29	Miyabi CGI Tools 1.02 – ‘index.pl’ Remote Command Execution	webapps	cgi	Marshall Whittaker
2010-06-29	Adobe Reader 9.3.2 – ‘CoolType.dll’ Remote Memory Corruption / Denial of Service	dos	multiple	LiquidWorm
2010-06-29	Grafik CMS – ‘/admin.php’ SQL Injection / Cross-Site Scripting	webapps	php	High-Tech Bridge SA
2010-06-29	LIOOSYS CMS – ‘news.php’ SQL Injection	webapps	multiple	GlaDiaT0R
2010-06-29	Iatek PortalApp 3.3/4.0 – ‘login.asp’ Multiple Cross-Site Scripting Vulnerabilities	webapps	asp	High-Tech Bridge SA
2010-06-29	CubeCart PHP 4.3.x – ‘shipkey’ SQL Injection	webapps	multiple	Core Security
2010-06-29	CANDID – ‘/image/view.php?image_id’ Cross-Site Scripting	webapps	php	L0rd CrusAd3r
2010-06-29	Gekko CMS – SQL Injection	webapps	windows	[]0iZy5
2010-06-29	CANDID – ‘/image/view.php?image_id’ SQL Injection	webapps	php	L0rd CrusAd3r
2010-06-29	PageDirector CMS – ‘result.php’ SQL Injection	webapps	php	v3n0m
2010-06-29	Allomani Super MultiMedia 2.5 – Cross-Site Request Forgery (Add Admin)	webapps	php	G0D-F4Th3r
2010-06-29	Allomani E-Store 1.0 – Cross-Site Request Forgery (Add Admin) (1)	webapps	php	G0D-F4Th3r
2010-06-29	YPNinc PHP Realty Script – ‘docID’ SQL Injection	webapps	php	v3n0m