Exploits

日期	标题	类型	平台	作者
2010-04-30	Autodesk IDrop – ActiveX Control Heap Memory Corruption (Metasploit)	remote	windows	Metasploit
2010-04-30	MailEnable IMAPD Professional (2.35) – Login Request Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-04-30	Computer Associates – Alert Notification Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-04-30	Joomla! Component Newsfeeds – SQL Injection	webapps	php	Archimonde
2010-04-30	osCommerce 3.0a5 – Local File Inclusion / HTML Injection	webapps	php	Jordi Chancel
2010-04-30	TABS MailCarrier 2.51 – SMTP EHLO Overflow (Metasploit)	remote	windows	Metasploit
2010-04-30	AOL Radio AmpX – ActiveX Control ‘ConvertFile()’ Remote Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-04-30	Roxio CinePlayer – ActiveX Control Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-04-30	Microsoft SQL Server – Resolution Overflow (MS02-039) (Metasploit)	remote	windows	Metasploit
2010-04-30	New-CMS – Multiple Vulnerabilities	webapps	php	Dr. Alberto Fontanella
2010-04-30	Berlios GPSD – Format String (Metasploit)	remote	linux	Metasploit
2010-04-30	WinZip FileView – ‘WZFILEVIEW.FileViewCtrl.61’ ActiveX Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-04-30	UltraVNC 1.0.1 – Client Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-04-30	CA BrightStor Discovery Service – TCP Overflow (Metasploit)	remote	windows	Metasploit
2010-04-30	AutoDealer 1.0/2.0 – MSSQL Injection	webapps	php	Sid3^effects
2010-04-30	Cyrus IMAPD – pop3d popsubfolders USER Buffer Overflow (Metasploit)	remote	linux	Metasploit
2010-04-30	LeapWare LeapFTP 2.7.3.600 – PASV Reply Client Overflow (Metasploit)	remote	windows	Metasploit
2010-04-30	Adobe – ‘Collab.getIcon()’ Local Buffer Overflow (Metasploit) (1)	local	windows	Metasploit
2010-04-30	AwingSoft Winds3D Player – SceneURL Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-04-30	RealVNC 3.3.7 – Client Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-04-30	Microsoft IIS – Phone Book Service Overflow (MS00-094) (Metasploit)	remote	windows	Metasploit
2010-04-30	Microsoft OWC Spreadsheet – HTMLURL Buffer Overflow (MS09-043) (Metasploit)	remote	windows	Metasploit
2010-04-30	JobPost – SQL Injection	webapps	php	Sid3^effects
2010-04-30	Xftp FTP Client 3.0 – PWD Remote Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-04-30	B2B Gold Script – ‘id’ SQL Injection	webapps	php	v3n0m
2010-04-30	MySQL – yaSSL CertDecoder::GetName Buffer Overflow (Metasploit)	remote	linux	Metasploit
2010-04-30	Solaris dtspcd – Remote Heap Overflow (Metasploit)	remote	solaris_sparc	Metasploit
2010-04-30	ec21 clone 3.0 – ‘id’ SQL Injection	webapps	php	v3n0m
2010-04-30	SpamAssassin spamd – Remote Command Execution (Metasploit)	remote	linux	Metasploit
2010-04-30	CA iTechnology iGateway – Debug Mode Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-04-30	EasyFTP Server 1.7.0.11 – ‘CWD’ Stack Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-04-30	Microsoft IIS 5.0 – Printer Host Header Overflow (MS01-023) (Metasploit)	remote	windows	Metasploit
2010-04-30	Computer Associates ARCserve – REPORTREMOTEEXECUTECML Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-04-30	Timbuktu 8.6.6 – PlughNTCommand Named Pipe Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-04-30	PAJAX – Remote Command Execution (Metasploit)	webapps	php	Metasploit
2010-04-30	BaoFeng Storm – ‘mps.dll’ ActiveX OnBeforeVideoDownload Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-04-30	Adobe – ‘Doc.media.newPlayer’ Use-After-Free (Metasploit) (1)	local	windows	Metasploit
2010-04-30	MailEnable IMAPD 1.54 – STATUS Request Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-04-30	Microsoft IIS 4.0 – ‘.htr’ Path Overflow (MS02-018) (Metasploit)	remote	windows	Metasploit
2010-04-30	CA BrightStor Agent for Microsoft SQL – Remote Overflow (Metasploit)	remote	windows	Metasploit
2010-04-30	Squid – NTLM (Authenticated) Overflow (Metasploit)	remote	linux	Metasploit
2010-04-30	SHOUTcast DNAS/Win32 1.9.4 – File Request Format String Overflow (Metasploit)	remote	windows_x86	Metasploit
2010-04-30	CA BrightStor ARCserve – Message Engine Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-04-30	KarjaSoft Sami FTP Server 2.0.2 – USER Remote Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-04-30	Destiny Media Player 1.61 – PLS .m3u Buffer Overflow (Metasploit)	local	windows	Metasploit
2010-04-30	Microsoft Internet Explorer – Tabular Data Control ActiveX Memory Corruption (MS10-018) (Metasploit)	remote	windows	Metasploit
2010-04-30	CA BrightStor ARCserve – Message Engine Heap Overflow (Metasploit)	remote	windows	Metasploit
2010-04-29	Ucenter Projekt 2.0 – Insecure crossdomain (Cross-Site Scripting)	webapps	php	indoushka
2010-04-29	Zyke CMS 1.0 – Arbitrary File Upload	webapps	php	indoushka
2010-04-29	Zyke CMS 1.1 – Bypass	webapps	php	indoushka