Exploits

日期	标题	类型	平台	作者
2010-04-27	Webkit (Apple Safari 4.0.5) – Blink Tag Stack Exhaustion Denial of Service	dos	windows	Dr_IDE
2010-04-27	Acart 2.0 Shopping Cart – Software Backup Dump	webapps	asp	indoushka
2010-04-27	Avast! 4.7 – ‘aavmker4.sys’ Local Privilege Escalation	local	windows	ryujin
2010-04-27	CLScript.com Classifieds Software – SQL Injection	webapps	php	41.w4r10
2010-04-27	Acoustica 3.32 CD/DVD Label Maker – ‘.m3u’ (PoC)	dos	windows	chap0
2010-04-27	Help Center Live 2.0.6 – ‘module=helpcenter&file=’ Local File Inclusion	webapps	php	41.w4r10r
2010-04-26	WebKit 532.5 – Stack Exhaustion	dos	multiple	Mathias Karlsson
2010-04-26	Joomla! Component JoomRadio 1.0 – SQL Injection	webapps	php	Mr.tro0oqy
2010-04-26	Uiga Personal Portal – ‘index.php’ ‘view’ SQL Injection	webapps	php	41.w4r10r
2010-04-26	Opencourrier 2.03beta – Local File Inclusion / Remote File Inclusion	webapps	php	cr4wl3r
2010-04-26	OpenCominterne 1.01 – Local File Inclusion	webapps	php	cr4wl3r
2010-04-26	2DayBiz Advanced Poll Script – Cross-Site Scripting / Authentication Bypass	webapps	php	Sid3^effects
2010-04-26	PostNuke 0.764 Module modload – SQL Injection	webapps	php	BILGE_KAGAN
2010-04-26	Apple Safari 4.0.5 (531.22.7) – Denial of Service	dos	windows	Xss mAn
2010-04-26	CMScout 2.08 – SQL Injection	webapps	php	Dr.0rYX & Cr3W-DZ
2010-04-26	Serenity Audio Player 3.2.3 – ‘.m3u’ Remote Buffer Overflow (Metasploit)	remote	windows	blake
2010-04-26	Kasseler CMS 2.0.5 – ‘index.php’ Cross-Site Scripting	webapps	php	indoushka
2010-04-26	Serenity Audio Player 3.2.3 – ‘.m3u’ Remote Buffer Overflow	remote	windows	Madjix
2010-04-26	IDEAL Migration 2009 4.5.1 – Local Buffer Overflow	local	windows	Dr_IDE
2010-04-26	IDEAL Administration 2010 10.2 – Local Buffer Overflow	local	windows	Dr_IDE
2010-04-26	Kasseler CMS 2.0.5 – Bypass / Download Backup	webapps	php	indoushka
2010-04-26	Ektron CMS400.NET 7.5.2 – Multiple Vulnerabilities	webapps	php	Richard Moore
2010-04-25	CMS Firebrand Tec – Local File Inclusion	webapps	php	R3VAN_BASTARD
2010-04-25	HP System Management Homepage – ‘RedirectUrl’ Open Redirection	remote	multiple	Aung Khant
2010-04-25	WM Downloader 3.0.0.9 – Local Buffer Overflow (Metasploit)	local	windows	blake
2010-04-25	webessence 1.0.2 – Multiple Vulnerabilities	webapps	php	r00t
2010-04-25	PHP Classifieds 6.09 – E-mail Dump	webapps	php	indoushka
2010-04-25	TR Forum 1.5 – Cross-Site Request Forgery (Add Admin)	webapps	php	EL-KAHINA
2010-04-25	Powered by iNetScripts – Arbitrary File Upload	webapps	php	Sec-q8
2010-04-25	clipak – Arbitrary File Upload	webapps	php	indoushka
2010-04-25	Invision Power Board – Denial of Service	dos	multiple	SeeMe
2010-04-25	phpegasus 0.1.2 – ‘FCKeditor’ Arbitrary File Upload	webapps	php	eidelweiss
2010-04-25	Rumba FTP Client 4.2 – PASV Buffer Overflow (SEH)	remote	windows	zombiefx
2010-04-25	Easyzip 2000 3.5 – ‘.zip’ Local Stack Buffer Overflow	local	windows	mr_me
2010-04-24	SmodCMS 4.07 (fckeditor) – Arbitrary File Upload	webapps	php	eidelweiss
2010-04-24	Apple Mac OSX 10.6 – HFS FileSystem (Denial of Service)	dos	osx	Maksymilian Arciemowicz
2010-04-24	G5 Scripts Guestbook PHP 1.2.8 – Cross-Site Scripting	webapps	php	Valentin
2010-04-24	Sethi Family Guestbook 3.1.8 – Cross-Site Scripting	webapps	php	Valentin
2010-04-24	Alstrasoft AskMe Pro 2.1 – ‘que_id’ SQL Injection	webapps	php	v3n0m
2010-04-24	WHMCompleteSolution (WHMCS) control (WHMCompleteSolution) – SQL Injection	webapps	php	Islam DefenDers
2010-04-24	NCT Jobs Portal Script – Cross-Site Scripting / Authentication Bypass	webapps	php	Sid3^effects
2010-04-24	Madirish Webmail 2.01 – ‘baseDir’ Local/Remote File Inclusion	webapps	php	eidelweiss
2010-04-24	ZipWrangler 1.20 – ‘.zip’ File (SEH)	local	windows	TecR0c & Sud0
2010-04-24	HP Digital Imaging – ‘hpodio08.dll’ Insecure Method	remote	windows	ThE g0bL!N
2010-04-24	Openfoncier 2.00 – Local File Inclusion / Remote File Inclusion	webapps	php	cr4wl3r
2010-04-24	Openplanning 1.00 – Local File Inclusion / Remote File Inclusion	webapps	php	cr4wl3r
2010-04-24	PowerEasy 2006 – ‘ComeUrl’ Cross-Site Scripting	webapps	php	Liscker
2010-04-24	Openpresse 1.01 – Local File Inclusion	webapps	php	cr4wl3r
2010-04-23	Memorial Web Site Script – Multiple Arbitrary Delete Vulnerabilities	webapps	php	Chip d3 bi0s
2010-04-23	Memorial Web Site Script – Reset Password / Insecure Cookie Handling	webapps	php	Chip d3 bi0s