Exploits

日期	标题	类型	平台	作者
2010-04-30	Trend Micro ServerProtect 5.58 – ‘CreateBinding()’ Remote Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-04-30	Seattle Lab Mail (SLmail) 5.5 – POP3 ‘PASS’ Remote Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-04-30	Trend Micro ServerProtect 5.58 – Remote Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-04-30	Icecast 2.0.1 (Windows x86) – Header Overwrite (Metasploit)	remote	windows_x86	Metasploit
2010-04-30	Oracle 9i XDB (Windows x86) – FTP PASS Overflow (Metasploit)	remote	windows_x86	Metasploit
2010-04-30	HT-MP3Player 1.0 – ‘.HT3’ File Parsing Buffer Overflow (Metasploit)	local	windows	Metasploit
2010-04-30	HP Mercury Quality Center – ActiveX Control ProgColor Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-04-30	Winamp – Playlist UNC Path Computer Name Overflow (Metasploit)	local	windows	Metasploit
2010-04-30	Microsoft SQL Server – Hello Overflow (MS02-056) (Metasploit)	remote	windows	Metasploit
2010-04-30	ASPCode CMS 1.5.8 – Multiple Vulnerabilities	webapps	asp	Dr. Alberto Fontanella
2010-04-30	Urgent Backup 3.20 / ABC Backup Pro 5.20 / ABC Backup 5.50 – ‘.zip’ File (SEH)	local	windows	Lincoln
2010-04-30	Barracuda – IMG.pl Remote Command Execution (Metasploit)	webapps	cgi	Metasploit
2010-04-30	Alibaba Clone Platinum – ‘offers_buy.php’ SQL Injection	webapps	php	v3n0m
2010-04-30	ProSysInfo TFTP server TFTPDWIN 0.4.2 – ‘Filename’ Remote Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-04-30	Webthaiapp – ‘detail.php?cat’ Blind SQL Injection	webapps	php	Xelenonz
2010-04-30	Campsite 3.x – ‘article_id’ SQL Injection	webapps	php	Stefan Esser
2010-04-30	IPSwitch IMail LDAP Daemon/Service – Remote Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-04-30	Private Wire Gateway – Remote Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-04-30	UltraISO – ‘.cue’ File Parsing Buffer Overflow (Metasploit)	local	windows	Metasploit
2010-04-30	SecureCRT 4.0 Beta 2 SSH1 – Remote Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-04-30	Microsoft Windows RSH daemon – Remote Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-04-30	Puntal 2.1.0 – Remote File Inclusion	webapps	php	eidelweiss
2010-04-30	Sasser Worm avserve – FTP PORT Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-04-30	Autodesk IDrop – ActiveX Control Heap Memory Corruption (Metasploit)	remote	windows	Metasploit
2010-04-30	MailEnable IMAPD Professional (2.35) – Login Request Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-04-30	Computer Associates – Alert Notification Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-04-30	Joomla! Component Newsfeeds – SQL Injection	webapps	php	Archimonde
2010-04-30	osCommerce 3.0a5 – Local File Inclusion / HTML Injection	webapps	php	Jordi Chancel
2010-04-30	TABS MailCarrier 2.51 – SMTP EHLO Overflow (Metasploit)	remote	windows	Metasploit
2010-04-30	AOL Radio AmpX – ActiveX Control ‘ConvertFile()’ Remote Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-04-30	Roxio CinePlayer – ActiveX Control Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-04-30	Microsoft SQL Server – Resolution Overflow (MS02-039) (Metasploit)	remote	windows	Metasploit
2010-04-30	New-CMS – Multiple Vulnerabilities	webapps	php	Dr. Alberto Fontanella
2010-04-30	Berlios GPSD – Format String (Metasploit)	remote	linux	Metasploit
2010-04-30	WinZip FileView – ‘WZFILEVIEW.FileViewCtrl.61’ ActiveX Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-04-30	UltraVNC 1.0.1 – Client Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-04-30	CA BrightStor Discovery Service – TCP Overflow (Metasploit)	remote	windows	Metasploit
2010-04-30	Microsoft OWC Spreadsheet – HTMLURL Buffer Overflow (MS09-043) (Metasploit)	remote	windows	Metasploit
2010-04-30	AutoDealer 1.0/2.0 – MSSQL Injection	webapps	php	Sid3^effects
2010-04-30	Cyrus IMAPD – pop3d popsubfolders USER Buffer Overflow (Metasploit)	remote	linux	Metasploit
2010-04-30	LeapWare LeapFTP 2.7.3.600 – PASV Reply Client Overflow (Metasploit)	remote	windows	Metasploit
2010-04-30	Adobe – ‘Collab.getIcon()’ Local Buffer Overflow (Metasploit) (1)	local	windows	Metasploit
2010-04-30	AwingSoft Winds3D Player – SceneURL Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-04-30	RealVNC 3.3.7 – Client Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-04-30	Microsoft IIS – Phone Book Service Overflow (MS00-094) (Metasploit)	remote	windows	Metasploit
2010-04-30	JobPost – SQL Injection	webapps	php	Sid3^effects
2010-04-30	Xftp FTP Client 3.0 – PWD Remote Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-04-29	Scratcher – SQL Injection / Cross-Site Scripting	webapps	php	cr4wl3r
2010-04-29	Apple Safari 4.0.3 (Windows x86) – ‘CSS’ Remote Denial of Service (2)	dos	windows_x86	ITSecTeam
2010-04-29	chCounter – indirect SQL Injection / Cross-Site Scripting	webapps	php	Valentin