Exploits

日期	标题	类型	平台	作者
2010-05-27	FreeBSD 8.0 – ‘ftpd’ (FreeBSD-SA-10:05) Off-By-One (PoC)	dos	freebsd	Maksymilian Arciemowicz
2010-05-26	Spaceacre – ‘/index.php’ SQL Injection / HTML / Cross-Site Scripting Injection	webapps	php	CoBRa_21
2010-05-26	Multi Vendor Mall – ‘itemdetail.php?& shop.php’ SQL Injection	webapps	php	CoBRa_21
2010-05-26	Easy Address book WebServer 1.2 – Cross-Site Request Forgery	webapps	php	Markot
2010-05-26	Adobe Photoshop CS4 Extended 11.0 – ‘.ASL’ File Handling Remote Buffer Overflow (PoC)	dos	windows	LiquidWorm
2010-05-26	Adobe Photoshop CS4 Extended 11.0 – ‘.GRD’ File Handling Remote Buffer Overflow (PoC)	dos	windows	LiquidWorm
2010-05-26	Adobe Photoshop CS4 Extended 11.0 – ‘.ABR’ File Handling Remote Buffer Overflow (PoC)	dos	windows	LiquidWorm
2010-05-26	Brekeke PBX 2.4.4.8 – ‘pbx/gate’ Cross-Site Request Forgery	remote	multiple	John Leitch
2010-05-26	RapidWareX 2.0.1 – ‘WebUI’ Cross-Site Request Forgery	webapps	windows	l3D
2010-05-26	Home FTP Server 1.10.3 (build 144) – Cross-Site Request Forgery	remote	windows	John Leitch
2010-05-26	Book Gallery – ‘aboutbook.php’ SQL Injection	webapps	php	Mr.P3rfekT
2010-05-26	Worldweaver DX Studio Player 3.0.29 – ‘shell.execute()’ Command Execution (Metasploit)	remote	windows	Metasploit
2010-05-26	Multi Vendor Mall – ‘pages.php’ SQL Injection	webapps	php	Newbie_Campuz
2010-05-26	md5 Encryption Decryption PHP Script – ‘index.php’ Cross-Site Scripting	webapps	php	indoushka
2010-05-26	Spaceacre – SQL Injection / Cross-Site Scripting / HTML Injection	webapps	php	XroGuE
2010-05-25	Website Design and Hosting By Netricks Inc – ‘news.php’ SQL Injection	webapps	php	Dr.SiLnT HilL
2010-05-25	Nitro Web Gallery – SQL Injection	webapps	php	cyberlog
2010-05-25	Webit CMS – SQL Injection	webapps	php	CoBRa_21
2010-05-25	web5000 – ‘page_show’ SQL Injection	webapps	php	BLack Revenge
2010-05-25	(Gabriel’s FTP Server) Open & Compact FTP Server 1.2 – Universal Denial of Service	dos	windows	Dr_IDE
2010-05-25	Webby WebServer – Overflow (SEH) (PoC)	dos	windows	m-1-k-3
2010-05-25	Simpel Side – ‘index2.php’ SQL Injection	webapps	php	MN9
2010-05-24	PHP Graphy 0.9.7 – ‘index.php’ Remote Command Execution	webapps	php	Sn!pEr.S!Te Hacker
2010-05-24	BBMedia Design’s – ‘news_more.php’ SQL Injection	webapps	php	gendenk
2010-05-24	Blaze Apps – Multiple Vulnerabilities	webapps	asp	AmnPardaz
2010-05-24	Telia Web Design – ‘index.php’ SQL Injection	webapps	php	CoBRa_21
2010-05-24	Cisco DPC2100 2.0.2 r1256-060303 – Multiple Security Bypass / Cross-Site Request Forgery Vulnerabilities	remote	hardware	Dan Rosenberg
2010-05-24	JV2 Folder Gallery 3.1.1 – ‘popup_slideshow.php’ Multiple Vulnerabilities	webapps	php	eidelweiss
2010-05-24	runt-communications Design – ‘property_more.php’ SQL Injection	webapps	php	CoBRa_21
2010-05-24	Webloader 8 – SQL Injection	webapps	php	ByEge
2010-05-24	e107 – Code Exection	webapps	multiple	McFly
2010-05-24	ProWeb Design – SQL Injection	webapps	multiple	cyberlog
2010-05-24	infoware – SQL Injection	webapps	php	cyberlog
2010-05-24	Blox CMS – SQL Injection	webapps	php	CoBRa_21
2010-05-24	Microsoft Outlook Web Access (OWA) 8.2.254.0 – Information Disclosure	webapps	windows	Praveen Darshanam
2010-05-24	LiSK CMS 4.4 – SQL Injection	webapps	php	High-Tech Bridge SA
2010-05-24	REvolution 10.02 – Cross-Site Request Forgery	webapps	php	High-Tech Bridge SA
2010-05-24	ALSCO CMS – SQL Injection	webapps	php	PrinceofHacking
2010-05-24	360 Web Manager 3.0 – ‘webpages-form-led-edit.php’ SQL Injection	webapps	php	High-Tech Bridge SA
2010-05-24	WebAsys – Blind SQL Injection	webapps	php	zsh.shell
2010-05-24	Ruubikcms 1.0.3 – ‘index.php’ Cross-Site Scripting	webapps	php	High-Tech Bridge SA
2010-05-24	Joomla! Component Q-Personel 1.0 – SQL Injection	webapps	php	Valentin Hoebel
2010-05-24	Getsimple CMS 2.01 – ‘components.php’ Cross-Site Scripting	webapps	php	High-Tech Bridge SA
2010-05-24	interuse Website Builder & design – ‘index2.php’ SQL Injection	webapps	php	CoBRa_21
2010-05-24	RazorCMS 1.0 – ‘/admin/index.php’ HTML Injection	webapps	php	High-Tech Bridge SA
2010-05-24	Apache Axis2 1.4.1 – Local File Inclusion	webapps	php	HC
2010-05-24	Schaf-CMS 1.0 – SQL Injection	webapps	php	Manas58
2010-05-23	OpenForum 2.2 b005 – ‘saveAsAttachment()’ Method Arbitrary File Creation	webapps	php	John Leitch
2010-05-23	eCreo – SQL Injection	webapps	php	cyberlog
2010-05-23	goffgrafix Design’s – SQL Injection	webapps	php	XroGuE