Exploits

日期	标题	类型	平台	作者
2010-06-18	Banner Management Script – SQL Injection	webapps	php	L0rd CrusAd3r
2010-06-18	MarketSaz – Arbitrary File Upload	webapps	php	NetQurd
2010-06-18	KubeSupport – ‘lang’ SQL Injection	webapps	php	L0rd CrusAd3r
2010-06-18	Joomla! Component com_listbingo 1.3 – Multiple Vulnerabilities	webapps	php	jdc
2010-06-18	Joomla! Component Ozio Gallery 2 – Multiple Vulnerabilities	webapps	php	jdc
2010-06-17	PenPals – Authentication Bypass	webapps	php	L0rd CrusAd3r
2010-06-17	Easy Travel Portal – SQL Injection	webapps	php	L0rd CrusAd3r
2010-06-17	Pithcms 0.9.5 – Local File Inclusion	webapps	php	sh00t0ut
2010-06-17	DMSEasy 0.9.7 – ‘FCKeditor’ Arbitrary File Upload	webapps	php	sh00t0ut
2010-06-17	Chrome Engine 4 – Denial of Service	dos	windows	Luigi Auriemma
2010-06-17	PHP-Nuke Module print 6.0 – ‘print&sid’ SQL Injection	webapps	php	Gamoscu
2010-06-17	Firebook – Multiple Cross-Site Scripting / Directory Traversal Vulnerabilities	webapps	php	MustLive
2010-06-17	Havij 1.10 – Persistent Cross-Site Scripting	webapps	php	hexon
2010-06-17	TurboFTP Server 1.20.745 – Directory Traversal	remote	windows	leinakesi
2010-06-17	Live CMS – SQL Injection	webapps	php	ahwak2000
2010-06-17	Batch Audio Converter Lite Edition 1.0.0.0 – Local Stack Buffer Overflow (SEH)	local	windows	modpr0be
2010-06-17	Winamp 5.572 – Local Buffer Overflow (EIP + SEH) (DEP Bypass)	local	windows	TecR0c
2010-06-17	Netware – SMB Remote Stack Overflow (PoC)	dos	novell	laurent gaffie
2010-06-17	BlazeDVD 5.1 (Windows 7) – ‘.plf’ File Stack Buffer Overflow (ASLR + DEP Bypass)	local	windows	mr_me
2010-06-17	Samba 2.2.8 (BSD x86) – ‘trans2open’ Remote Overflow (Metasploit)	remote	bsd_x86	Metasploit
2010-06-17	Planet 1.1 – Cross-Site Request Forgery (Add Admin)	webapps	php	G0D-F4Th3r
2010-06-17	File Sharing Wizard 1.5.0 – Remote Overflow (SEH)	remote	windows	b0nd
2010-06-17	Ananda Image Gallery – SQL Injection	webapps	asp	L0rd CrusAd3r
2010-06-16	Real Estate – SQL Injection	webapps	php	L0rd CrusAd3r
2010-06-16	Rosoft Audio Converter 4.4.4 – Local Buffer Overflow	local	windows	blake
2010-06-16	2DayBiz Online Classified System – SQL Injection / Cross-Site Scripting	webapps	php	Sid3^effects
2010-06-16	Nakid CMS 0.5.2 – ‘FCKeditor’ Arbitrary File Upload	webapps	php	eidelweiss
2010-06-16	PHPAuctionSystem – Arbitrary File Upload	webapps	php	Sid3^effects
2010-06-16	AspTR EXtended – Cross-Site Request Forgery	webapps	asp	FreWaL
2010-06-16	2DayBiz ybiz Network Community Script – SQL Injection / Cross-Site Scripting	webapps	php	Sid3^effects
2010-06-16	EZPX Photoblog 1.2 Beta – Remote File Inclusion	webapps	php	sh00t0ut
2010-06-16	Nakid CMS 0.5.2 – Remote File Inclusion	webapps	php	sh00t0ut
2010-06-16	Adobe SVG Viewer 3.0 – Circle Transform Remote Code Execution	dos	windows	h07
2010-06-15	Restaurant Listing with Online Ordering – SQL Injection	webapps	asp	L0rd CrusAd3r
2010-06-15	Tumbleweed SecureTransport FileTransfer – ‘vcst_eu.dll’ ActiveX Control Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-06-15	Business Classified Listing – SQL Injection	webapps	asp	L0rd CrusAd3r
2010-06-15	SAS Hotel Management System – ‘notfound’ SQL Injection	webapps	asp	L0rd CrusAd3r
2010-06-15	Adobe – JBIG2Decode Memory Corruption (Metasploit) (1)	local	windows	Metasploit
2010-06-15	CA BrightStor ARCserve Backup – ‘AddColumn()’ ActiveX Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-06-15	Pre Job Board Pro – Authentication Bypass	webapps	php	L0rd CrusAd3r
2010-06-15	Smart ASP Survey – Cross-Site Scripting / SQL Injection	webapps	asp	L0rd CrusAd3r
2010-06-15	Trellian FTP Client 3.01 – PASV Remote Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-06-15	File Sharing Wizard 1.5.0 – Buffer Overflow (PoC)	dos	windows	m-1-k-3
2010-06-15	Joomla! Plugin tinybrowser 1.5.12 – Arbitrary File Upload / Code Execution (Metasploit)	webapps	php	Metasploit
2010-06-15	Microsoft IIS 5.0 – IDQ Path Overflow (MS01-033) (Metasploit)	remote	windows	Metasploit
2010-06-15	Ipswitch IMail Server – IMAP SEARCH Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-06-15	ShixxNOTE 6.net – Font Field Overflow (Metasploit)	remote	windows	Metasploit
2010-06-15	Borland Interbase – ‘Create-Request’ Remote Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-06-15	Mercury/32 < 4.01b - PH Server Module Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-06-15	AIM Triton 1.0.4 – CSeq Buffer Overflow (Metasploit)	remote	windows	Metasploit