Exploits

日期	标题	类型	平台	作者
2010-02-11	Cisco Collaboration Server 5 – Cross-Site Scripting / Source Code Disclosure	webapps	multiple	s4squatch
2010-02-11	vBulletin 3.5.4 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	ROOT_EGY
2010-02-11	Books/eBooks Rental Software – SQL Injection	webapps	php	Don Tukulesto
2010-02-11	CD Rentals Script – SQL Injection	webapps	php	Don Tukulesto
2010-02-11	RadASM 2.2.1.6 – ‘.rap’ Universal Buffer Overflow	local	windows	Dz_attacker
2010-02-11	myPHP Guestbook 2.0.4 – Database Backup Dump	webapps	php	ViRuSMaN
2010-02-11	GameRoom Script – Authentication Bypass / Arbitrary File Upload	webapps	php	JIKO
2010-02-11	PHP Captcha Security Images – Denial of Service	dos	php	cp77fk4r
2010-02-11	CommodityRentals CD Rental Software – ‘index.php’ SQL Injection	webapps	php	Don Tukulesto
2010-02-11	Trade Manager Script – SQL Injection	webapps	php	JaMbA
2010-02-11	vBulletin 2.3.x – SQL Injection	webapps	php	ROOT_EGY
2010-02-10	(Gabriel’s FTP Server) Open & Compact FTPd 1.2 – Crash (PoC)	dos	windows	loneferret
2010-02-10	ULoki Community Forum 2.1 – ‘usercp.php’ Cross-Site Scripting	webapps	php	Sioma Labs
2010-02-10	WM Downloader 3.0.0.9 (Windows XP SP3) – PLS PLA	local	windows	Beenu Arora
2010-02-10	HASHE! Solutions – Multiple SQL Injections	webapps	php	AtT4CKxT3rR0r1ST
2010-02-10	eSmile Script – ‘index.php’ SQL Injection	webapps	php	AtT4CKxT3rR0r1ST
2010-02-10	Accellion Secure File Transfer Appliance – Multiple Command Restriction / Privilege Escalations	local	linux	Tim Brown
2010-02-10	Accellion File Transfer – ‘Appliance web_client_user_guide.html?lang’ Traversal Arbitrary File Access	remote	linux	Tim Brown
2010-02-09	UltraISO 9.3.6.2750 – Local Buffer Overflow	local	windows	fl0 fl0w
2010-02-09	MOJO’s IWms 7 – SQL Injection / Cross-Site Scripting	webapps	asp	cp77fk4r
2010-02-09	Yes Solutions – Webapp SQL Injection	webapps	php	HackXBack
2010-02-09	NewsLetter Tailor – Authentication Bypass	webapps	php	ViRuSMaN
2010-02-09	Microsoft Windows Vista/2008 – ICMPv6 Router Advertisement Remote Code Execution	remote	windows	Sumit Gwalani
2010-02-09	NewsLetter Tailor – Database Backup Dump	webapps	php	ViRuSMaN
2010-02-09	Microsoft Windows XP/Vista/2000/2003 – Double-Free Memory Corruption Privilege Escalation	local	windows	Tavis Ormandy
2010-02-09	CPA Site Solutions – Arbitrary File Upload	webapps	php	R3VAN_BASTARD
2010-02-09	LDAP – Injection	local	multiple	mc2_s3lector
2010-02-09	UltraISO 9.3.6.2750 – Local Buffer Overflow (PoC)	dos	windows	fl0 fl0w
2010-02-09	fipsForum 2.6 – Remote Database Disclosure	webapps	asp	ViRuSMaN
2010-02-09	osTicket 1.6 RC5 – Multiple Vulnerabilities	webapps	php	Nahuel Grisolia
2010-02-09	feedDemon 3.1.0.9 – ‘.opml’ File Buffer Overflow	local	windows	fl0 fl0w
2010-02-09	NewsLetter Tailor 0.2.0 – Remote File Inclusion	webapps	php	snakespc
2010-02-09	vBulletin Adsense Component – ‘viewpage.php’ SQL Injection	webapps	php	JIKO
2010-02-09	Limny 1.01 – Arbitrary File Upload	webapps	php	JIKO
2010-02-09	Fonts Site Script – Remote File Disclosure	webapps	php	JIKO
2010-02-09	ThinkPHP 2.0 – ‘index.php’ Cross-Site Scripting	webapps	php	zx
2010-02-09	Zomorrod CMS – SQL Injection	webapps	php	Pouya Daneshmand
2010-02-09	WM Downloader 3.0.0.9 – PLS WMDownloader (PoC)	dos	windows	JIKO
2010-02-08	JDownloader – ‘JDExternInterface.java’ Remote Code Execution	remote	multiple	apoc
2010-02-08	Linux Kernel 2.6.18 – ‘move_pages()’ Information Leak	local	linux	spender
2010-02-08	GeFest Web Home Server 1.0 – Directory Traversal	remote	windows	Markot
2010-02-08	Blue Dove – SQL Injection	webapps	php	HackXBack
2010-02-08	JaxCMS 1.0 – Local File Inclusion	webapps	php	Hamza 'MizoZ' N.
2010-02-08	VideoDB 3.0.3 – ‘login.php’ Cross-Site Scripting	webapps	php	vr
2010-02-08	Zen Time Tracking 2.2 – Multiple SQL Injections	webapps	php	cr4wl3r
2010-02-08	Aflam Online 1.0 – ‘index.php’ SQL Injection	webapps	php	alnjm33
2010-02-08	Mongoose 2.8 – Space String Remote File Disclosure	remote	multiple	Pouya Daneshmand
2010-02-07	Croogo 1.2.1 – Multiple Cross-Site Request Forgery Vulnerabilities	webapps	php	Milos Zivanovic
2010-02-07	Joomla! Component com_productbook – SQL Injection	webapps	php	snakespc
2010-02-07	Solaris/Open Solaris UCODE_GET_VERSION IOCTL – Denial of Service	dos	solaris	Patroklos Argyroudis