Exploits

日期	标题	类型	平台	作者
2010-03-23	Zephyrus CMS – ‘index.php’ SQL Injection	webapps	php	Phenom
2010-03-23	PHPAuthent 0.2.1 – ‘useradd.php’ Multiple HTML Injection Vulnerabilities	webapps	php	Yoyahack
2010-03-22	Joomla! Component com_flash – SQL Injection	webapps	php	DevilZ TM
2010-03-22	freeSSHd 1.2.4 – Denial of Service	dos	windows	Pi3rrot
2010-03-22	PHPKIT 1.6.x – ‘b-day.php’ Addon SQL Injection	webapps	php	n3w7u
2010-03-22	New Advisore Stack 1.1 – Directory Traversal	webapps	php	R3VAN_BASTARD
2010-03-22	PowieSys 0.7.7 alpha – ‘index.php’ shownews SQL Injection	webapps	php	Easy Laster
2010-03-22	Donar Player 2.2.0 – Local Crash (PoC)	dos	windows	b0telh0
2010-03-22	agXchange ESM – ‘ucschcancelproc.jsp’ Open Redirection	webapps	jsp	Lament
2010-03-22	Apple Safari 4.0.5 – Object Tag ‘JavaScriptCore.dll’ Crash (Denial of Service)	dos	windows	3lkt3F0k4
2010-03-22	Uiga Fan Club – SQL Injection	webapps	php	Sioma Labs
2010-03-22	CMS Openpage – ‘index.php’ SQL Injection	webapps	php	Phenom
2010-03-22	Mini-CMS RibaFS 1.0 – Authentication Bypass	webapps	php	cr4wl3r
2010-03-22	Kenward Zipper 1.4 – Local Stack Buffer Overflow	local	windows	mr_me
2010-03-21	WebMaid CMS 0.2-6 Beta – Multiple Remote File Inclusions	webapps	php	cr4wl3r
2010-03-21	Fw-BofF (oolime-resurrection) 1.5.3beta – Multiple Remote File Inclusions	webapps	php	cr4wl3r
2010-03-21	Woltlab Burning Board Lite Addon – ‘lexikon.php’ SQL Injection	webapps	php	n3w7u
2010-03-21	Crimson Editor r3.70 – Overwrite (SEH)	local	windows	mr_me
2010-03-21	no$gba 2.5c – ‘.nds’ Local crash	dos	windows	l3D
2010-03-21	Jewelry Cart Software – ‘product.php’ SQL Injection	webapps	php	Asyraf
2010-03-21	Adult Video Site Script – Multiple Vulnerabilities	webapps	php	indoushka
2010-03-21	Woltlab Burning Board Teamsite Hack 3.0 – ‘ts_other.php’ SQL Injection	webapps	php	Easy Laster
2010-03-21	4x CMS – ‘login.php’ Multiple SQL Injections	webapps	php	cr4wl3r
2010-03-21	4x CMS r26 – Authentication Bypass	webapps	php	cr4wl3r
2010-03-21	NotSopureEdit 1.4.1 – Remote File Inclusion	webapps	php	cr4wl3r
2010-03-20	ZKSoftware ‘ZK5000’ – Remote Information Disclosure	remote	multiple	fb1h2s
2010-03-20	Trouble Ticket Software – ‘ttx.cgi’ Arbitrary File Download	webapps	cgi	n01d
2010-03-20	ZKSoftware Biometric Attendence Managnmnet Hardware[MIPS] 2 – Improper Authentication	remote	hardware	fb1h2s
2010-03-20	Remote Help HTTP 0.0.7 – GET Format String Denial of Service	dos	windows	Rick2600
2010-03-20	eDisplay Personal FTP Server 1.0.0 – (Authenticated) Multiple Stack Buffer Overflows (1)	remote	windows	corelanc0d3r
2010-03-20	KDE 4.4.1 – Ksysguard Remote Code Execution (via Cross Application Scripting)	remote	multiple	emgent
2010-03-20	Pay Per Watch & Bid Auktions System – ‘auktion.php?id_auk’ Blind SQL Injection	webapps	php	Easy Laster
2010-03-20	Joomla! Component Gift Exchange com_giftexchange 1.0 Beta – ‘pkg’ SQL Injection	webapps	php	Chip d3 bi0s
2010-03-19	PHPscripte24 Preisschlacht Liveshop System – ‘index.php?aid’ SQL Injection	webapps	php	Easy Laster
2010-03-19	eDisplay Personal FTP Server 1.0.0 – (Authenticated) Multiple Crashs (SEH) (PoC)	dos	windows	loneferret
2010-03-19	eDisplay Personal FTP Server 1.0.0 – Denial of Service (PoC)	dos	windows	loneferret
2010-03-19	quality point 1.0 newsfeed – SQL Injection / Cross-Site Scripting	webapps	php	Red-D3v1L
2010-03-19	vBulletin 4.0.2 – Search Cross-Site Scripting	webapps	php	5ubzer0
2010-03-19	IBM Lotus Notes 6.5.x – ‘names.nsf’ Cross-Site Scripting	remote	multiple	Lament
2010-03-19	PHPWind 6.0 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Liscker
2010-03-19	Xilisoft Video Converter Wizard – ‘.yuv’ Stack Buffer Overflow	dos	windows	ITSecTeam
2010-03-19	IBM Lotus Notes 6.5.6 – ‘names.nsf’ Open Redirection	remote	multiple	Lament
2010-03-19	Joomla! Component & Plugin JE Tooltip 1.0 – Local File Inclusion	webapps	php	Chip d3 bi0s
2010-03-19	DirectAdmin 1.34.4 – Multiple Cross-Site Request Forgerys	webapps	php	K053
2010-03-18	myMP3-Player 3.0 – ‘.m3u’ Local Buffer Overflow (SEH)	local	windows	n3w7u
2010-03-18	SOFTSAURUS 2.01 – Multiple Remote File Inclusions	webapps	php	cr4wl3r
2010-03-18	nensor CMS 2.01 – Multiple Vulnerabilities	webapps	php	cr4wl3r
2010-03-18	Mozilla Firefox 3.6 – Image Preloading Content-Policy Check Security Bypass	remote	linux	Josh Soref
2010-03-18	phpscripte24 Niedrig Gebote Pro Auktions System II – Blind SQL Injection	webapps	php	Easy Laster
2010-03-18	Crimson Editor – Overwrite (SEH)	dos	windows	sharpe