multiple

日期	标题	类别	作者
2012-12-20	NetWin SurgeFTP – (Authenticated) Admin Command Injection (Metasploit)	remote	Spencer McIntyre
2012-12-09	Splunk 5.0 – Custom App Remote Code Execution (Metasploit)	remote	Metasploit
2012-12-06	Adobe IndesignServer 5.5 – SOAP Server Arbitrary Script Execution (Metasploit)	remote	Metasploit
2012-12-03	Symantec Messaging Gateway 9.5.3-3 – Cross-Site Request Forgery	webapps	Ben Williams
2012-12-03	FirePass SSL VPN – Local File Inclusion	webapps	SEC Consult
2012-12-02	MySQL – Remote User Enumeration	remote	kingcope
2012-11-29	Oracle OpenSSO 8.0 – Multiple Cross-Site Scripting POST Injection Vulnerabilities	webapps	LiquidWorm
2012-11-26	Forescout CounterACT – ‘a’ Open Redirection	webapps	Joseph Sheridan
2012-11-26	Websense Proxy – Filter Bypass	dos	Nahuel Grisolia
2012-11-23	Greenstone – Multiple Vulnerabilities	remote	AkaStep
2012-11-20	SonicWALL CDP 5040 6.x – Multiple Vulnerabilities	webapps	Vulnerability-Lab
2012-11-19	Splunk 4.3.1 – Denial of Service	dos	Alexander Klink
2012-11-16	Media Player Classic (MPC) 1.5 – WebServer Request Handling Remote Denial of Service	dos	X-Cisadane
2012-11-13	Java Applet – JAX-WS Remote Code Execution (Metasploit)	remote	Metasploit
2012-11-09	ESRI ArcGIS for Server – ‘where’ SQL Injection	webapps	anonymous
2012-11-07	Cryptocat 2.0.21 Chrome Extension – ‘img/keygen.gif’ File Information Disclosure	remote	Mario Heiderich
2012-11-07	Cryptocat 2.0.22 – Arbitrary Script Injection	remote	Mario Heiderich
2012-11-05	Sophos Products – Multiple Vulnerabilities	remote	Tavis Ormandy
2012-11-05	ZPanel 10.0.1 – Cross-Site Request Forgery / Cross-Site Scripting / SQL Injection / Password Reset	webapps	pcsjj
2012-10-28	ManageEngine Security Manager Plus 5.5 build 5505 – SQL Injection (Metasploit)	remote	Metasploit
2012-10-19	ManageEngine Security Manager Plus 5.5 build 5505 – Remote Root/SYSTEM SQL Injection	remote	xistence
2012-10-19	ManageEngine Security Manager Plus 5.5 build 5505 – Directory Traversal	webapps	xistence
2012-10-18	Oracle Database – Protocol Authentication Bypass	local	Esteban Martinez Fayo
2012-10-17	Oracle WebCenter Sites (FatWire Content Server) – Multiple Vulnerabilities	webapps	SEC Consult