Exploits

日期	标题	类型	平台	作者
2010-03-09	Orbital Viewer – ‘.ORB’ File Parsing Buffer Overflow (Metasploit)	local	windows	Metasploit
2010-03-09	Lenovo Hotkey Driver 5.33 – Local Privilege Escalation	local	windows	Chilik Tamir
2010-03-09	Apache SpamAssassin Milter Plugin 0.3.1 – Remote Command Execution	remote	multiple	kingcope
2010-03-09	SAP GUI 7.10 – WebViewer3D Active-X JIT-Spray	remote	windows	Alexey Sintsov
2010-03-09	PHP File Sharing System 1.5.1 – Multiple Vulnerabilities	webapps	php	blake
2010-03-09	IBM ENOVIA SmarTeam – ‘LoginPage.aspx’ Cross-Site Scripting	webapps	asp	Lament
2010-03-09	TikiWik < 4.2 - Multiple Vulnerabilities	webapps	php	Mateusz Drygas
2010-03-09	nus newssystem 1.02 – ‘id’ SQL Injection	webapps	php	n3w7u
2010-03-09	Wild CMS – SQL Injection	webapps	php	Ariko-Security
2010-03-09	mhproducts Kleinanzeigenmarkt – ‘search.php’ SQL Injection	webapps	php	Easy Laster
2010-03-09	JAD java Decompiler 1.5.8g – ‘.class’ Stack Overflow Denial of Service	dos	windows	l3D
2010-03-09	JAD java Decompiler 1.5.8g – ‘argument’ Local Crash	dos	windows	l3D
2010-03-09	EasyFTP Server 1.7.0.2 – CWD Remote Buffer Overflow (Metasploit)	remote	windows	blake
2010-03-09	Joomla! Component com_hezacontent 1.0 – ‘id’ SQL Injection	webapps	php	kaMtiEz
2010-03-08	Chaton 1.5.2 – Local File Inclusion	webapps	php	cr4wl3r
2010-03-08	QuickZip 4.x – ‘.zip’ Local Universal Buffer Overflow	local	windows	corelanc0d3r & mr_me
2010-03-08	TRIBISUR 2.0 – Local File Inclusion	webapps	php	cr4wl3r
2010-03-08	DZ Auktionshaus ‘V4.rgo’ – ‘id’ news.php?SQL Injection	webapps	php	Easy Laster
2010-03-08	KDPics 1.18 – ‘/admin/index.php’ Authentication Bypass	webapps	php	snakespc
2010-03-08	ASPCode CMS 1.5.8 – ‘default.asp’ Multiple Cross-Site Scripting Vulnerabilities	webapps	asp	Alberto Fontanella
2010-03-08	Max Network Technology BBSMAX 4.2 – ‘post.aspx’ Cross-Site Scripting	webapps	asp	Liscker
2010-03-08	Pre E-Learning Portal – ‘search_result.asp’ SQL Injection	webapps	asp	NoGe
2010-03-08	Microsoft Windows XP/Vista – ‘.ani tagBITMAPINFOHEADER’ Denial of Service	dos	windows	Skylined
2010-03-07	OpenCart 1.3.2 – ‘page’ SQL Injection	webapps	php	Andrés Gómez
2010-03-07	TopDownloads MP3 Player 1.0 – ‘.m3u’ Crash	dos	windows	l3D
2010-03-07	(Tod Miller’s) Sudo/SudoEdit 1.6.9p21/1.7.2p4 – Local Privilege Escalation	local	multiple	kingcope
2010-03-07	Apache 2.2.14 mod_isapi – Dangling Pointer Remote SYSTEM	remote	windows	Brett Gervasoni
2010-03-07	Bild Flirt System 2.0 – ‘index.php?id’ SQL Injection	webapps	php	Easy Laster
2010-03-07	Yahoo Player 1.0 – ‘.m3u’ / ‘.pls’ / ‘.ypl’ Local Buffer Overflow (SEH)	local	windows	Mr.tro0oqy
2010-03-07	BigForum 4.5 – SQL Injection	webapps	php	Ctacok
2010-03-06	dev4u CMS (Personenseiten) – ‘go_target.php’ SQL Injection	webapps	php	Easy Laster
2010-03-06	PHPCOIN 1.2.1 – ‘mod.php’ Local File Inclusion	webapps	php	_mlk_
2010-03-06	Google Chrome 4.0.249 – XML Denial of Service (PoC)	dos	windows	Blade
2010-03-06	Microsoft Windows XP/2000 – Help File Relative Path Remote Command Execution	remote	windows	Secumania
2010-03-06	phpCOIN 1.2.1 – ‘mod’ Local File Inclusion	webapps	php	_mlk_
2010-03-06	Flare 0.6 – Local Heap Overflow Denial of Service	dos	multiple	l3D
2010-03-05	Saskia’s ShopSystem – ‘id’ Local File Inclusion	webapps	php	cr4wl3r
2010-03-05	Spectrum Software WebManager CMS – ‘pojam’ Cross-Site Scripting	webapps	asp	hacker@sr.gov.yu
2010-03-05	E-topbiz Link ADS 1 PHP script – ‘linkid’ Blind SQL Injection	webapps	php	JosS
2010-03-05	Auktionshaus 3.0.0.1 – ‘news.php?id’ SQL Injection	webapps	php	Easy Laster
2010-03-05	VideoLAN VLC Media Player 1.0.x – Bookmark Creation Buffer Overflow	remote	windows	Gjoko Krstic
2010-03-05	Kolang 4.3.10 < 5.3.0 - 'proc_open()' PHP 'safe_mode' Bypass	webapps	php	Hamid Ebadi
2010-03-05	BS.Player 2.51 – ‘.mp3’ Buffer Overflow	dos	windows	Gjoko Krstic
2010-03-05	OneCMS 2.5 – SQL Injection	webapps	php	Ctacok & .:[melkiy]:
2010-03-05	Natychmiast CMS – Multiple Cross-Site Scripting / SQL Injections	webapps	php	Maciej Gojny
2010-03-05	FreeBSD 8.0 / OpenBSD 4.x – ‘ftpd’ Null Pointer Dereference Denial of Service	dos	bsd	kingcope
2010-03-05	Six Apart Vox – ‘search’ Page Cross-Site Scripting	webapps	multiple	Phenom
2010-03-04	Comptel Provisioning and Activation – ‘index.jsp?error_msg_parameter’ Cross-Site Scripting	webapps	jsp	thebluegenius
2010-03-04	J. River Media Jukebox 12 – ‘.mp3’ Remote Heap Buffer Overflow	dos	windows	Gjoko Krstic
2010-03-04	Sagem Routers – Remote Authentication Bypass	webapps	hardware	AlpHaNiX