Exploits

日期	标题	类型	平台	作者
2010-06-12	BrightSuite Groupware – SQL Injection	webapps	asp	L0rd CrusAd3r
2010-06-12	VU Web Visitor Analyst – Authentication Bypass	webapps	asp	L0rd CrusAd3r
2010-06-12	VU Mass Mailer – Authentication Bypass	webapps	asp	L0rd CrusAd3r
2010-06-12	VU Case Manager – Authentication Bypass	webapps	asp	L0rd CrusAd3r
2010-06-12	CP3 Studio PC Version – Denial of Service	dos	windows	chap0
2010-06-12	Media Player Classic 1.3.1774.0 – mpcpl Local Denial of Service (PoC)	dos	windows	R3d-D3V!L
2010-06-12	SolarWinds TFTP Server 10.4.0.13 – Denial of Service	dos	windows	Nullthreat
2010-06-11	DaLogin 2.2 – ‘FCKeditor’ Arbitrary File Upload	webapps	php	eidelweiss
2010-06-11	Adobe InDesign CS3 – ‘.INDD’ Handling Buffer Overflow	dos	windows	LiquidWorm
2010-06-11	Sygate Personal Firewall 5.6 build 2808 – ActiveX with DEP Bypass	remote	windows	Lincoln
2010-06-11	Parallels System Automation (PSA) – Local File Inclusion	webapps	php	Pouya Daneshmand
2010-06-11	ardeacore 2.2 – Remote File Inclusion	webapps	php	cr4wl3r
2010-06-11	Streamcast 0.9.75 – HTTP User-Agent Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-06-11	Full Site for Restaurant – SQL Injection	webapps	php	L0rd CrusAd3r
2010-06-11	DaLogin – Multiple Vulnerabilities	webapps	php	hc0
2010-06-11	Site to Store Automobile – Motorcycle Boat SQL Injection	webapps	php	L0rd CrusAd3r
2010-06-11	Development Site Professional Liberal – Company Institutional SQL Injection	webapps	php	L0rd CrusAd3r
2010-06-11	Site for Real Estate – Brokers SQL Injection	webapps	php	L0rd CrusAd3r
2010-06-11	GoodiWare GoodReader iPhone – ‘.XLS’ Denial of Service	dos	hardware	Matthew Bergin
2010-06-11	Office^2 iPhone – ‘.XLS’ Denial of Service	dos	hardware	Matthew Bergin
2010-06-11	Savy Soda Documents – Mobile Office Suite ‘.XLS’ Denial of Service	dos	hardware	Matthew Bergin
2010-06-11	Nginx 0.7.65/0.8.39 (dev) – Source Disclosure / Download	remote	windows	Jose A. Vazquez
2010-06-11	AneCMS 1.x – ‘/modules/blog/index.php’ SQL Injection	webapps	php	High-Tech Bridge SA
2010-06-11	Power Tab Editor 1.7 (Build 80) – Local Buffer Overflow	local	windows	sud0
2010-06-11	AneCMS 1.x – ‘/modules/blog/index.php’ HTML Injection	webapps	php	High-Tech Bridge SA
2010-06-11	E-PHP B2B Marketplace – Multiple Vulnerabilities	webapps	php	MizoZ
2010-06-11	Nginx 0.8.36 – Source Disclosure / Denial of Service	remote	windows	Dr_IDE
2010-06-10	Miniweb 2.0 Business Portal and Social Networking Platform – SQL Injection	webapps	php	L0rd CrusAd3r
2010-06-10	Netvolution CMS 2.x – SQL Injection Script	webapps	asp	amquen & krumel
2010-06-10	Pars Design CMS – Arbitrary File Upload	webapps	asp	Securitylab.ir
2010-06-10	Store Locator – Cross-Site Request Forgery (Add Admin)	webapps	php	JaMbA
2010-06-10	SchoolMation 2.3 – SQL Injection / Cross-Site Scripting	webapps	php	Sid3^effects
2010-06-10	AWCM CMS – Local File Inclusion	webapps	php	SwEET-DeViL
2010-06-10	Microsoft Windows Help Centre Handles – Malformed Escape Sequences Incorrectly (MS03-044)	remote	windows	Tavis Ormandy
2010-06-10	Arab Portal 2.2 – ‘members.php’ SQL Injection	webapps	php	SwEET-DeViL
2010-06-10	Microsoft Help and Support Center – ‘/sysinfo/sysinfomain.htm’ Cross-Site Scripting	remote	windows	Tavis Ormandy
2010-06-09	Joomla! Component com_jmarket – SQL Injection	webapps	php	Sid3^effects
2010-06-09	Joomla! Component com_jcommunity – SQL Injection	webapps	php	Sid3^effects
2010-06-09	Joomla! Component com_jtickets – SQL Injection	webapps	php	Sid3^effects
2010-06-09	SilverStripe CMS 2.4 – File Renaming Security Bypass	webapps	php	John Leitch
2010-06-09	Joomla! Component com_jstore – SQL Injection	webapps	php	Sid3^effects
2010-06-09	Joomla! Component Jreservation 1.5 – SQL Injection / Cross-Site Scripting	webapps	multiple	Sid3^effects
2010-06-09	Juniper Networks SA2000 SSL VPN Appliance – ‘welcome.cgi’ Cross-Site Scripting	remote	hardware	Richard Brain
2010-06-09	(GREEZLE) Global Real Estate Agent Login – Multiple SQL Injections	webapps	multiple	L0rd CrusAd3r
2010-06-09	Online Notebook Manager – SQL Injection	webapps	asp	L0rd CrusAd3r
2010-06-09	PGAUTOPro – SQL Injection / Cross-Site Scripting (2)	webapps	php	Sid3^effects
2010-06-09	Joomla! Component cinema – SQL Injection	webapps	php	Sudden_death
2010-06-09	iClone – SQL Injection	webapps	asp	Sid3^effects
2010-06-09	BtiTracker 1.3.x < 1.4.x - SQL Injection	webapps	php	TinKode
2010-06-09	Virtual Real Estate Manager 3.5 – SQL Injection	webapps	asp	Sid3^effects