Exploits

日期	标题	类型	平台	作者
2010-05-19	CommuniCrypt Mail 1.16 – ‘ANSMTP.dll/AOSMTP.dll’ ActiveX	remote	windows	Lincoln
2010-05-19	Joomla! Component com_horses – ‘id’ SQL Injection	webapps	php	Kernel Security Group
2010-05-19	Joomla! Component Percha Image Attach 1.1 – ‘Controller’ Traversal Arbitrary File Access	webapps	php	AntiSecurity
2010-05-19	SyncBack Freeware 3.2.20.0 – Local Overflow (SEH)	local	windows	Lincoln
2010-05-19	DBCart – ‘article.php’ SQL Injection	webapps	php	v3n0m
2010-05-19	Palo Alto Network Vulnerability – Cross-Site Scripting	webapps	hardware	Jeromie Jackson
2010-05-19	DB[CMS] – ‘section.php’ SQL Injection	webapps	php	CoBRa_21
2010-05-19	SoftDirec 1.05 – ‘delete_confirm.php’ Cross-Site Scripting	webapps	php	indoushka
2010-05-19	McAfee Email Gateway – Web Administration Broken Access Control	webapps	freebsd	Nahuel Grisolia
2010-05-19	Google Chrome 4.1.249.1059 – Cross Origin Bypass in Google URL (GURL)	remote	windows	Jordi Chancel
2010-05-19	McAfee Email Gateway 6.7.1 – ‘systemWebAdminConfig.do’ Remote Security Bypass	remote	windows	Nahuel Grisolia
2010-05-19	Battle Scrypt – Arbitrary File Upload	webapps	php	DigitALL
2010-05-19	Caucho Resin Professional 3.1.5 – ‘/resin-admin/digest.php’ Multiple Cross-Site Scripting Vulnerabilities	webapps	php	xuanmumu
2010-05-19	C99Shell 1.0 Pre-Release build 16 (Web Shell) – ‘ch99.php’ Cross-Site Scripting	webapps	php	indoushka
2010-05-19	Shopzilla Affiliate Script PHP – ‘search.php’ Cross-Site Scripting	webapps	php	Andrea Bocchetti
2010-05-19	Joomla! Component Percha Multicategory Article 0.6 – ‘Controller’ Arbitrary File Access	webapps	php	AntiSecurity
2010-05-18	Lokomedia CMS – ‘sukaCMS’ Local File Disclosure	webapps	php	vir0e5
2010-05-18	Attachmate Reflection Standard Suite 2008 – ActiveX Buffer Overflow (PoC)	dos	windows	Rad L. Sneak
2010-05-18	Joomla! Component com_packages – SQL Injection	webapps	php	Kernel Security Group
2010-05-18	Webloader 7 < 8 - 'vid' SQL Injection	webapps	php	ByEge
2010-05-18	B-Hind CMS (tiny_mce) – Arbitrary File Upload	webapps	php	innrwrld & h00die
2010-05-18	TS Special Edition 7.0 – Multiple Vulnerabilities	webapps	php	IHTeam
2010-05-18	TeamViewer 5.0.8232 – Remote Buffer Overflow	remote	windows	fl0 fl0w
2010-05-18	WebJaxe – SQL Injection	webapps	php	IHTeam
2010-05-18	Linux Kernel 2.6.x – Btrfs Cloned File Security Bypass	local	linux	Dan Rosenberg
2010-05-18	ChillyCMS – Blind SQL Injection	webapps	php	IHTeam
2010-05-18	ecoCMS 18.4.2010 – ‘admin.php’ Cross-Site Scripting	webapps	php	High-Tech Bridge SA
2010-05-18	phpMyAdmin 2.6.3-pl1 – Cross-Site Scripting / Full Path	webapps	php	cp77fk4r
2010-05-18	Joomla! Component JComments 2.1 – ‘ComntrNam’ Cross-Site Scripting	webapps	php	High-Tech Bridge SA
2010-05-18	gpEasy CMS 1.6.2 – ‘editing_files.php’ Cross-Site Scripting	webapps	php	High-Tech Bridge SA
2010-05-18	NPDS REvolution 10.02 – ‘download.php’ Cross-Site Scripting	webapps	php	High-Tech Bridge SA
2010-05-18	QtWeb Browser 3.3 – Denial of Service	dos	windows	PoisonCode
2010-05-18	DB[CMS] 2.0.1 – SQL Injection	webapps	php	Pokeng
2010-05-18	NetBSD 5.0 – Hack PATH Environment Overflow (PoC)	dos	netbsd_x86	JMIT
2010-05-18	NetBSD 5.0 – Hack GENOCIDE Environment Overflow (PoC)	dos	netbsd_x86	JMIT
2010-05-17	Joomla! Component com_event – Multiple Vulnerabilities	webapps	php	ALTBTA
2010-05-17	Joomla! Component com_crowdsource – SQL Injection	webapps	php	ByEge
2010-05-17	Tainos Webdesign (All Scripts) – SQL Injection / Cross-Site Scripting / HTML Injection	webapps	php	CoBRa_21
2010-05-17	JE CMS 1.1 – SQL Injection	webapps	php	AntiSecurity
2010-05-17	Abyss Web Server X1 – Cross-Site Request Forgery	webapps	windows	John Leitch
2010-05-17	Joomla! Component com_event – SQL Injection	webapps	php	anonymous
2010-05-17	MyNews CMS 1.0 – SQL Injection / Local File Inclusion / Cross-Site Scripting	webapps	php	mr_me
2010-05-17	MidiCart PHP/ASP – Arbitrary File Upload	webapps	php	DigitALL
2010-05-17	PonVFTP – Insecure Cookie Authentication Bypass	webapps	php	SkuLL-HackeR
2010-05-17	PHP-Fusion 4.01 – SQL Injection	webapps	php	Ma3sTr0-Dz
2010-05-17	PHP Gamepage – SQL Injection	webapps	php	v4lc0m87
2010-05-17	Platnik 8.1.1 – Multiple SQL Injections	webapps	asp	podatnik386
2010-05-16	I-Vision CMS – Cross-Site Scripting / SQL Injection	webapps	php	Ariko-Security
2010-05-16	Tainos – Multiple Vulnerabilities	webapps	php	XroGuE
2010-05-16	EgO 0.7b – ‘FCKeditor’ Arbitrary File Upload	webapps	php	ITSecTeam