Exploits

日期	标题	类型	平台	作者
2010-03-18	ZippHo 3.0.6 – ‘.zip’ Local Stack Buffer Overflow	local	windows	mr_me
2010-03-18	DewNewPHPLinks 2.1.0.1 – Local File Inclusion	webapps	php	ITSecTeam
2010-03-18	Mediacoder – ‘.lst’ Local Buffer Overflow	local	windows	fl0 fl0w
2010-03-18	tenfourzero.net Shutter 0.1.4 – ‘admin.html’ Multiple SQL Injections	webapps	php	blake
2010-03-18	ManageEngine ServiceDesk Plus 7.6 – woID SQL Injection	webapps	jsp	Nahuel Grisolia
2010-03-18	mplayer 4.4.1 – Null Pointer Dereference (PoC)	dos	multiple	Pietro Oliva
2010-03-18	myMP3-Player 3.0 – ‘.m3u’ Local Buffer Overflow (SEH)	local	windows	n3w7u
2010-03-18	SOFTSAURUS 2.01 – Multiple Remote File Inclusions	webapps	php	cr4wl3r
2010-03-18	Mozilla Firefox 3.6 – Image Preloading Content-Policy Check Security Bypass	remote	linux	Josh Soref
2010-03-18	nensor CMS 2.01 – Multiple Vulnerabilities	webapps	php	cr4wl3r
2010-03-17	Joomla! Component com_ckforms – Multiple Vulnerabilities	webapps	php	ALTBTA
2010-03-17	PostNuke FormExpress Module – Blind SQL Injection	webapps	php	Ali Abbasi
2010-03-17	Preisschlacht Multi Liveshop System – ‘index.php?aid’ SQL Injection	webapps	php	Easy Laster
2010-03-17	Joomla! Component com_include – SQL Injection	webapps	php	DevilZ TM
2010-03-17	ChillyCMS – Cross-Site Request Forgery	webapps	php	pratul agrawal
2010-03-17	Clain_TIger_CMS – Cross-Site Request Forgery	webapps	php	pratul agrawal
2010-03-17	PHPBB2 Plus 1.53 – ‘kb.php’ SQL Injection	webapps	php	Gamoscu
2010-03-17	Joomla! Component com_alert – ‘q_item’ SQL Injection	webapps	php	N2n-Hacker
2010-03-17	Microsoft Windows Media Player 11 – ‘.AVI’ File Colorspace Conversion Remote Memory Corruption	dos	windows	ITSecTeam
2010-03-17	Joomla! Component com_vxdate – Multiple Vulnerabilities	webapps	php	MustLive
2010-03-17	eFront 3.5.5 – ‘langname’ Local File Inclusion	webapps	php	7Safe
2010-03-17	VariCAD 2010-2.05 EN – Local Buffer Overflow	local	multiple	n00b
2010-03-17	PHP-Nuke – ratedownload SQL Injection	webapps	php	ITSecTeam
2010-03-17	Adobe Reader PDF – LibTiff Integer Overflow Code Execution	local	windows	villy
2010-03-17	Virtual PC Hypervisor – Memory Protection	local	windows	Core Security
2010-03-16	Windisc 1.3 – Local Stack Buffer Overflow	local	windows	Rick2600
2010-03-16	OSSIM 2.2 – Multiple Vulnerabilities	webapps	php	Nahuel Grisolia
2010-03-16	eGroupWare 1.6.002 and eGroupWare premium line 9.1 – Multiple Vulnerabilities	webapps	php	Nahuel Grisolia
2010-03-16	phpscripte24 Auktionshaus Community Standart System – Blind SQL Injection	webapps	php	Easy Laster
2010-03-16	Short URL 1.01 – Local File Inclusion	webapps	php	Pouya Daneshmand
2010-03-16	Online Community CMS by I-net – SQL Injection	webapps	php	Th3 RDX
2010-03-16	Free Real Estate Contact Form 1.09 – Local File Inclusion	webapps	php	Pouya Daneshmand
2010-03-16	Joomla! Component com_rwcards – Local File Inclusion	webapps	php	ALTBTA
2010-03-16	Joomla! Component com_as – ‘catid’ SQL Injection	webapps	php	N2n-Hacker
2010-03-16	osCMax 2.0 – ‘FCKeditor’ Arbitrary File Upload	webapps	php	ITSecTeam
2010-03-16	WFTPD 3.3 – Remote REST Denial of Service	dos	linux	dmnt
2010-03-15	Dojo Toolkit 1.4.1 – ‘/dijit/tests/_testCommon.js?theme’ Cross-Site Scripting	webapps	multiple	Adam Bixby
2010-03-15	iPhone Springboard – Malformed Character Crash (PoC)	dos	hardware	Chase Higgins
2010-03-15	Liquid XML Studio 2010 < 8.061970 - 'LtXmlComHelp8.dll OpenFile()' Remote Overflow	remote	windows	mr_me
2010-03-15	Domain Verkaus & Auktions Portal – ‘index.php’ SQL Injection	webapps	php	Easy Laster
2010-03-15	Newbie CMS – File Disclosure	webapps	php	JIKO
2010-03-15	Subdreamer 3.0.1 – CMS upload	webapps	php	indoushka
2010-03-15	Andromeda 1.9.2 – ‘s’ Cross-Site Scripting / Session Fixation	webapps	php	indoushka
2010-03-15	Joomla! Component com_route – SQL Injection	webapps	php	N2n-Hacker
2010-03-15	Interspire SHOPPING CART 5.5.4 – Ultimate Edition backup dump	webapps	php	indoushka
2010-03-15	Pars CMS – ‘RP’ Multiple SQL Injections	webapps	asp	Isfahan
2010-03-15	Joomla! Component com_bidding – SQL Injection	webapps	php	N2n-Hacker
2010-03-15	CH-CMS.ch 2 – Arbitrary File Upload	webapps	php	EL-KAHINA
2010-03-15	(Multiple Products) – ‘banner.swf’ Cross-Site Scripting	webapps	multiple	MustLive
2010-03-15	ArGoSoft FTP Server .NET 1.0.2.1 – Directory Traversal	remote	windows	dmnt