Exploits

日期	标题	类型	平台	作者
2010-02-18	gitWeb 1.5.2 – Remote Command Execution	remote	linux	S2 Crew
2010-02-18	Joomla! Component com_otzivi – Local File Inclusion	webapps	php	AtT4CKxT3rR0r1ST
2010-02-18	Open Source Classifieds 1.1.0 Alpha (OSClassi) – SQL Injection / Cross-Site Scripting / Arbitrary Admin Change	webapps	php	Sioma Labs
2010-02-18	Rising Online Virus Scanner 22.0.0.5 – ActiveX Control Stack Overflow (Denial of Service)	dos	windows	wirebonder
2010-02-18	Subex Nikira Fraud Management System GUI – ‘message’ Cross-Site Scripting	webapps	php	thebluegenius
2010-02-18	XlentProjects SphereCMS 1.1 – ‘archive.php’ SQL Injection	webapps	php	AmnPardaz Security Research Team
2010-02-17	PunBBAnnuaire 0.4 – Blind SQL Injection	webapps	php	Metropolis
2010-02-17	Erotik Auktionshaus – ‘news.php’ SQL Injection	webapps	php	Easy Laster
2010-02-17	Auktionshaus Gelb 3 – ‘news.php’ SQL Injection	webapps	php	Easy Laster
2010-02-17	Auktionshaus 4 – ‘news.php’ SQL Injection	webapps	php	Easy Laster
2010-02-17	PHPIDS 0.4 – Remote File Inclusion	webapps	php	eidelweiss
2010-02-17	Multiple File Attachments Mail Form Pro 2.0 – Arbitrary File Upload	webapps	php	EgoPL
2010-02-17	uGround 1.0b – SQL Injection	webapps	php	Easy Laster
2010-02-17	Joomla! Component com_acteammember – SQL Injection	webapps	php	ALTBTA
2010-02-17	Nabernet – ‘articles.php’ SQL Injection	webapps	php	AtT4CKxT3rR0r1ST
2010-02-17	intuitive – ‘form.php’ SQL Injection	webapps	php	AtT4CKxT3rR0r1ST
2010-02-17	Joomla! Component com_acprojects – SQL Injection	webapps	php	AtT4CKxT3rR0r1ST
2010-02-17	Joomla! Component com_acstartseite – SQL Injection	webapps	php	AtT4CKxT3rR0r1ST
2010-02-17	Symantec (Multiple Products) – Client Proxy ActiveX ‘CLIproxy.dll’ Remote Overflow	remote	windows	Alexander Polyakov
2010-02-17	Apple iTunes 9.0.1 – ‘.pls’ Handling Buffer Overflow	local	multiple	S2 Crew
2010-02-16	Mambo Component ‘com_acnews’ – ‘id’ SQL Injection	webapps	php	Zero Bits & Xzit3
2010-02-16	Pogodny CMS – SQL Injection	webapps	php	Ariko-Security
2010-02-16	EziScript Google Page Rank 1.1 – Cross-Site Scripting	webapps	php	sarabande
2010-02-16	Extreme Mobster – ‘login’ Cross-Site Scripting	webapps	php	indoushka
2010-02-16	wh-em.com upload 7.0 – Insecure Cookie Authentication Bypass	webapps	php	indoushka
2010-02-16	BGSvetionik BGS CMS – ‘search’ Cross-Site Scripting	webapps	php	hacker@sr.gov.yu
2010-02-16	Huawei HG510 – Multiple Cross-Site Request Forgery Vulnerabilities	remote	hardware	Ivan Markovic
2010-02-16	Portrait Software Portrait Campaign Manager 4.6.1.22 – Multiple Cross-Site Scripting Vulnerabilities	webapps	asp	Roel Schouten
2010-02-16	Limny 2.0 – Cross-Site Request Forgery (Create Admin User)	webapps	php	Luis Santana
2010-02-16	Limny 2.0 – Cross-Site Request Forgery (Change Email and Password)	webapps	php	Luis Santana
2010-02-16	SongForever.com Clone – Arbitrary File Upload	webapps	php	indoushka
2010-02-16	OtsTurntables Free 1.00.047 – ‘.olf’ Universal Buffer Overflow	local	windows	mr_me
2010-02-15	superengine CMS (Custom Pack) – SQL Injection	webapps	php	10n1z3d
2010-02-15	Généré par KDPics 1.18 – Remote Add Admin	webapps	php	snakespc
2010-02-15	iOS FTP On The Go 2.1.2 – HTTP Remote Denial of Service	dos	ios	TecR0c
2010-02-15	Wireshark 1.2.5 – LWRES getaddrbyname Buffer Overflow	remote	windows	Nullthreat & Pure|Hate
2010-02-15	EasyFTP Server 1.7.0.2 – (Authenticated) Buffer Overflow (PoC)	dos	windows	loneferret
2010-02-15	Apache mod_rewrite – LDAP protocol Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-02-15	EasyFTP Server 1.7.0.2 – (Authenticated) Buffer Overflow (SEH) (PoC)	dos	windows	loneferret
2010-02-15	EasyFTP Server 1.7.0.2 – (Authenticated) Buffer Overflow (1)	remote	windows	dookie
2010-02-15	iOS My DBLite Edition – Remote Denial of Service	dos	ios	Jason Bowes
2010-02-15	microUpload – Arbitrary File Upload	webapps	php	Phenom
2010-02-15	Ollydbg 2.00 Beta1 – Local Buffer Overflow	local	windows	_SuBz3r0_
2010-02-15	Joomla! Component com_hdvideoshare – SQL Injection	webapps	php	snakespc
2010-02-15	httpdx 1.5 – ‘MKD’ Directory Traversal	remote	windows	fb1h2s
2010-02-15	Joomla! Component com_joomportfolio – Blind Injection	webapps	php	snakespc
2010-02-15	blog ink – Bypass Setting	webapps	php	indoushka
2010-02-15	Alt-N WebAdmin – USER Buffer Overflow (Metasploit)	remote	windows	Metasploit
2010-02-15	CoffieNet CMS – Admin Bypass	webapps	php	indoushka
2010-02-15	Dodo Upload 1.3 – Arbitrary File Upload (Bypass)	webapps	php	indoushka