Exploits

日期	标题	类型	平台	作者
2010-04-29	Articles Directory – Authentication Bypass	webapps	php	Sid3^effects
2010-04-29	ddrLPD 1.0 – Remote Denial of Service	dos	windows	Bisphemol A
2010-04-29	Scratcher – SQL Injection / Cross-Site Scripting	webapps	php	cr4wl3r
2010-04-29	Apple Safari 4.0.3 (Windows x86) – ‘CSS’ Remote Denial of Service (2)	dos	windows_x86	ITSecTeam
2010-04-29	chCounter – indirect SQL Injection / Cross-Site Scripting	webapps	php	Valentin
2010-04-29	Ucenter Projekt 2.0 – Insecure crossdomain (Cross-Site Scripting)	webapps	php	indoushka
2010-04-29	Zyke CMS 1.0 – Arbitrary File Upload	webapps	php	indoushka
2010-04-29	Zyke CMS 1.1 – Bypass	webapps	php	indoushka
2010-04-29	TaskFreak 0.6.2 – SQL Injection	webapps	php	Justin C. Klein Keane
2010-04-29	iScripts VisualCaster – SQL Injection	webapps	php	Sid3^effects
2010-04-29	Microsoft SharePoint Server 2007 – Cross-Site Scripting	webapps	windows	High-Tech Bridge SA
2010-04-29	DZCP (deV!L`z Clanportal) 1.5.3 – Multiple Vulnerabilities	webapps	php	indoushka
2010-04-29	Socialware 2.2 – Upload / Cross-Site Scripting	webapps	php	Sid3^effects
2010-04-28	Webmoney Advisor – ActiveX Remote Denial of Service	dos	windows	Go0o$E
2010-04-28	Tele Data’s Contact Management Server 0.9 – ‘Username’ SQL Injection	webapps	php	John Leitch
2010-04-28	PHP Video Battle – SQL Injection	webapps	php	v3n0m
2010-04-28	velBox 1.2 – Insecure Cookie Authentication Bypass	webapps	php	indoushka
2010-04-28	Modelbook – ‘casting_view.php’ SQL Injection	webapps	php	v3n0m
2010-04-28	Apache ActiveMQ 5.3 – ‘admin/queueBrowse’ Cross-Site Scripting	remote	multiple	arun kethipelly
2010-04-28	GeneShop 5.1.1 – SQL Injection	webapps	php	41.w4r10r
2010-04-28	Samba 2.2.2 < 2.2.6 - 'nttrans' Remote Buffer Overflow (Metasploit) (1)	remote	linux	Metasploit
2010-04-28	gpEasy 1.6.1 – Cross-Site Request Forgery (Add Admin)	webapps	php	Giuseppe 'giudinvx' D'Inverno
2010-04-28	Joomla! Component Wap4Joomla! – ‘wapmain.php’ SQL Injection	webapps	php	Manas58
2010-04-28	SoftBizScripts Hosting Script – SQL Injection	webapps	php	41.w4r10r
2010-04-28	SoftBizScripts Dating Script – SQL Injection	webapps	php	41.w4r10r
2010-04-28	Microsoft Windows Media Services – ConnectFunnel Stack Buffer Overflow (MS10-025) (Metasploit)	remote	windows	Metasploit
2010-04-28	Apple Safari 4.0.3/4.0.4 – Stack Exhaustion	dos	windows	Fredrik Nordberg Almroth
2010-04-28	Pligg CMS 1.0.4 – ‘story.php’ SQL Injection	webapps	php	Don Tukulesto
2010-04-28	NIBE heat pump – Local File Inclusion	webapps	cgi	Jelmer de Hen
2010-04-28	NIBE heat pump – Remote Code Execution	webapps	cgi	Jelmer de Hen
2010-04-28	Joomla! Component com_jesectionfinder – Arbitrary File Upload	webapps	php	Sid3^effects
2010-04-27	2DayBiz Auction Script – Authentication Bypass	webapps	php	Sid3^effects
2010-04-27	SmartBlog 1.3 – SQL Injection / Cross-Site Scripting	webapps	php	indoushka
2010-04-27	Joomla! Component Graphics 1.0.6 – Local File Inclusion	webapps	php	wishnusakti + inc0mp13te
2010-04-27	i-Net Online Community – Cross-Site Scripting / Authentication Bypass	webapps	php	Sid3^effects
2010-04-27	ProArcadeScript – ‘search.php’ Cross-Site Scripting	webapps	php	Sid3^effects
2010-04-27	Joomla! Component ABC 1.1.7 – SQL Injection	webapps	php	AntiSecurity
2010-04-27	Ramaas Software CMS – SQL Injection	webapps	php	41.w4r10r
2010-04-27	Joomla! Component SmartSite 1.0.0 – Local File Inclusion	webapps	php	AntiSecurity
2010-04-27	FreeRealty(Free Real Estate Listing Software) – Authentication Bypass	webapps	php	Sid3^effects
2010-04-27	Linux Kernel 2.6.34 – ‘find_keyring_by_name()’ Local Memory Corruption	dos	linux	Toshiyuki Okajima
2010-04-27	Joomla! Component NoticeBoard 1.3 – Local File Inclusion	webapps	php	AntiSecurity
2010-04-27	Joomla! Component Ultimate Portfolio 1.0 – Local File Inclusion	webapps	php	AntiSecurity
2010-04-27	Webkit (Apple Safari 4.0.5) – Blink Tag Stack Exhaustion Denial of Service	dos	windows	Dr_IDE
2010-04-27	Acart 2.0 Shopping Cart – Software Backup Dump	webapps	asp	indoushka
2010-04-27	Avast! 4.7 – ‘aavmker4.sys’ Local Privilege Escalation	local	windows	ryujin
2010-04-27	CLScript.com Classifieds Software – SQL Injection	webapps	php	41.w4r10
2010-04-27	Acoustica 3.32 CD/DVD Label Maker – ‘.m3u’ (PoC)	dos	windows	chap0
2010-04-27	Help Center Live 2.0.6 – ‘module=helpcenter&file=’ Local File Inclusion	webapps	php	41.w4r10r
2010-04-27	Portaneo Portal 2.2.3 – Arbitrary File Upload	webapps	php	eidelweiss