Exploits

日期	标题	类型	平台	作者
2010-05-23	BBMedia Design’s – SQL Injection	webapps	php	XroGuE
2010-05-23	Kingsoft Webshield ‘KAVSafe.sys’ 2010.4.14.609 (2010.5.23) – Kernel Mode Privilege Escalation	local	windows	Xuanyuan Smart
2010-05-23	webperformance eCommerce – SQL Injection	webapps	php	cyberlog
2010-05-23	runt-communications Design – SQL Injection	webapps	php	XroGuE
2010-05-23	MMA Creative Design – SQL Injection	webapps	php	XroGuE
2010-05-23	Media Player Classic 1.3.1774.0 – ‘.rm’ Buffer Overflow (PoC)	dos	windows	sniper ip
2010-05-22	Rave Creations/UHM – ‘artists.asp’ SQL Injection	webapps	asp	Ra3cH
2010-05-22	DotNetNuke – Arbitrary File Upload	webapps	asp	Ra3cH & Ma3sTr0-Dz
2010-05-22	cyberhost – ‘default.asp’ SQL Injection	webapps	asp	redst0rm
2010-05-22	eWebEditor 1.x – ‘WYSIWYG’ Arbitrary File Upload	webapps	php	Ma3sTr0-Dz
2010-05-22	(Gabriel’s FTP Server) Open & Compact FTP Server 1.2 – ‘PORT’ Remote Denial of Service	dos	windows	Ma3sTr0-Dz
2010-05-22	hustoj – ‘FCKeditor’ Arbitrary File Upload	webapps	php	eidelweiss
2010-05-22	E-Commerce Group – ‘cat.php’ SQL Injection	webapps	php	BLack Revenge
2010-05-22	Azimut Technologie – Admin Authentication Bypass	webapps	php	Ra3cH
2010-05-22	Tochin eCommerce – Multiple Remote s	webapps	php	cyberlog
2010-05-22	Asset Manager – Arbitrary File Upload	webapps	asp	Ra3cH
2010-05-22	WordPress Plugin TinyBrowser – Arbitrary File Upload	webapps	php	Ra3cH
2010-05-22	Recipes Website 1.0 – SQL Injection	webapps	php	Mr.ThieF
2010-05-22	ECShop – ‘search.php’ SQL Injection	webapps	php	Jannock
2010-05-21	ConPresso 4.0.7 – SQL Injection	webapps	php	Gamoscu
2010-05-21	SolarWinds TFTP Server 10.4.0.10 – Denial of Service	dos	windows	Nullthreat
2010-05-21	3Com* iMC (Intelligent Management Center) – Cross-Site Scripting / Information Disclosure Flaws	webapps	windows	Richard Brain
2010-05-21	3Com* iMC (Intelligent Management Center) – Traversal File Retrieval	webapps	windows	Richard Brain
2010-05-21	Rumba FTP Client ‘FTPSFtp.dll’ 4.2.0.0 – ‘OpenSession()’ Local Buffer Overflow	local	windows	sinn3r
2010-05-21	Open-AudIT – Multiple Vulnerabilities	webapps	php	Sébastien Duquette
2010-05-21	Specialized Data Systems Parent Connect 2010.04.11 – Multiple SQL Injections	webapps	php	epixoip
2010-05-21	Sun Solaris 10 – ‘in.ftpd’ Long Command Handling Security	dos	solaris	Maksymilian Arciemowicz
2010-05-21	Sun Solaris 10 – Nested Directory Tree Local Denial of Service	dos	solaris	Maksymilian Arciemowicz
2010-05-21	Online Job Board – Authentication Bypass	webapps	php	cr4wl3r
2010-05-21	cardinalCMS 1.2 – ‘FCKeditor’ Arbitrary File Upload	webapps	php	Ma3sTr0-Dz
2010-05-21	Apache Axis2 Administration Console – (Authenticated) Cross-Site Scripting	webapps	multiple	Richard Brain
2010-05-21	JV2 Folder Gallery 3.1 – ‘gallery.php’ Remote File Inclusion	webapps	php	Sn!pEr.S!Te Hacker
2010-05-21	WinDirectAudio 1.0 – ‘.wav’ (PoC)	dos	windows	ahwak2000
2010-05-21	Online University – Authentication Bypass	webapps	php	cr4wl3r
2010-05-20	Snipe Gallery 3.1 – ‘image.php?cfg_admin_path’ Remote File Inclusion	webapps	php	Sn!pEr.S!Te Hacker
2010-05-20	Snipe Gallery 3.1 – ‘gallery.php?cfg_admin_path’ Remote File Inclusion	webapps	php	Sn!pEr.S!Te Hacker
2010-05-20	NPDS REvolution 10.02 – ‘admin.php’ Cross-Site Request Forgery	webapps	php	High-Tech Bridge SA
2010-05-20	webYourPhotos 6.05 – ‘index.php’ Remote File Inclusion	webapps	php	Sn!pEr.S!Te Hacker
2010-05-20	ComponentOne VSFlexGrid 7/8 – ‘Archive()’ method Remote Buffer Overflow	remote	windows	Ma3sTr0-Dz
2010-05-20	Spaw Editor 1.0/2.0 – Arbitrary File Upload	webapps	asp	Ma3sTr0-Dz
2010-05-20	Powder Blue Design – SQL Injection	webapps	php	cyberlog
2010-05-20	Entry Level Content Management System (EL CMS) – SQL Injection	webapps	php	vir0e5
2010-05-20	DB[CMS] – ‘article.php’ SQL Injection	webapps	php	blackraptor
2010-05-20	IMEDIA – ‘index.php’ SQL Injection	webapps	php	kannibal615
2010-05-20	Lisk CMS 4.4 – ‘id’ Multiple Cross-Site Scripting / SQL Injections	webapps	php	High-Tech Bridge SA
2010-05-20	Renista CMS – SQL Injection	webapps	asp	Amir Afghanian
2010-05-20	U.S.Robotics USR5463 0.06 Firmware – ‘setup_ddns.exe’ HTML Injection	remote	hardware	SH4V
2010-05-19	DBCart – ‘article.php’ SQL Injection	webapps	php	v3n0m
2010-05-19	Palo Alto Network Vulnerability – Cross-Site Scripting	webapps	hardware	Jeromie Jackson
2010-05-19	DB[CMS] – ‘section.php’ SQL Injection	webapps	php	CoBRa_21