Exploits

日期	标题	类型	平台	作者
2010-03-13	Xbtit 2.0.0 – SQL Injection	webapps	php	Ctacok
2010-03-13	PHP (Multiple Functions) – Local Denial of Service	dos	multiple	Yakir Wizman
2010-03-13	systemsoftware Community Black – ‘index.php’ SQL Injection	webapps	php	Easy Laster
2010-03-13	Mackeitone Media Player – ‘.m3u’ Stack Buffer Overflow	dos	windows	ITSecTeam
2010-03-12	Joomla! Component com_juliaportfolio – Local File Inclusion	webapps	php	DevilZ TM
2010-03-12	Media Player classic StatsReader – ‘.stats’ Stack Buffer Overflow (PoC)	dos	windows	ITSecTeam
2010-03-12	PHP 5.3.2 ‘xmlrpc’ Extension – Multiple Remote Denial of Service Vulnerabilities	dos	php	Auke van Slooten
2010-03-12	FreeBSD / OpenBSD – ‘ftpd’ Null Pointer Dereference Denial of Service	dos	multiple	kingcope
2010-03-12	pMyAdmin 3.3.5.1 – ‘db_create.php’ Cross-Site Scripting	webapps	php	Liscker
2010-03-12	dreamlive Auktionshaus script – ‘news.php?id’ SQL Injection	webapps	php	Easy Laster
2010-03-12	Easynet4u Forum Host – ‘topic.php’ SQL Injection	webapps	php	Pr0T3cT10n
2010-03-12	Invision Power Board Currency Mod 1.3 – ‘edit’ SQL Injection	webapps	php	Yakir Wizman
2010-03-12	Easynet Forum Host – ‘topic.php’ SQL Injection	webapps	php	Yakir Wizman
2010-03-12	Joomla! Component com_family – SQL Injection	webapps	php	DevilZ TM
2010-03-12	Joomla! Component com_leader – SQL Injection	webapps	php	DevilZ TM
2010-03-12	Joomla! Component com_start – SQL Injection	webapps	php	DevilZ TM
2010-03-11	Joomla! Component com_color – SQL Injection	webapps	php	DevilZ TM
2010-03-11	Joomla! Component com_gigfe – SQL Injection	webapps	php	DevilZ TM
2010-03-11	Joomla! Component com_products – ‘intCategoryId’ SQL Injection	webapps	php	N2n-Hacker
2010-03-11	Eros Erotik Webkatalog – ‘start.php?id’ SQL Injection	webapps	php	Easy Laster
2010-03-11	Joomla! Component com_blog – SQL Injection	webapps	php	DevilZ TM
2010-03-11	Ane CMS 1 – Persistent Cross-Site Scripting	webapps	php	pratul agrawal
2010-03-11	ANE CMD CRSF – Arbitrary Add Admin	webapps	php	pratul agrawal
2010-03-11	ATutor 1.6.4 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	ITSecTeam
2010-03-11	Joomla! Component com_about – SQL Injection	webapps	php	snakespc
2010-03-11	WebKit 1.2.x – Right-to-Left Displayed Text Handling Memory Corruption	remote	linux	wushi
2010-03-11	SamaGraph CMS – ‘inside.aspx’ SQL Injection	webapps	asp	K053
2010-03-11	CodeIgniter 1.0 – ‘BASEPATH’ Multiple Remote File Inclusions	webapps	php	eidelweiss
2010-03-11	ARTIS ABTON CMS – Multiple SQL Injections	webapps	php	MustLive
2010-03-11	AneCMS 1.0 – ‘index.php’ Multiple HTML Injection Vulnerabilities	webapps	php	pratul agrawal
2010-03-11	Joomla! Component com_party – SQL Injection	webapps	php	DevilZ TM
2010-03-11	Skype – URI Handler Input Validation	remote	windows	Paul Craig
2010-03-10	Campsite 3.3.5 – Cross-Site Request Forgery	webapps	php	pratul agrawal
2010-03-10	Employee TimeClock Software 0.99 – SQL Injection	webapps	php	Secunia Research
2010-03-10	RhinoSoft Serv-U FTP Server – Session Cookie Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-03-10	SUPERAntiSpyware 4.34.1000 and SuperAdBlocker 4.6.1000 – Multiple Vulnerabilities	dos	multiple	Luka Milkovic
2010-03-10	DDL CMS 2.1 – ‘blacklist.php’ Cross-Site Scripting	webapps	php	ITSecTeam
2010-03-10	httpdx 1.5.3 – ‘.png’ File Handling Remote Denial of Service	dos	windows	Jonathan Salwan
2010-03-10	60cycleCMS – ‘select.php’ Multiple HTML Injection Vulnerabilities	webapps	php	pratul agrawal
2010-03-10	Microsoft Internet Explorer – ‘iepeers.dll’ Use-After-Free (Metasploit)	remote	windows	Trancer
2010-03-10	Friendly Technologies TR-069 ACS 2.8.9 – Login SQL Injection	webapps	multiple	Yaniv Miron
2010-03-10	Mini-stream Ripper 3.0.1.1 – ‘.m3u’ HREF Buffer Overflow	local	windows	l3D
2010-03-10	Max Network Technology BBSMAX 4.2 – ‘threadid’ Cross-Site Scripting	webapps	asp	Liscker
2010-03-10	Green Dam – URL Processing Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-03-10	ispCP Omega 1.0.4 – Remote File Inclusion	webapps	php	cr4wl3r
2010-03-10	Gazelle CMS – Cross-Site Request Forgery	webapps	php	pratul agrawal
2010-03-10	Softbiz Jobs and Recruitment Script – ‘search_result.php’ SQL Injection	webapps	php	Easy Laster
2010-03-10	PhpCityPortal – Multiple Vulnerabilities	webapps	php	R3d-D3V!L
2010-03-10	Friendly-Tech FriendlyTR69 CPE Remote Management 2.8.9 – SQL Injection	webapps	hardware	Yaniv Miron
2010-03-09	nus newssystem 1.02 – ‘id’ SQL Injection	webapps	php	n3w7u