Exploits

日期	标题	类型	平台	作者
2010-04-23	Memorial Web Site Script – Multiple Arbitrary Delete Vulnerabilities	webapps	php	Chip d3 bi0s
2010-04-23	Memorial Web Site Script – Reset Password / Insecure Cookie Handling	webapps	php	Chip d3 bi0s
2010-04-23	CommView 6.1 (Build 636) – Local Blue Screen of Death (Denial of Service)	dos	windows	p4r4N0ID
2010-04-23	Excitemedia CMS – SQL Injection	webapps	php	Dr.0rYX & Cr3W-DZ
2010-04-23	NKINFOWEB – SQL Injection	webapps	php	d4rk-h4ck3r
2010-04-23	EPay Enterprise 4.13 – ‘cid’ SQL Injection	webapps	php	v3n0m
2010-04-23	memorial Web site script – ‘id’ SQL Injection	webapps	php	v3n0m
2010-04-23	In-portal 5.0.3 – Arbitrary File Upload	webapps	php	eidelweiss
2010-04-22	EDraw Flowchart ActiveX Control 2.3 – ‘EDImage.ocx’ Remote Denial of Service (IE)	dos	windows	LiquidWorm
2010-04-22	Cacti 0.8.7e – OS Command Injection	webapps	php	Nahuel Grisolia
2010-04-22	Cacti 0.8.7e – SQL Injection	webapps	php	Nahuel Grisolia
2010-04-22	Microsoft Windows XP/2000/2003 – ‘win32k.sys’ SfnINSTRING Local kernel Denial of Service	dos	windows	MJ0011
2010-04-22	FlashCard 2.6.5 – ‘id’ Cross-Site Scripting	webapps	php	Valentin
2010-04-22	Microsoft Windows XP/2000/2003 – ‘win32k.sys’ SfnLOGONNOTIFY Local kernel Denial of Service	dos	windows	MJ0011
2010-04-22	Huawei EchoLife HG520 3.10.18.5-1.0.5.0 – Remote Information Disclosure	remote	hardware	hkm
2010-04-22	OpenSSL – Remote Denial of Service	dos	linux	Andi
2010-04-22	Apache ActiveMQ 5.2/5.3 – Source Code Information Disclosure	remote	multiple	Veerendra G.G
2010-04-22	cms (id) 5.0 – SQL Injection	webapps	php	spykit
2010-04-22	Xftp client 3.0 – ‘PWD’ Remote Overflow	remote	windows	zombiefx
2010-04-22	AJ Shopping Cart 1.0 (maincatid) – SQL Injection	webapps	php	v3n0m
2010-04-22	AJ Matrix 3.1 – ‘id’ Multiple SQL Injections	webapps	php	v3n0m
2010-04-22	phpGreetCards 3.7 – Cross-Site Scripting	webapps	php	Valentin
2010-04-22	Apache Tomcat 5.5.0 < 5.5.29 / 6.0.0 < 6.0.26 - Information Disclosure	remote	multiple	Deniz Cevik
2010-04-22	EDraw Flowchart ActiveX Control 2.3 – ‘.edd parsing’ Buffer Overflow	local	windows	LiquidWorm
2010-04-21	Viscom Software Movie Player Pro SDK ActiveX 6.8 – Remote Buffer Overflow	remote	windows	shinnai
2010-04-21	e107 CMS 0.7.19 – Cross-Site Request Forgery	webapps	php	High-Tech Bridge SA
2010-04-21	Joomla! Component MMS Blog 2.3.0 – Local File Inclusion	webapps	php	AntiSecurity
2010-04-21	Joomla! Component OrgChart 1.0.0 – Local File Inclusion	webapps	php	AntiSecurity
2010-04-21	Joomla! Component WMI 1.5.0 – Local File Inclusion	webapps	php	wishnusakti + inc0mp13te
2010-04-21	v2marketplacescript Upload_images Script (-7777) – Arbitrary File Upload	webapps	php	cyberlog
2010-04-21	Apache OFBiz – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Lucas Apa
2010-04-21	CactuShop – User Invoices Persistent Cross-Site Scripting	webapps	asp	7Safe
2010-04-21	ZipGenius 6.3.1.2552 – ‘zgtips.dll’ Local Stack Buffer Overflow	local	windows	corelanc0d3r
2010-04-21	Joomla! Component com_portfolio – Local File Disclosure	webapps	php	Mr.tro0oqy
2010-04-21	DBSite wb CMS – ‘index.php’ Multiple Cross-Site Scripting Vulnerabilities	webapps	php	The_Exploited
2010-04-21	Multiple Browsers – Audio Tag Denial of Service	dos	multiple	Chase Higgins
2010-04-21	e107 0.7.x – ‘/e107_admin/banner.php’ SQL Injection	webapps	php	High-Tech Bridge SA
2010-04-21	wb news (webmobo) 2.3.3 – Persistent Cross-Site Scripting	webapps	php	ITSecTeam
2010-04-21	LightNEasy 3.1.x – Multiple Vulnerabilities	webapps	php	ITSecTeam
2010-04-20	MIT Kerberos 5 – ‘src/kdc/do_tgs_req.c’ Ticket Renewal Double-Free Memory Corruption	remote	linux	Joel Johnson
2010-04-20	vBulletin Two-Step External Link Module – ‘externalredirect.php’ Cross-Site Scripting	webapps	php	Edgard Chammas
2010-04-20	MusicBox 3.3 – SQL Injection	webapps	php	Ctacok
2010-04-20	Speed Commander 13.10 – ‘.zip’ Memory Corruption	dos	windows	TecR0c
2010-04-20	Openregistrecil 1.02 – Local File Inclusion / Remote File Inclusion	webapps	php	cr4wl3r
2010-04-20	Multi-Threaded HTTP Server 1.1 – Directory Traversal (2)	remote	windows	Dr_IDE
2010-04-20	EasyFTP Server 1.7.0.2 – CWD Buffer Overflow (Metasploit)	remote	windows	Paul Makowski
2010-04-20	Acritum Femitter 1.03 – Directory Traversal	remote	windows	Dr_IDE
2010-04-20	Mongoose Web Server 2.8 – Multiple Directory Traversals	remote	windows	Dr_IDE
2010-04-20	Multi-Threaded HTTP Server 1.1 – Source Disclosure	remote	windows	Dr_IDE
2010-04-20	Joomla! Component JTM Reseller 1.9 Beta – SQL Injection	webapps	php	kaMtiEz